Skip to main content

Questions tagged [drm]

DRM (digital rights management) is the enforcement of restrictions on access control to data through technical means, such as copy protection.

Filter by
Sorted by
Tagged with
60 votes
4 answers
16k views

Are there DRM techniques to effectively prevent pirating?

A question on Skeptics.SE asks whether current DRM techniques effectively prevent pirating: Is DRM effective? The question for IT Security is: Can DRM be made effective, and are there any examples? ...
MrHen's user avatar
  • 703
42 votes
28 answers
17k views

Discouraging users from copying images off a website?

Let me begin by stating that I'm aware it's extremely tedious or virtually impossible to prevent individuals from pirating content. I'm working on a website for a client who is a relatively well ...
Satej S's user avatar
  • 563
39 votes
6 answers
10k views

Schemes/ Mechanisms that could provide one time decryption?

I am quite familiar with most of the common undergrad/grad security foundations; but I couldn't find anything related to this scenario: A scheme/system where a piece of data can only be 'decrypted' ...
DaveIdito's user avatar
  • 511
35 votes
5 answers
8k views

Is it possible to embed information that is both nearly invisible to the naked eye and decodable from an external camera?

I am interested in watermarking a video for copyright purposes. The requirements are as follows: The watermark must be barely noticeable to the naked eye. The watermark must be able to be extracted ...
Zac R.'s user avatar
  • 461
33 votes
11 answers
41k views

Prevent my site from being copied

Is it possible to protect my site from HTTrack Website Copier or any similar program? Without setting a max number of HTTP request from users.
h4ck3r's user avatar
  • 464
25 votes
5 answers
6k views

ZX Spectrum tape loader: how was copy prevention implemented?

I am curious how copy prevention was implemented for games or other programs loaded from cassette on the micro computers of the early 1980s, such as the ZX Spectrum 48k. If I recall correctly, some ...
D.H.'s user avatar
  • 628
23 votes
3 answers
5k views

How does DRM stop copying?

I've been doing some research into some DRM solutions, specifically "self-protecting containers". One example of this is DigiBox. Normally, the protected data is encrypted in some kind of container. ...
mrQWERTY's user avatar
  • 443
20 votes
5 answers
5k views

How to use FDE without needing to share the encryption password

We have an AI model which needs to be deployed on premise. The hardware will be provided by us, so we can do what ever we want on the device. The device is a mini PC running Ubuntu 18.04. The UI is ...
Hari's user avatar
  • 311
20 votes
3 answers
5k views

How does Widevine, FairPlay, and other DRM's work under the hood?

I am trying to understand how DRM works under the hood. There doesn't seem to be much information about it on the web so I figured I would ask here. After some attempted research, I found it ...
user7886229's user avatar
18 votes
6 answers
12k views

How do I prevent copying of my PDF files?

One time while I was printing my documents at a copy center, I saw they dragged-and-dropped my PDFs from my flash drive to their desktop. How do I protect my files without using password? Is there a ...
Олег Кривцов's user avatar
18 votes
1 answer
6k views

How difficult is it to intercept the POST response body when SSL is used?

For an Android application that is performing POST requests (JSON) over SSL and receiving a JSON object as a response, how difficult is it to get the JSON response? Is the easiest way to decompile ...
user181807's user avatar
14 votes
1 answer
927 views

How do HTML5 DRM addons protect their output?

HTML5 has a DRM framework Encrypted Media Extensions (EME), that allows DRM companies to create content decryption modules (CDM) to decrypt DRM protected content. Browsers should use a sandbox to run ...
allo's user avatar
  • 3,451
13 votes
6 answers
7k views

Is it impossible to protect an API from data redistribution?

Say there is a frontend mobile app and a backend server (let's call this service MyApp) which hosts an API for the mobile app to connect to. The backend server makes any needed requests to third party ...
Jiehfeng's user avatar
  • 233
13 votes
4 answers
42k views

How do software keygens work?

I have seen them plenty of times, with many different types of software, but the one thing I have always wondered, is how software keygens know what key to generate. I know the basic principle of it: ...
Ephraim's user avatar
  • 235
12 votes
1 answer
23k views

How does HDMI splitter bypass HDCP?

I just read this article. It's about HDCP and how some old HDMI monitors would not work with your newer devices (such as game consoles, etc) because newer devices protect video stream content in a way ...
Andrew Savinykh's user avatar
10 votes
1 answer
3k views

What role does cryptography play in anti-piracy?

As a follow-up to Cipher for Product Registration, are there secure yet usable cryptographic standards/protocols for protecting software and data used by software? I'm interested in hardware and ...
mikeazo's user avatar
  • 2,847
9 votes
2 answers
573 views

Practical DRM for pdfs

An organization I am consulting for is trying to find a DRM solution for an ebook that they publish internally. It is in pdf format. Does anybody have experience with DRM for pdfs, and if so, any ...
Josh Brower's user avatar
  • 1,387
9 votes
1 answer
444 views

Security Risks of BD+

I have recently been reading about the DRM measures on commercial bluray disks, in particular BD+. It seems that this technology involves Java software running in a virtual machine, with full access ...
Alex's user avatar
  • 373
8 votes
4 answers
581 views

Atypical DRM situation: distribute pictures to select partners, then prevent them from reusing them

We want to distribute digital content (think pictures) to a select number of partners (around 1000, worldwide) to use as visual reference. We would like however to prevent them from copying or in any ...
George's user avatar
  • 2,833
8 votes
3 answers
1k views

A safe license System

So I'm trying to think of a good way to check if the license key a user supplies for a program is legit or not. Let's suppose this is the way they get there license They make some type of purchase. ...
Austin's user avatar
  • 753
8 votes
1 answer
3k views

Displaying on screen without being recordable by another app

A couple years ago I rented a movie on iTunes and began watching it in the Windows 10 x64 desktop app. At one point, I opened OBS in capture screen mode. To my amazement, the iTunes window showed only ...
Luke Sawczak's user avatar
8 votes
5 answers
2k views

Script / method to erase USB flash drive content after a certain number of uses

I have a few bootable thumb drives with various OS's that I intend to let someone use. However, I need a way to ensure the USB drives can only be used once. Thus my question - is there a way to have a ...
Vandal's user avatar
  • 242
8 votes
3 answers
3k views

Image steganography and tracking

We are running an online-press media-library. On this site many brands are uploading images and track press users download and views per image. But some brand now want to add unique code in image so ...
Girish's user avatar
  • 183
7 votes
4 answers
926 views

How far can we go in preventing videos from spreading out using P2P networks like BitTorrent?

Everyday, I see many of my friends downloading movies off P2P networks like BitTorrent. Isn't there any way for those hardworking movie producers to save their work from being distributed like this? ...
claws's user avatar
  • 2,175
7 votes
3 answers
1k views

Encrypt folder on Linux that can only be decrypted on that specific OS and device

Suppose I want to give a computer to someone that runs an application. I want to avoid that the program can be copied to another computer or be tampered with. For that, I want to encrypt the folder ...
Patrik's user avatar
  • 173
6 votes
1 answer
2k views

How to use TPM to identify a computer for licensing purposes?

I've been comissioned to use TPM to add a licensing system to an existing software project. The idea is to use TPM to uniquely identify the computer (that runs GNU/Linux, probably CentOS/RHEL/Fedora) ...
José Tomás Tocino's user avatar
5 votes
15 answers
9k views

Preventing registered users from sharing passwords [closed]

Below is a proposal for dealing with a situation of website security. I am wondering whether it seems feasible, from both a technical and usability point of view. I want to make sure that the proposal ...
oyvey's user avatar
  • 191
5 votes
5 answers
923 views

Is DRM considered Confidentiality, Integrity, Availability, or some combination of the three?

I was discussing software trial time limit enforcement with a colleague and the idea of CIA came up. Do stricter enforcement techniques increase confidentiality at the expense of availability? (for ...
Joe M.'s user avatar
  • 439
5 votes
1 answer
5k views

How does time-limited trial software work? [closed]

I'm curious about how time-limited (e.g. 30-day trial) software works. I know how serial keys are generated and designed, but the time-limiting part is more complicated to understand, because it is ...
Kevin Vuilleumier's user avatar
5 votes
1 answer
2k views

What is the security/copy protection model for streaming media services?

I realize this is a broad question, but maybe there is a simple answer From my understanding, Streaming media services such as Amazon instant video, Netflix, and others do all decryption client side. ...
MrSynAckSter's user avatar
  • 2,040
5 votes
4 answers
7k views

How to prevent source code theft in web application development

I'm developing a webapplication working with PHP, SQL DB and other technologies. I'm always considering someone stealing the source code or using it to other means. How can you prevent someone from ...
Bruno Francisco's user avatar
5 votes
1 answer
3k views

How does video protection work when someone is recording their screen?

I forgot to turn my video recorder off and accidentally recorded my screen when I watched some series on some website. When I re-watched the video a few weeks later, I noticed that the part where the ...
user avatar
5 votes
1 answer
360 views

Use token for Windows Server 2008 AD RMS [closed]

I have a Windows Server 2008 configured for AD RMS (Active Directory Rights Management Service), another Windows Server 2008 machine that is the domain controller, and a third machine that is a member ...
Sahar's user avatar
  • 59
4 votes
1 answer
2k views

Preventing License protection circumvention in Java software

A software (written in Java) by a vendor uses DSA signature to verify that the license information is correct. It achieves this by embedding the public key in the same Java software. Legit license ...
chuacw's user avatar
  • 175
4 votes
1 answer
222 views

Protecting a document that you sell

I have written a short guidebook that I have been selling hardcopy. There is now interest in a digital version. How do I protect this guidebook so only the people who purchase it have access to it? I ...
Roberta C's user avatar
4 votes
1 answer
302 views

How secure will EME be?

EME is a technology to allow proprietary code to be run in browser to frustrate piracy. What are the security implications of this? Will it have full access to my computer (like the good-ol' ActiveX ...
Charles Shiller's user avatar
4 votes
1 answer
1k views

Storing License Keys

I'm creating an application which generates licenses key and stores this in a database (the licenses are checked online). I don't wish to store these license unhashed, in case the database is stolen. ...
Stephen Harris's user avatar
4 votes
2 answers
2k views

Best practice for securing encrypted content on Android app

I have an Android APK which loads in locally stored content files protected by AES encryption, and I want to keep the encryption key secret from all users. Only the app itself should be able to read ...
Darriuk's user avatar
  • 41
4 votes
1 answer
221 views

How do iTunes movie rentals work?

I've been wondering how iTunes movie rentals work from a security standpoint. Given that the "rented" files are actually downloaded to the user's computer and then played from there, it seems like ...
augurar's user avatar
  • 583
4 votes
0 answers
215 views

What are some ways of protecting a VM image?

I am looking to distribute a linux VM image (with a modified linux kernel to suit or product's needs) that runs some proprietary software that will already be on the VM I distribute. The goals is to ...
Iizanonymouz's user avatar
3 votes
2 answers
987 views

DRM using embedded private key

I've started learning about cryptography used for DRM solutions, and curious to know if this is a valid solution for a custom embedded system running purchased software assets. ECDSA public / private ...
ATtheincredibleaf's user avatar
3 votes
1 answer
463 views

What protects HDCP keys in software?

I (somewhat) recently stumbled across HDCP (high-bandwidth digital content protection), a protocol that encrypts movies and other media "on the wire". Now there are of course tools to play blu-rays ...
SEJPM's user avatar
  • 9,780
3 votes
1 answer
463 views

Can I add 'user-identifying noise' to MP3 files to determine which user shared my file, if I find it later on the internet?

Problem I'm streaming MP3 files to users. Users are not allowed to share these files. I know that it's in the end impossible to not let anyone download the files. That's not the problem, people can ...
user avatar
3 votes
2 answers
4k views

Why is it so easy to pirate apps for Android, considering most have an internet connection and access to phone details? [duplicate]

It seems so easy to pirate apps for Android it's as if no one even cares. It's as easy as google searching for the apk and then installing it. Isn't this surprising as some apps cost money? Wouldn't ...
Craigxyz's user avatar
  • 461
3 votes
1 answer
434 views

How protected are files within a running encrypted VM on a possibly non secure hypervisor / host?

I've got a set of source code files (compiled C#) that I want to prevent direct read access to. The program will be running on the VM. I was thinking of storing these in an encrypted hard disk VM, the ...
Chris Stryczynski's user avatar
3 votes
1 answer
315 views

How is this web resource hidden from the user? [closed]

Motivation: I've been interested in how various agencies hide data, either through incompetence or willful intent, that is required to be "open". Specifically I've seen oil companies use images to ...
Hooked's user avatar
  • 304
3 votes
4 answers
3k views

Received letter from attorney stating they found a pirated copy of software on my computer based on my MAC address [closed]

Is this correct? Can a MAC address lead a company to the specific user? They have my phone number and an old email address for me. The information they sent me is showing a MAC address and the ...
Nina's user avatar
  • 31
3 votes
0 answers
3k views

How can Web Crypto API and IndexedDB protect data stored on the client side against user manipulation?

Imagine web apps that are supposed to work with no or only a few interactions with the web server, for example: a browser game in which the player's level and progress are to be saved locally. a game,...
Steve06's user avatar
  • 131
3 votes
0 answers
220 views

Putting hidden DRM into PNG images to track copyright infringement [duplicate]

There was a question like this, but it was about JPG pictures. I have the same one about PNG pictures. I've recently had trouble where someone stole an artwork of mine and put it as a YouTube avatar. ...
Foxcat385's user avatar
  • 717
2 votes
1 answer
389 views

A file that doesn't allow copy/paste or print

We know that Adobe pdf's convenient control features for discouraging copy/paste and print are not real security measures. We are searching for a way to create a file that has default security set ...
carleen's user avatar
  • 21