Questions tagged [drm]
DRM (digital rights management) is the enforcement of restrictions on access control to data through technical means, such as copy protection.
125
questions
61
votes
4
answers
15k
views
Are there DRM techniques to effectively prevent pirating?
A question on Skeptics.SE asks whether current DRM techniques effectively prevent pirating: Is DRM effective?
The question for IT Security is: Can DRM be made effective, and are there any examples?
...
- 713
43
votes
28
answers
16k
views
Discouraging users from copying images off a website?
Let me begin by stating that I'm aware it's extremely tedious or virtually impossible to prevent individuals from pirating content.
I'm working on a website for a client who is a relatively well ...
- 573
39
votes
6
answers
9k
views
Schemes/ Mechanisms that could provide one time decryption?
I am quite familiar with most of the common undergrad/grad security foundations; but I couldn't find anything related to this scenario:
A scheme/system where a piece of data can only be 'decrypted' ...
- 511
34
votes
5
answers
7k
views
Is it possible to embed information that is both nearly invisible to the naked eye and decodable from an external camera?
I am interested in watermarking a video for copyright purposes. The requirements are as follows:
The watermark must be barely noticeable to the naked eye.
The watermark must be able to be extracted ...
- 451
33
votes
11
answers
39k
views
Prevent my site from being copied
Is it possible to protect my site from HTTrack Website Copier or any similar program?
Without setting a max number of HTTP request from users.
- 464
25
votes
5
answers
6k
views
ZX Spectrum tape loader: how was copy prevention implemented?
I am curious how copy prevention was implemented for games or other programs loaded from cassette on the micro computers of the early 1980s, such as the ZX Spectrum 48k. If I recall correctly, some ...
- 628
23
votes
3
answers
5k
views
How does DRM stop copying?
I've been doing some research into some DRM solutions, specifically "self-protecting containers". One example of this is DigiBox. Normally, the protected data is encrypted in some kind of container. ...
- 443
20
votes
5
answers
5k
views
How to use FDE without needing to share the encryption password
We have an AI model which needs to be deployed on premise. The hardware will be provided by us, so we can do what ever we want on the device. The device is a mini PC running Ubuntu 18.04.
The UI is ...
- 311
19
votes
3
answers
4k
views
How does Widevine, FairPlay, and other DRM's work under the hood?
I am trying to understand how DRM works under the hood. There doesn't seem to be much information about it on the web so I figured I would ask here.
After some attempted research, I found it ...
- 650
18
votes
6
answers
12k
views
How do I prevent copying of my PDF files?
One time while I was printing my documents at a copy center, I saw they dragged-and-dropped my PDFs from my flash drive to their desktop.
How do I protect my files without using password? Is there a ...
- 191
18
votes
1
answer
5k
views
How difficult is it to intercept the POST response body when SSL is used?
For an Android application that is performing POST requests (JSON) over SSL and receiving a JSON object as a response, how difficult is it to get the JSON response?
Is the easiest way to decompile ...
- 189
14
votes
1
answer
769
views
How do HTML5 DRM addons protect their output?
HTML5 has a DRM framework Encrypted Media Extensions (EME), that allows DRM companies to create content decryption modules (CDM) to decrypt DRM protected content. Browsers should use a sandbox to run ...
- 3,333
13
votes
4
answers
41k
views
How do software keygens work?
I have seen them plenty of times, with many different types of software, but the one thing I have always wondered, is how software keygens know what key to generate. I know the basic principle of it: ...
- 235
13
votes
1
answer
20k
views
How does HDMI splitter bypass HDCP?
I just read this article. It's about HDCP and how some old HDMI monitors would not work with your newer devices (such as game consoles, etc) because newer devices protect video stream content in a way ...
- 1,640
10
votes
1
answer
2k
views
What role does cryptography play in anti-piracy?
As a follow-up to Cipher for Product Registration, are there secure yet usable cryptographic standards/protocols for protecting software and data used by software? I'm interested in hardware and ...
- 2,827
9
votes
2
answers
538
views
Practical DRM for pdfs
An organization I am consulting for is trying to find a DRM solution for an ebook that they publish internally. It is in pdf format.
Does anybody have experience with DRM for pdfs, and if so, any ...
- 1,377
9
votes
1
answer
409
views
Security Risks of BD+
I have recently been reading about the DRM measures on commercial bluray disks, in particular BD+. It seems that this technology involves Java software running in a virtual machine, with full access ...
- 383
8
votes
4
answers
562
views
Atypical DRM situation: distribute pictures to select partners, then prevent them from reusing them
We want to distribute digital content (think pictures) to a select number of partners (around 1000, worldwide) to use as visual reference. We would like however to prevent them from copying or in any ...
- 2,813
8
votes
3
answers
1k
views
A safe license System
So I'm trying to think of a good way to check if the license key a user supplies for a program is legit or not.
Let's suppose this is the way they get there license
They make some type of purchase.
...
- 733
8
votes
5
answers
2k
views
Script / method to erase USB flash drive content after a certain number of uses
I have a few bootable thumb drives with various OS's that I intend to let someone use. However, I need a way to ensure the USB drives can only be used once. Thus my question - is there a way to have a ...
- 242
8
votes
3
answers
2k
views
Image steganography and tracking
We are running an online-press media-library. On this site many brands are uploading images and track press users download and views per image.
But some brand now want to add unique code in image so ...
- 183
7
votes
4
answers
898
views
How far can we go in preventing videos from spreading out using P2P networks like BitTorrent?
Everyday, I see many of my friends downloading movies off P2P networks like BitTorrent. Isn't there any way for those hardworking movie producers to save their work from being distributed like this?
...
- 2,155
7
votes
3
answers
1k
views
Encrypt folder on Linux that can only be decrypted on that specific OS and device
Suppose I want to give a computer to someone that runs an application. I want to avoid that the program can be copied to another computer or be tampered with. For that, I want to encrypt the folder ...
- 173
6
votes
1
answer
2k
views
How to use TPM to identify a computer for licensing purposes?
I've been comissioned to use TPM to add a licensing system to an existing software project. The idea is to use TPM to uniquely identify the computer (that runs GNU/Linux, probably CentOS/RHEL/Fedora) ...
5
votes
15
answers
8k
views
Preventing registered users from sharing passwords [closed]
Below is a proposal for dealing with a situation of website security. I am wondering whether it seems feasible, from both a technical and usability point of view. I want to make sure that the proposal ...
- 191
5
votes
5
answers
888
views
Is DRM considered Confidentiality, Integrity, Availability, or some combination of the three?
I was discussing software trial time limit enforcement with a colleague and the idea of CIA came up. Do stricter enforcement techniques increase confidentiality at the expense of availability? (for ...
- 429
5
votes
1
answer
5k
views
How does time-limited trial software work? [closed]
I'm curious about how time-limited (e.g. 30-day trial) software works.
I know how serial keys are generated and designed, but the time-limiting part is more complicated to understand, because it is ...
5
votes
1
answer
2k
views
What is the security/copy protection model for streaming media services?
I realize this is a broad question, but maybe there is a simple answer
From my understanding, Streaming media services such as Amazon instant video, Netflix, and others do all decryption client side. ...
- 2,040
5
votes
4
answers
6k
views
How to prevent source code theft in web application development
I'm developing a webapplication working with PHP, SQL DB and other technologies. I'm always considering someone stealing the source code or using it to other means.
How can you prevent someone from ...
- 173
5
votes
1
answer
2k
views
How does video protection work when someone is recording their screen?
I forgot to turn my video recorder off and accidentally recorded my screen when I watched some series on some website. When I re-watched the video a few weeks later, I noticed that the part where the ...
user168683
5
votes
1
answer
338
views
Use token for Windows Server 2008 AD RMS [closed]
I have a Windows Server 2008 configured for AD RMS (Active Directory Rights Management Service), another Windows Server 2008 machine that is the domain controller, and a third machine that is a member ...
- 59
4
votes
1
answer
2k
views
Preventing License protection circumvention in Java software
A software (written in Java) by a vendor uses DSA signature to verify that the license information is correct.
It achieves this by embedding the public key in the same Java software.
Legit license ...
- 175
4
votes
1
answer
198
views
Protecting a document that you sell
I have written a short guidebook that I have been selling hardcopy. There is now interest in a digital version. How do I protect this guidebook so only the people who purchase it have access to it? I ...
- 41
4
votes
1
answer
274
views
How secure will EME be?
EME is a technology to allow proprietary code to be run in browser to frustrate piracy.
What are the security implications of this? Will it have full access to my computer (like the good-ol' ActiveX ...
- 443
4
votes
1
answer
1k
views
Storing License Keys
I'm creating an application which generates licenses key and stores this in a database (the licenses are checked online). I don't wish to store these license unhashed, in case the database is stolen.
...
- 143
4
votes
2
answers
2k
views
Best practice for securing encrypted content on Android app
I have an Android APK which loads in locally stored content files protected by AES encryption, and I want to keep the encryption key secret from all users. Only the app itself should be able to read ...
- 41
4
votes
1
answer
194
views
How do iTunes movie rentals work?
I've been wondering how iTunes movie rentals work from a security standpoint. Given that the "rented" files are actually downloaded to the user's computer and then played from there, it seems like ...
- 583
4
votes
0
answers
172
views
What are some ways of protecting a VM image?
I am looking to distribute a linux VM image (with a modified linux kernel to suit or product's needs) that runs some proprietary software that will already be on the VM I distribute. The goals is to ...
- 41
3
votes
2
answers
747
views
DRM using embedded private key
I've started learning about cryptography used for DRM solutions, and curious to know if this is a valid solution for a custom embedded system running purchased software assets.
ECDSA public / private ...
3
votes
1
answer
374
views
What protects HDCP keys in software?
I (somewhat) recently stumbled across HDCP (high-bandwidth digital content protection), a protocol that encrypts movies and other media "on the wire".
Now there are of course tools to play blu-rays ...
- 9,550
3
votes
1
answer
411
views
Can I add 'user-identifying noise' to MP3 files to determine which user shared my file, if I find it later on the internet?
Problem
I'm streaming MP3 files to users. Users are not allowed to share these files. I know that it's in the end impossible to not let anyone download the files. That's not the problem, people can ...
user21287
3
votes
2
answers
4k
views
Why is it so easy to pirate apps for Android, considering most have an internet connection and access to phone details? [duplicate]
It seems so easy to pirate apps for Android it's as if no one even cares. It's as easy as google searching for the apk and then installing it. Isn't this surprising as some apps cost money?
Wouldn't ...
- 461
3
votes
1
answer
343
views
How protected are files within a running encrypted VM on a possibly non secure hypervisor / host?
I've got a set of source code files (compiled C#) that I want to prevent direct read access to. The program will be running on the VM. I was thinking of storing these in an encrypted hard disk VM, the ...
3
votes
1
answer
293
views
How is this web resource hidden from the user? [closed]
Motivation: I've been interested in how various agencies hide data, either through incompetence or willful intent, that is required to be "open". Specifically I've seen oil companies use images to ...
- 305
3
votes
4
answers
2k
views
Received letter from attorney stating they found a pirated copy of software on my computer based on my MAC address [closed]
Is this correct? Can a MAC address lead a company to the specific user?
They have my phone number and an old email address for me. The information they sent me is showing a MAC address and the ...
- 31
3
votes
2
answers
1k
views
How to decrypt a file to memory and run it from memory?
How someone might run an encoded executable, mp3, or any other file safely in memory after being decrypted.
A use case might be someone trying to make code or a file only usable through their service ...
3
votes
0
answers
2k
views
How can Web Crypto API and IndexedDB protect data stored on the client side against user manipulation?
Imagine web apps that are supposed to work with no or only a few interactions with the web server, for example:
a browser game in which the player's level and progress are to be saved locally.
a game,...
- 131
3
votes
0
answers
218
views
Putting hidden DRM into PNG images to track copyright infringement [duplicate]
There was a question like this, but it was about JPG pictures. I have the same one about PNG pictures.
I've recently had trouble where someone stole an artwork of mine and put it as a YouTube avatar. ...
- 717
2
votes
2
answers
337
views
DRM - Make sure that a SDK is used by the client legally
We are an IT startup which provides some clients with a Software Development Kit, which may be used by the client within a specific environment, according to some terms and legal agreement.
Especially,...
- 33
2
votes
1
answer
305
views
A file that doesn't allow copy/paste or print
We know that Adobe pdf's convenient control features for discouraging copy/paste and print are not real security measures.
We are searching for a way to create a file that has default security set ...
- 21