Skip to main content


I somehow just learned about the IETF's "Privacy Pass" working group, along with Google and Apple's respective implementations ("Private State Tokens", "Private Access Tokens"), and I'm so damn tired of DRM being the answer to everything.

Mozilla wrote a blog post in December of 2023 about why they decided not to implement it:

blog.mozilla.org/en/privacy-se…

...and the IETF has a page to track the working group's drafts:

datatracker.ietf.org/wg/privac…

#IETF #DRM #cryptography #privacy

in reply to ansuz / ऐरन

The whole idea of DRM doesn't work, people will always find a way to rip content. DRM in games makes them slower than pirated versions that removed it, so pirates have a better experience,

I think the quote "piracy is a service problem" from Gabe Newell is the best way to think about the problem.
Find ways to improve your service or loose against the people who steal your content.

in reply to treefit

DRM is annoying for most users and a fun challenge for the people that break it as a sport.

The most it can do is delay the piracy of the content a few days or weeks.

in reply to treefit

I'm not defending piracy here. Just saying that DRM is not the solution.

Takedown requests and legal actions against distributors should be sufficient. And also being transparent with consumers and asking them to pay for your stuff to support you. Maybe sell merchandise.

I guess with streaming services there is not that much money anymore in movie or music sales anyway.

in reply to treefit

@treefit in this particular context the DRM is more implied. A bunch of companies are working on slightly different ways to prove you're human, or attest that some computation was done correctly/privately in a co-processor.

Instead of talking about "media/copyright protection" they're branding it more as "trustworthy computing" and framing it as something that liberates device owners, but if you start asking questions about these schemes they ultimately rely on

1. the design of the device being proprietary or obfuscated at the very least
2. it being illegal to reverse-engineer that design

in reply to ansuz / ऐरन

so they maybe want to break custom operating systems or make them illegal?

I imagine some dystopia where you can only live in society if you have a phone with google play services that waste your battery and probably spies on you to sell your usage data... No thanks...