Hacker News new | past | comments | ask | show | jobs | submit login

He's referring to their standard for embedding hooks for DRM into web pages, the so-called "Encrypted Media Extensions":

https://w3c.github.io/encrypted-media/




I don't understand, doesn't this only apply to DRM content? How does this enable remote control of your browser?


No, it's about control of your browser.

In standard HTML a server sends you some text bits and data streams and your browser chooses what it wants to do with them. Save them, display them on the screen, ignore them, etc. With DRM the browser has to be specifically engineered to do not what you want it to do, but what the person sending the data wants it to do. This is almost always done inside of some kind of 'black box of digital magic', be it software or hardware. If you had control or insight of the black box it is likely you could subvert control of the encrypted media.

Now I won't say that it directly enables control over your browser any more so than Flash does (Only 76 CVE's in 2014), but every black box is a point of attack for hackers.


Ahh gotcha. Thanks.


DRM ensures that browser doesn't always behave the way you want it to behave. You no longer have full control over it, you give a part of it away to 3rd party.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: