Questions tagged [drm]
DRM (digital rights management) is the enforcement of restrictions on access control to data through technical means, such as copy protection.
126
questions
2
votes
1
answer
175
views
Hide data from user, but process it in application
Is there a way to hide the data that's received somehow from the user? In particular, I have some data that gets send from a webserver to an application. I want the application to process the data, ...
- 121
2
votes
2
answers
3k
views
How do OTT providers protect LIVE streams?
For Video on Demand, DRM seems the way to go. I've been told that providers might be using a token-based system, but I haven't found any provider so far that uses token, just DRM (except Akamai, ...
user15194
2
votes
3
answers
2k
views
How to prevent unauthorized users from accessing an image on my server just by URL?
I have a few dynamically generated images on my server (of high business value), which are supposed to be viewed only via our mobile app. The image is simply loaded from the URL as PNG. How can I ...
- 121
2
votes
2
answers
713
views
How does HDCP detection work?
What is the mechanism used by websites like HBO GO to detect HDCP bypassing/violation? How foolproof is this mechanism, as the logic lies on the client side?
- 3,936
2
votes
3
answers
1k
views
Returning POST JSON data securely?
I have a webpage (HTTPS encrypted and authorized only via domain credentials) that displays grid information. This grid information is received via a POST request to my server which will send back ...
- 135
2
votes
1
answer
92
views
Partial Man on the End Security
The Situation: I'm developing a script that runs in a popular sandbox game as a paid service for other developers. The problem is that the game does not implement a way to do so. The language is Lua ...
- 21
2
votes
0
answers
326
views
DRM implementation for offline licensing
I am improving one of the DRMs that I'm using for my software, and I have a few questions about how to best implement transferable licenses for offline computers. But first, a disclaimer - I am very ...
2
votes
0
answers
74
views
Protecting website from content theft [duplicate]
I have a website called http://example.com. there is another website called http://example1.com it has the same content as for my website.
If I upload file on my website like http://example.com/test....
- 121
2
votes
0
answers
2k
views
Does any DRM system work within a Virtual Machine? [closed]
I'm running a few quick tests to see if any DRM system works on a VM. Notably, most DRM systems (haven't found one yet), don't work on a virtual device:
iPhone Simulator on OSX (FairPlay)
Windows ...
- 50.6k
2
votes
0
answers
153
views
How would an improved "read receipt" work as an email, Facebook post, or webpage?
I'm exploring various ways to implement cryptographic read receipts, that would be used to tell the content producer that the content was viewed. In addition to feedback reporting, a response might ...
- 50.6k
2
votes
0
answers
45
views
Snapchat clone: How do I secure pre-downloaded notifications so that they cannot be opened outside of the app? [duplicate]
Say I'm making a snapchat clone app for Android and iOS. Let's say that I get a snapchat from Baz. I want to pre-download the audio for this snapchat. However, as the developer, I want to secure this ...
- 131
1
vote
2
answers
266
views
Encrypting intellectual property on client side
Is it possible to effectively protect/encrypt intellectual property that is on the client side?
Assume that I am selling a product (software) to clients, that contains intellectual data, for example ...
- 13
1
vote
2
answers
3k
views
How does a PHP application get nulled and how to avoid it
As so many others, I've been a victim of having a PHP product of mine be nulled and put available on the internet to download freely. The purpose of this question is to try to make it more difficult ...
- 111
1
vote
5
answers
368
views
Snapchat clone: How do I secure pre-downloaded notifications so that they cannot be opened outside of the app?
Say I'm making a snapchat clone app for Android and iOS. Let's say that I get a snapchat from Baz. I want to pre-download the audio for this snapchat. However, as the developer, I want to secure this ...
- 131
1
vote
1
answer
208
views
Digital watermarking for detecting Copyright infringement - video file of customer A and B have same SHA Checksums?
Sometimes I buy in a online shop video files (mp4). The online shop forces it's customers to buy with verified real name. In case of leaking his content the shop can identity who leaked it. I don't ...
- 1,445
1
vote
1
answer
481
views
Why is it a security risk to use Apple's receipt validation service directly from a device?
If you watch this video at 52:05 he says,
"Never, never, never, ever send the receipt directly from your app on a device to the validation service."
He goes on to say,
"Its way too easy for someone ...
- 1,167
1
vote
1
answer
7k
views
How did this site prevent me from creating multiple accounts?
Disclaimer: I just realized this question may read a little bit as if I'm trying to promote this site. I'm not. Now that I think about it, I'm unsure whether this site even has a proper license from ...
- 3,107
1
vote
1
answer
7k
views
What's the difference between DRM and CAS?
As I see it, both are used within the scope of content security, to restrict who has access to what.
So what's the difference between a DRM system and a Conditional Access System? Is CAS a subset of ...
user15194
1
vote
1
answer
148
views
Cryptography behind RedHat subscription system (DRM)?
I have to do a project like a subscription manager. Ideally this should work like RedHat subscriptions. I'm having a hard time figuring out how it was implemented. How do they manage to avoid a ...
- 153
1
vote
1
answer
704
views
Enforcing software expiration on virtual machines
It is possible for virtual machine guests to bypass the software expiration timers for paid software. This example shows one way to do this on VMWare. A simpler method is for the user to "revert to ...
- 2,379
1
vote
2
answers
143
views
python time since epoch hacking system variable
I am trying to figure out whether it's safe to let a payed software check its own license date validity using the client's computer
the way this is done is by invoking time.time() function from ...
- 111
1
vote
3
answers
406
views
Why is it required to HMAC riv in HDCP 2.3?
In HDCP 2.3 (pdf) during the Session Key Exchange, the HDCP transmitter sends also the 256-bit HMAC of riv (HMAC-SHA256(riv, kd)).
Why is it required? Does it prevent any attack?
- 393
1
vote
3
answers
411
views
Per-User Image DRM for Finding a Leaker? [duplicate]
I'm managing a client that distributes their users images and files through one source. My background is heavily in development as opposed to security, and I'm of course familiar with some tricks that ...
- 11
1
vote
2
answers
140
views
How to provide to your Webpage a security like Wix and how to break that security
I have read several articles related to the "impossibility to fully protect your Website from being copied (please, check, for instance: Prevent my site from being copied).
So, how is it possible for ...
1
vote
1
answer
174
views
Where to offer money for cracking check [duplicate]
I made a software and I would like to distribute it as a demo that can be registered. I would like to know if there is a site where I can offer some reward for some one try to crack my software and ...
- 153
1
vote
1
answer
950
views
How can I implement DVD copy protection?
I want to make a DVD movie which will be playable on a standard DVD player, but I want to make it copy restricted.
I know it is practically impossible, but I just want security to protect it from ...
- 111
1
vote
3
answers
79
views
Is there a way to store data securely on a client so that it can only be read by the client while connected to an authorising source?
I have a difficult issue facing an online gaming social space I frequent where personal content I've made for the platform is being stolen by users.
I'm wondering if there are any solutions to make ...
- 111
1
vote
1
answer
128
views
What are the roles of the "PACKAGER" in a digital rights management system?
I am studying about the basics of DRM systems. I recently discovered that the term packager is the application that encrypts the original content from the creator. Is there any other work this ...
Manikandan
1
vote
1
answer
446
views
Are the details about the Widevine bug now public?
There was a bug in Widevine last year which enabled downloading Encrypted Media Extension Content.
They stated that they would give full details after 90 days. Was this meant for public disclosure or ...
- 1,442
1
vote
2
answers
745
views
Restricting source code to domain name
I'm starting a very large project soon. It must include a licensing system.
The project will produced using PHP/Laravel/JavaScript and use many different libraries, a CMS, and a few databases.
The ...
- 11
1
vote
0
answers
156
views
How do screenshot blocking technologies work? [closed]
I've noticed I can't take screenshots of videos in Star+. When I paste whatever I tried to shot, it comes all black (subtitles however are visible). After some research, I found out it happens with ...
- 111
1
vote
0
answers
752
views
Why can I watch videos on Crunchyroll without having DRM content enabled in Firefox?
The title pretty much covers the question. I'm using Linux and, whenever I go to sites like Amazon Prime and such, if I try to watch any of their videos, the player would error out in an error code ...
- 167
1
vote
0
answers
151
views
How to find applications which use Replay Protected Memory Block (RPMB) partition of the underlying storage device in Android Trusty? [closed]
I am trying to find a list of applications which use RPMB partition in the underlying Storage Device (eMMC/UFS/NVMe) in Android Trusty environment.
How do I go about doing this ?
Thanks
1
vote
0
answers
228
views
How secure is a file on a raspberry pi?
Let's say I change the password for the root & pi user to something impossible to brute force, say 20 characters.
Then in one of my files on my raspberry pi, I hardcode a password.
Is this ...
- 215
1
vote
0
answers
63
views
Can files be retrieved from a VM instance state that was initially encrypted on a disk?
If I were to make a VM disk that was encrypetd, boot it, enter the encrypted passphrase and save the resulting 'image state' (of the running VM).
Would this image have the 'encrypted' files easily ...
1
vote
0
answers
735
views
Can we screen record Netflix strems? [duplicate]
No I don't want to do it and I don't have a Netflix account but I have heard the different ways Netflix uses DRM to protect its content such as encrypted streaming and watermark. But someone can just ...
- 133
1
vote
0
answers
1k
views
How is the Apple FairPlay Server Playback Context (SPC) message generated?
I'm researching encryption tools that use OS-verified hardware such as a TPM or Secure Element.
Given that FairPlay only works on iOS and certain Mac hardware, I suspect there is some interaction ...
- 50.6k
1
vote
1
answer
798
views
Serial key in pdf document
I'm writting a ebook and I'm gonna to sell it soon.
I'd sell it at Google Play Store, but here in Brazil they don't accept PayPal as payment (and many brazilian don't have a credit card), so I think ...
- 113
1
vote
0
answers
135
views
Does HDCP impose HD-playback restrictions for sinks?
In order to be HDCP compliant, a source can only output HDCP-encrypted digital HD content.
However, is the opposite true for HDCP sinks? In order to be HDCP compliant, should a sink only accept to ...
- 111
0
votes
2
answers
243
views
How to put executable code in files? [closed]
I have PDF, Word and MP4 files on my site and I want to protect them from illegal downloading even if my site hacked. I want to put executable code in the files, so if someone downloads and opens them,...
- 9
0
votes
3
answers
223
views
How to track the usage of image
We are running an image content system where we allow the option to download the image freely by any user.
Now I want to do the following things for those images:
Track down the usage of the image ...
- 109
0
votes
3
answers
2k
views
Should I trust signed GOG games, which are not original?
First I don't want to promote any kind of pirated software here, just don't know where and how to ask this question.
I find out crackers share games released on GOG (which are DRM free), it's ...
- 131
0
votes
2
answers
551
views
DRM Video encryption
I had some work where I needed to secure streaming. So I looked over all DRM protections that are currently available, and then I found out that I had 3 opinions, first to use very expensive DRM (...
0
votes
2
answers
291
views
How to prevent bypass of user agreement window
I have a file on my website which users can download. After clicking the download button, then I show a div with user agreements and two buttons, "accept user agreement" and "decline user agreement".
...
- 136
0
votes
1
answer
186
views
How to prevent Source code excessive usage and redistribution?
We sell our code to a company that they can run our code 100 times a month. We need to do a few things before giving the code to the company.
Hide our logic (we can hide our logic by code obfuscation)...
0
votes
1
answer
120
views
Can a source code be shared and secured form unauthorized use at the same time?
We have developed a script that generates certain reports as output. Input data being confidential in nature, one of our clients wants the code to be hosted in their country and also for the business ...
- 1
0
votes
2
answers
274
views
Is encryption an efficient way to protect digital media?
Recently my friend and I were discussing his idea of protecting the digital media that he has been generating.
His initial idea was to encode the data using proprietary encoding algorithm and ...
- 3,256
0
votes
1
answer
195
views
Is using SecureString in combination with Xor considered secure enough for standalone Windows app?
The environment is Windows. We are using 3rd party tools in our app, and for tools to work they require method call and pass a license key that is a string.
License.Import(string name, string email, ...
- 1,325
0
votes
3
answers
642
views
Securing a video using encryption
Videos uploaded on Youtube or any other video streaming website can be easily downloaded by using 3rd party software.
In order to prevent the viewers from sharing the video to unauthorised people. I ...
- 191
0
votes
1
answer
105
views
Share private key with expiry period
I'd like a way to encrypt my data, and temporarily share access to 'semi-trusted' parties.
If I encrypt my data with my private key, is it possible to share my private key (or some derivative of it)...
- 103