Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [drm]

DRM (digital rights management) is the enforcement of restrictions on access control to data through technical means, such as copy protection.

0
votes
0answers
37 views

Retaining control of a document one released

This is a total noob question and is more about technical feasibility and in short is basically a question of - "can i solve piracy" but humour me. Below is a scenario, with the case study of a film. ...
1
vote
3answers
168 views

How to prevent unauthorized users from accessing an image on my server just by URL?

I have a few dynamically generated images on my server (of high business value), which are supposed to be viewed only via our mobile app. The image is simply loaded from the URL as PNG. How can I ...
0
votes
3answers
78 views

Why is it required to HMAC riv in HDCP 2.3?

In HDCP 2.3 (pdf) during the Session Key Exchange, the HDCP transmitter sends also the 256-bit HMAC of riv (HMAC-SHA256(riv, kd)). Why is it required? Does it prevent any attack?
1
vote
3answers
96 views

Per-User Image DRM for Finding a Leaker? [duplicate]

I'm managing a client that distributes their users images and files through one source. My background is heavily in development as opposed to security, and I'm of course familiar with some tricks that ...
0
votes
0answers
41 views

How do on-premises (mostly non-compiled) services enforce licenses?

How do products like GitHub on premises (https://github.com/pricing/enterprise) enforce licenses? What I mean is: if I was using a cloud service, they'd just shut me down as soon as I don't pay. But ...
2
votes
0answers
47 views

Protecting website from content theft [duplicate]

I have a website called http://example.com. there is another website called http://example1.com it has the same content as for my website. If I upload file on my website like http://example.com/test....
-1
votes
2answers
114 views

How to identify the user who revealed private mp3 to public? [duplicate]

I have a service that serves mp3 files to a small circle of people. In the case of a revelation, how could I know who had done that? What technology could I use to sign every copy of the mp3 files ...
0
votes
2answers
80 views

Is there any way to track the status of a document sent to an external entity?

I'm wondering what the capabilities for document (PDF/DOCX/XLSX/PPTX) tracking are , specifically to determine whether a client has broken a non-disclosure agreement. Here's a scenario: Service ...
0
votes
0answers
160 views

How can Web Crypto API and IndexedDB protect data stored on the client side against user manipulation?

Imagine web apps that are supposed to work with no or only a few interactions with the web server, for example: a browser game in which the player's level and progress are to be saved locally. a game,...
1
vote
0answers
95 views

How secure is a file on a raspberry pi?

Let's say I change the password for the root & pi user to something impossible to brute force, say 20 characters. Then in one of my files on my raspberry pi, I hardcode a password. Is this ...
17
votes
1answer
3k views

How difficult is it to intercept the POST response body when SSL is used?

For an Android application that is performing POST requests (JSON) over SSL and receiving a JSON object as a response, how difficult is it to get the JSON response? Is the easiest way to decompile ...
1
vote
1answer
152 views

Are the details about the Widevine bug now public?

There was a bug in Widevine last year which enabled downloading Encrypted Media Extension Content. They stated that they would give full details after 90 days. Was this meant for public disclosure or ...
-1
votes
1answer
80 views

Audio steganography and DRM

I recently made a post about an audio steganography program and had another concern I thought I might ask. I understand that most music has DRM in them. If I hide secret files in audio files with DRM ...
3
votes
2answers
155 views

DRM using embedded private key

I've started learning about cryptography used for DRM solutions, and curious to know if this is a valid solution for a custom embedded system running purchased software assets. ECDSA public / private ...
3
votes
0answers
174 views

How does video protection work when someone is recording their screen?

I forgot to turn my video recorder off and accidentally recorded my screen when I watched some series on some website. When I re-watched the video a few weeks later, I noticed that the part where the ...
1
vote
0answers
23 views

Can files be retrieved from a VM instance state that was initially encrypted on a disk?

If I were to make a VM disk that was encrypetd, boot it, enter the encrypted passphrase and save the resulting 'image state' (of the running VM). Would this image have the 'encrypted' files easily ...
3
votes
1answer
65 views

How protected are files within a running encrypted VM on a possibly non secure hypervisor / host?

I've got a set of source code files (compiled C#) that I want to prevent direct read access to. The program will be running on the VM. I was thinking of storing these in an encrypted hard disk VM, the ...
1
vote
0answers
362 views

Can we screen record Netflix strems? [duplicate]

No I don't want to do it and I don't have a Netflix account but I have heard the different ways Netflix uses DRM to protect its content such as encrypted streaming and watermark. But someone can just ...
0
votes
1answer
185 views

What is the mechanism to protect photos uploaded on social media? [closed]

I know water mark the photograph is one method to protect ones copyright over the picture. is there any other technique through which one can prevent or detect the plagiarism of photos.
0
votes
1answer
77 views

Digital watermarking for detecting Copyright infringement - video file of customer A and B have same SHA Checksums?

Sometimes I buy in a online shop video files (mp4). The online shop forces it's customers to buy with verified real name. In case of leaking his content the shop can identity who leaked it. I don't ...
0
votes
2answers
119 views

Is Amazon Prime DRM able to scan a LAN for devices and services? [closed]

My company has signed up for Amazon Prime to watch some videos. They were asked to enable Amazon Prime DRM. Will this open up a security hole in our LAN? I am worried that they could start scanning ...
0
votes
1answer
121 views

Best way to secure documents? [closed]

I'm currently tasked with securing our documents stored in our NAS. Basically, the minimum requirements that is needed are; 1) Watermarking Ability(Any file viewed/downloaded or printed will have the ...
1
vote
2answers
87 views

How to provide to your Webpage a security like Wix and how to break that security

I have read several articles related to the "impossibility to fully protect your Website from being copied (please, check, for instance: Prevent my site from being copied). So, how is it possible for ...
33
votes
5answers
7k views

Is it possible to embed information that is both nearly invisible to the naked eye and decodable from an external camera?

I am interested in watermarking a video for copyright purposes. The requirements are as follows: The watermark must be barely noticeable to the naked eye. The watermark must be able to be extracted ...
0
votes
1answer
63 views

Media content protection [closed]

I have been trying to encrypt media(Video and audio content) from a nodejs server to a client like android or iOS. I heard of DRM but could not get a reliable implementation of DRM. I wanted to make ...
0
votes
3answers
240 views

Securing a video using encryption

Videos uploaded on Youtube or any other video streaming website can be easily downloaded by using 3rd party software. In order to prevent the viewers from sharing the video to unauthorised people. I ...
-1
votes
2answers
141 views

How to protect icon images that are sold online from being stolen? [duplicate]

I have been lately browsing material icons from this site. I started to notice that they don't have any free plans as such so you will have to buy the icons if you want to download them. But however ...
2
votes
2answers
241 views

DRM - Make sure that a SDK is used by the client legally

We are an IT startup which provides some clients with a Software Development Kit, which may be used by the client within a specific environment, according to some terms and legal agreement. Especially,...
1
vote
0answers
350 views

Does any DRM system work within a Virtual Machine? [closed]

I'm running a few quick tests to see if any DRM system works on a VM. Notably, most DRM systems (haven't found one yet), don't work on a virtual device: iPhone Simulator on OSX (FairPlay) Windows ...
1
vote
0answers
490 views

How is the Apple FairPlay Server Playback Context (SPC) message generated?

I'm researching encryption tools that use OS-verified hardware such as a TPM or Secure Element. Given that FairPlay only works on iOS and certain Mac hardware, I suspect there is some interaction ...
-1
votes
1answer
165 views

Canvas: DRM for websites?

If you look at my post history, you will realize that preventing websites from being ripped has been a goal of mine lately. Recently, I came across a game developed within the browser using Canvas ...
1
vote
1answer
140 views

A file that doesn't allow copy/paste or print

We know that Adobe pdf's convenient control features for discouraging copy/paste and print are not real security measures. We are searching for a way to create a file that has default security set ...
3
votes
4answers
574 views

Received letter from attorney stating they found a pirated copy of software on my computer based on my MAC address [closed]

Is this correct? Can a MAC address lead a company to the specific user? They have my phone number and an old email address for me. The information they sent me is showing a MAC address and the ...
0
votes
2answers
103 views

How to prevent bypass of user agreement window

I have a file on my website which users can download. After clicking the download button, then I show a div with user agreements and two buttons, "accept user agreement" and "decline user agreement". ...
3
votes
2answers
420 views

How does HDCP detection work?

What is the mechanism used by websites like HBO GO to detect HDCP bypassing/violation? How foolproof is this mechanism, as the logic lies on the client side?
0
votes
1answer
42 views

Tutorial Video Protection on a Tablet

I am planning to start tutorial videos. I thought of buying a tablet and then putting the videos on the tablet. My major concern is that the students shouldn't be able to copy the videos. They ...
-5
votes
1answer
143 views

Effective methods of preventing people ripping HTML/CSS/JS off my site via right click “save-as”? [duplicate]

PS: My last question was marked duplicated incorrectly. For all those marking this as a duplicate of the image copying question posted earlier, I am not interested in preventing just image copying. I ...
0
votes
1answer
228 views

Why is it a security risk to use Apple's receipt validation service directly from a device?

If you watch this video at 52:05 he says, "Never, never, never, ever send the receipt directly from your app on a device to the validation service." He goes on to say, "Its way too easy for someone ...
1
vote
1answer
3k views

What's the difference between DRM and CAS?

As I see it, both are used within the scope of content security, to restrict who has access to what. So what's the difference between a DRM system and a Conditional Access System? Is CAS a subset of ...
4
votes
2answers
987 views

Best practice for securing encrypted content on Android app

I have an Android APK which loads in locally stored content files protected by AES encryption, and I want to keep the encryption key secret from all users. Only the app itself should be able to read ...
0
votes
1answer
186 views

Refuse download request, but allow use online

How can I let end-users listening to my website's musics to play the songs, but reject their request if they are going to download the song via download manager or etc.? For example, it would be nice ...
1
vote
2answers
2k views

How do OTT providers protect LIVE streams?

For Video on Demand, DRM seems the way to go. I've been told that providers might be using a token-based system, but I haven't found any provider so far that uses token, just DRM (except Akamai, ...
0
votes
2answers
166 views

Is encryption an efficient way to protect digital media?

Recently my friend and I were discussing his idea of protecting the digital media that he has been generating. His initial idea was to encode the data using proprietary encoding algorithm and ...
4
votes
1answer
728 views

How to use TPM to identify a computer for licensing purposes?

I've been comissioned to use TPM to add a licensing system to an existing software project. The idea is to use TPM to uniquely identify the computer (that runs GNU/Linux, probably CentOS/RHEL/Fedora) ...
3
votes
2answers
1k views

Why is it so easy to pirate apps for Android, considering most have an internet connection and access to phone details? [duplicate]

It seems so easy to pirate apps for Android it's as if no one even cares. It's as easy as google searching for the apk and then installing it. Isn't this surprising as some apps cost money? Wouldn't ...
2
votes
3answers
2k views

How to prevent source code theft in web application development

I'm developing a webapplication working with PHP, SQL DB and other technologies. I'm always considering someone stealing the source code or using it to other means. How can you prevent someone from ...
1
vote
2answers
731 views

How does a PHP application get nulled and how to avoid it

As so many others, I've been a victim of having a PHP product of mine be nulled and put available on the internet to download freely. The purpose of this question is to try to make it more difficult ...
11
votes
1answer
14k views

How does HDMI splitter bypass HDCP?

I just read this article. It's about HDCP and how some old HDMI monitors would not work with your newer devices (such as game consoles, etc) because newer devices protect video stream content in a way ...
-2
votes
1answer
90 views

Best way to control who can run my application? [closed]

I am planning to make an application and I don't want everyone to use it (only allowed people). What I was going to do is getting the MAC address of the user and add it to our database "allowed_users" ...
1
vote
1answer
194 views

What protects HDCP keys in software?

I (somewhat) recently stumbled across HDCP (high-bandwidth digital content protection), a protocol that encrypts movies and other media "on the wire". Now there are of course tools to play blu-rays ...