Questions tagged [drm]

DRM (digital rights management) is the enforcement of restrictions on access control to data through technical means, such as copy protection.

Filter by
Sorted by
Tagged with
55
votes
4answers
12k views

Are there DRM techniques to effectively prevent pirating?

A question on Skeptics.SE asks whether current DRM techniques effectively prevent pirating: Is DRM effective? The question for IT Security is: Can DRM be made effective, and are there any examples? ...
41
votes
28answers
15k views

Discouraging users from copying images off a website?

Let me begin by stating that I'm aware it's extremely tedious or virtually impossible to prevent individuals from pirating content. I'm working on a website for a client who is a relatively well ...
33
votes
5answers
7k views

Is it possible to embed information that is both nearly invisible to the naked eye and decodable from an external camera?

I am interested in watermarking a video for copyright purposes. The requirements are as follows: The watermark must be barely noticeable to the naked eye. The watermark must be able to be extracted ...
30
votes
11answers
32k views

Prevent my site from being copied

Is it possible to protect my site from HTTrack Website Copier or any similar program? Without setting a max number of HTTP request from users.
24
votes
5answers
4k views

ZX Spectrum tape loader: how was copy prevention implemented?

I am curious how copy prevention was implemented for games or other programs loaded from cassette on the micro computers of the early 1980s, such as the ZX Spectrum 48k. If I recall correctly, some ...
22
votes
3answers
4k views

How does DRM stop copying?

I've been doing some research into some DRM solutions, specifically "self-protecting containers". One example of this is DigiBox. Normally, the protected data is encrypted in some kind of container. ...
18
votes
6answers
12k views

How do I prevent copying of my PDF files?

One time while I was printing my documents at a copy center, I saw they dragged-and-dropped my PDFs from my flash drive to their desktop. How do I protect my files without using password? Is there a ...
17
votes
1answer
4k views

How difficult is it to intercept the POST response body when SSL is used?

For an Android application that is performing POST requests (JSON) over SSL and receiving a JSON object as a response, how difficult is it to get the JSON response? Is the easiest way to decompile ...
11
votes
4answers
30k views

How do software keygens work?

I have seen them plenty of times, with many different types of software, but the one thing I have always wondered, is how software keygens know what key to generate. I know the basic principle of it: ...
11
votes
1answer
16k views

How does HDMI splitter bypass HDCP?

I just read this article. It's about HDCP and how some old HDMI monitors would not work with your newer devices (such as game consoles, etc) because newer devices protect video stream content in a way ...
10
votes
1answer
2k views

What role does cryptography play in anti-piracy?

As a follow-up to Cipher for Product Registration, are there secure yet usable cryptographic standards/protocols for protecting software and data used by software? I'm interested in hardware and ...
10
votes
1answer
202 views

How do HTML5 DRM addons protect their output?

HTML5 has a DRM framework Encrypted Media Extensions (EME), that allows DRM companies to create content decryption modules (CDM) to decrypt DRM protected content. Browsers should use a sandbox to run ...
9
votes
2answers
426 views

Practical DRM for pdfs

An organization I am consulting for is trying to find a DRM solution for an ebook that they publish internally. It is in pdf format. Does anybody have experience with DRM for pdfs, and if so, any ...
9
votes
1answer
353 views

Security Risks of BD+

I have recently been reading about the DRM measures on commercial bluray disks, in particular BD+. It seems that this technology involves Java software running in a virtual machine, with full access ...
8
votes
4answers
486 views

Atypical DRM situation: distribute pictures to select partners, then prevent them from reusing them

We want to distribute digital content (think pictures) to a select number of partners (around 1000, worldwide) to use as visual reference. We would like however to prevent them from copying or in any ...
8
votes
3answers
1k views

A safe license System

So I'm trying to think of a good way to check if the license key a user supplies for a program is legit or not. Let's suppose this is the way they get there license They make some type of purchase. ...
8
votes
5answers
1k views

Script / method to erase USB flash drive content after a certain number of uses

I have a few bootable thumb drives with various OS's that I intend to let someone use. However, I need a way to ensure the USB drives can only be used once. Thus my question - is there a way to have a ...
7
votes
4answers
821 views

How far can we go in preventing videos from spreading out using P2P networks like BitTorrent?

Everyday, I see many of my friends downloading movies off P2P networks like BitTorrent. Isn't there any way for those hardworking movie producers to save their work from being distributed like this? ...
6
votes
3answers
2k views

Image steganography and tracking

We are running an online-press media-library. On this site many brands are uploading images and track press users download and views per image. But some brand now want to add unique code in image so ...
5
votes
15answers
7k views

Preventing registered users from sharing passwords [closed]

Below is a proposal for dealing with a situation of website security. I am wondering whether it seems feasible, from both a technical and usability point of view. I want to make sure that the proposal ...
5
votes
5answers
628 views

Is DRM considered Confidentiality, Integrity, Availability, or some combination of the three?

I was discussing software trial time limit enforcement with a colleague and the idea of CIA came up. Do stricter enforcement techniques increase confidentiality at the expense of availability? (for ...
5
votes
1answer
4k views

How does time-limited trial software work? [closed]

I'm curious about how time-limited (e.g. 30-day trial) software works. I know how serial keys are generated and designed, but the time-limiting part is more complicated to understand, because it is ...
5
votes
1answer
278 views

Use token for Windows Server 2008 AD RMS [closed]

I have a Windows Server 2008 configured for AD RMS (Active Directory Rights Management Service), another Windows Server 2008 machine that is the domain controller, and a third machine that is a member ...
4
votes
1answer
1k views

What is the security/copy protection model for streaming media services?

I realize this is a broad question, but maybe there is a simple answer From my understanding, Streaming media services such as Amazon instant video, Netflix, and others do all decryption client side. ...
4
votes
1answer
161 views

Protecting a document that you sell

I have written a short guidebook that I have been selling hardcopy. There is now interest in a digital version. How do I protect this guidebook so only the people who purchase it have access to it? I ...
4
votes
1answer
192 views

How secure will EME be?

EME is a technology to allow proprietary code to be run in browser to frustrate piracy. What are the security implications of this? Will it have full access to my computer (like the good-ol' ActiveX ...
4
votes
1answer
683 views

Storing License Keys

I'm creating an application which generates licenses key and stores this in a database (the licenses are checked online). I don't wish to store these license unhashed, in case the database is stolen. ...
4
votes
2answers
1k views

Best practice for securing encrypted content on Android app

I have an Android APK which loads in locally stored content files protected by AES encryption, and I want to keep the encryption key secret from all users. Only the app itself should be able to read ...
4
votes
1answer
141 views

How do iTunes movie rentals work?

I've been wondering how iTunes movie rentals work from a security standpoint. Given that the "rented" files are actually downloaded to the user's computer and then played from there, it seems like ...
4
votes
1answer
563 views

How does video protection work when someone is recording their screen?

I forgot to turn my video recorder off and accidentally recorded my screen when I watched some series on some website. When I re-watched the video a few weeks later, I noticed that the part where the ...
4
votes
1answer
888 views

How to use TPM to identify a computer for licensing purposes?

I've been comissioned to use TPM to add a licensing system to an existing software project. The idea is to use TPM to uniquely identify the computer (that runs GNU/Linux, probably CentOS/RHEL/Fedora) ...
4
votes
0answers
128 views

What are some ways of protecting a VM image?

I am looking to distribute a linux VM image (with a modified linux kernel to suit or product's needs) that runs some proprietary software that will already be on the VM I distribute. The goals is to ...
3
votes
1answer
2k views

Preventing License protection circumvention in Java software

A software (written in Java) by a vendor uses DSA signature to verify that the license information is correct. It achieves this by embedding the public key in the same Java software. Legit license ...
3
votes
2answers
282 views

DRM using embedded private key

I've started learning about cryptography used for DRM solutions, and curious to know if this is a valid solution for a custom embedded system running purchased software assets. ECDSA public / private ...
3
votes
1answer
345 views

Can I add 'user-identifying noise' to MP3 files to determine which user shared my file, if I find it later on the internet?

Problem I'm streaming MP3 files to users. Users are not allowed to share these files. I know that it's in the end impossible to not let anyone download the files. That's not the problem, people can ...
3
votes
2answers
2k views

Why is it so easy to pirate apps for Android, considering most have an internet connection and access to phone details? [duplicate]

It seems so easy to pirate apps for Android it's as if no one even cares. It's as easy as google searching for the apk and then installing it. Isn't this surprising as some apps cost money? Wouldn't ...
3
votes
1answer
110 views

How protected are files within a running encrypted VM on a possibly non secure hypervisor / host?

I've got a set of source code files (compiled C#) that I want to prevent direct read access to. The program will be running on the VM. I was thinking of storing these in an encrypted hard disk VM, the ...
3
votes
1answer
247 views

How is this web resource hidden from the user? [closed]

Motivation: I've been interested in how various agencies hide data, either through incompetence or willful intent, that is required to be "open". Specifically I've seen oil companies use images to ...
3
votes
4answers
805 views

Received letter from attorney stating they found a pirated copy of software on my computer based on my MAC address [closed]

Is this correct? Can a MAC address lead a company to the specific user? They have my phone number and an old email address for me. The information they sent me is showing a MAC address and the ...
3
votes
0answers
109 views

Putting hidden DRM into PNG images to track copyright infringement [duplicate]

There was a question like this, but it was about JPG pictures. I have the same one about PNG pictures. I've recently had trouble where someone stole an artwork of mine and put it as a YouTube avatar. ...
2
votes
1answer
152 views

A file that doesn't allow copy/paste or print

We know that Adobe pdf's convenient control features for discouraging copy/paste and print are not real security measures. We are searching for a way to create a file that has default security set ...
2
votes
2answers
245 views

DRM - Make sure that a SDK is used by the client legally

We are an IT startup which provides some clients with a Software Development Kit, which may be used by the client within a specific environment, according to some terms and legal agreement. Especially,...
2
votes
3answers
2k views

How to prevent source code theft in web application development

I'm developing a webapplication working with PHP, SQL DB and other technologies. I'm always considering someone stealing the source code or using it to other means. How can you prevent someone from ...
2
votes
2answers
546 views

How does HDCP detection work?

What is the mechanism used by websites like HBO GO to detect HDCP bypassing/violation? How foolproof is this mechanism, as the logic lies on the client side?
2
votes
3answers
145 views

Returning POST JSON data securely?

I have a webpage (HTTPS encrypted and authorized only via domain credentials) that displays grid information. This grid information is received via a POST request to my server which will send back ...
2
votes
1answer
56 views

Partial Man on the End Security

The Situation: I'm developing a script that runs in a popular sandbox game as a paid service for other developers. The problem is that the game does not implement a way to do so. The language is Lua ...
2
votes
0answers
53 views

Protecting website from content theft [duplicate]

I have a website called http://example.com. there is another website called http://example1.com it has the same content as for my website. If I upload file on my website like http://example.com/test....
2
votes
0answers
500 views

How can Web Crypto API and IndexedDB protect data stored on the client side against user manipulation?

Imagine web apps that are supposed to work with no or only a few interactions with the web server, for example: a browser game in which the player's level and progress are to be saved locally. a game,...
2
votes
0answers
482 views

Does any DRM system work within a Virtual Machine? [closed]

I'm running a few quick tests to see if any DRM system works on a VM. Notably, most DRM systems (haven't found one yet), don't work on a virtual device: iPhone Simulator on OSX (FairPlay) Windows ...
2
votes
0answers
113 views

How would an improved “read receipt” work as an email, Facebook post, or webpage?

I'm exploring various ways to implement cryptographic read receipts, that would be used to tell the content producer that the content was viewed. In addition to feedback reporting, a response might ...