Digital rights management: Difference between revisions
m Added Archive |
→Further reading: Start of an organized list of DRM, we should consider a dedicated list article though |
||
| (4 intermediate revisions by 4 users not shown) | |||
| Line 8: | Line 8: | ||
==Why it is a problem== | ==Why it is a problem== | ||
Any design of a device that allows it to act against the intention of its owner constitutes a case of [[Right to own|eroded ownership]] over the device. | |||
A DRM technology is, by design, an artificial restriction of capabilities of a device, either in general or only for certain protected types of content. | A DRM technology is, by design, an artificial restriction of capabilities of a device, either in general or only for certain protected types of content. From a perspective of the rights holder (whose rights DRM protects), such restrictions need to be effective when the device or a copy of a creative work is in user's physical possession. And physical access inherently allows for many techniques of analysis and reverse engineering that may be used to devise a way to circumvent the restrictions. Therefore to be effective, a DRM technology needs to withstand the circumvention techniques available to consumers. This presents a significant engineering challenge, seemingly with no perfect solution, because solutions to date have failed or compromised various additional functions in different ways. | ||
For example, Netflix requires HDCP DRM for playback of its video content in advertised quality. And on multi-monitor systems HDCP only works if ''all'' connected monitors support it, not just the one that displays the video.<ref>{{Cite web |date=2024-02-24 |title=Netflix requires all monitors to be HDCP 2.2. How can I get around this? |url=https://old.reddit.com/r/pcmasterrace/comments/1avkwtb/netflix_requires_all_monitors_to_be_hdcp_22_how/ |url-status=live |archive-url=https://web.archive.org/web/20250126224945/https://old.reddit.com/r/pcmasterrace/comments/1avkwtb/netflix_requires_all_monitors_to_be_hdcp_22_how/ |archive-date=2025-01-26 |access-date=20 Apr 2025 |website=Old Reddit}}</ref><ref>{{Cite web |date=2021-03-22 |title=How do I get Netflix working at 4k on my second monitor? |url=https://old.reddit.com/r/netflix/comments/mam2l9/how_do_i_get_netflix_working_at_4k_on_my_second/ |url-status=live |archive-url=https://web.archive.org/web/20250403054443/https://old.reddit.com/r/netflix/comments/mam2l9/how_do_i_get_netflix_working_at_4k_on_my_second/ |archive-date=2025-04-03 |access-date=20 Apr 2025 |website=Old Reddit}}</ref><ref>{{Cite web |title=How to use Netflix on your Windows computer or tablet |url=https://help.netflix.com/en/node/23931 |url-status=live |archive-url=https://web.archive.org/web/20260104160941/https://help.netflix.com/en/node/23931 |archive-date=2026-01-04 |access-date=20 Apr 2025 |website=Netflix Help Center}}</ref> This means that older but fully functional monitors cannot be used as secondary screens without causing HDCP to fail on that PC and thus causing Netflix to serve a version of the content much lower in quality than it advertises. | For example, Netflix requires HDCP DRM for playback of its video content in advertised quality. And on multi-monitor systems HDCP only works if ''all'' connected monitors support it, not just the one that displays the video.<ref>{{Cite web |date=2024-02-24 |title=Netflix requires all monitors to be HDCP 2.2. How can I get around this? |url=https://old.reddit.com/r/pcmasterrace/comments/1avkwtb/netflix_requires_all_monitors_to_be_hdcp_22_how/ |url-status=live |archive-url=https://web.archive.org/web/20250126224945/https://old.reddit.com/r/pcmasterrace/comments/1avkwtb/netflix_requires_all_monitors_to_be_hdcp_22_how/ |archive-date=2025-01-26 |access-date=20 Apr 2025 |website=Old Reddit}}</ref><ref>{{Cite web |date=2021-03-22 |title=How do I get Netflix working at 4k on my second monitor? |url=https://old.reddit.com/r/netflix/comments/mam2l9/how_do_i_get_netflix_working_at_4k_on_my_second/ |url-status=live |archive-url=https://web.archive.org/web/20250403054443/https://old.reddit.com/r/netflix/comments/mam2l9/how_do_i_get_netflix_working_at_4k_on_my_second/ |archive-date=2025-04-03 |access-date=20 Apr 2025 |website=Old Reddit}}</ref><ref>{{Cite web |title=How to use Netflix on your Windows computer or tablet |url=https://help.netflix.com/en/node/23931 |url-status=live |archive-url=https://web.archive.org/web/20260104160941/https://help.netflix.com/en/node/23931 |archive-date=2026-01-04 |access-date=20 Apr 2025 |website=Netflix Help Center}}</ref> This means that older but fully functional monitors cannot be used as secondary screens without causing HDCP to fail on that PC and thus causing Netflix to serve a version of the content much lower in quality than it advertises. | ||
| Line 16: | Line 16: | ||
Requirements such as this are not always clearly disclosed. When they are, they are often buried in the Terms of Service or, in Netflix's case, require navigating through multiple FAQ pages. Furthermore, some content may surreptitiously install DRM without the knowledge or consent of the user, such as in the Sony Rootkit scandal.<ref>{{Cite web |date=31 Oct 2005 |title=Sony, Rootkits and Digital Rights Management Gone Too Far |url=https://blogs.technet.com/b/markrussinovich/archive/2005/10/31/sony-rootkits-and-digital-rights-management-gone-too-far.aspx |url-status=dead |archive-url=https://web.archive.org/web/20150317040653/http://blogs.technet.com/b/markrussinovich/archive/2005/10/31/sony-rootkits-and-digital-rights-management-gone-too-far.aspx |archive-date=17 Mar 2015 |access-date=20 Apr 2025 |website=Mark Russinovich's Blog}}</ref> Such software may contain exploits that can compromise the security of the user's PC.<ref>{{Cite web |last=Krebs |first=Brian |date=10 Nov 2005 |title=Virus Writers Exploit Sony Anti-Piracy Software |url=https://blog.washingtonpost.com/securityfix/2005/11/virus_writers_exploit_sony_ant.html |url-status=dead |archive-url=https://web.archive.org/web/20061116191907/http://blog.washingtonpost.com/securityfix/2005/11/virus_writers_exploit_sony_ant.html |archive-date=16 Nov 2006 |access-date=20 Apr 2025 |website=Washington Post}}</ref> | Requirements such as this are not always clearly disclosed. When they are, they are often buried in the Terms of Service or, in Netflix's case, require navigating through multiple FAQ pages. Furthermore, some content may surreptitiously install DRM without the knowledge or consent of the user, such as in the Sony Rootkit scandal.<ref>{{Cite web |date=31 Oct 2005 |title=Sony, Rootkits and Digital Rights Management Gone Too Far |url=https://blogs.technet.com/b/markrussinovich/archive/2005/10/31/sony-rootkits-and-digital-rights-management-gone-too-far.aspx |url-status=dead |archive-url=https://web.archive.org/web/20150317040653/http://blogs.technet.com/b/markrussinovich/archive/2005/10/31/sony-rootkits-and-digital-rights-management-gone-too-far.aspx |archive-date=17 Mar 2015 |access-date=20 Apr 2025 |website=Mark Russinovich's Blog}}</ref> Such software may contain exploits that can compromise the security of the user's PC.<ref>{{Cite web |last=Krebs |first=Brian |date=10 Nov 2005 |title=Virus Writers Exploit Sony Anti-Piracy Software |url=https://blog.washingtonpost.com/securityfix/2005/11/virus_writers_exploit_sony_ant.html |url-status=dead |archive-url=https://web.archive.org/web/20061116191907/http://blog.washingtonpost.com/securityfix/2005/11/virus_writers_exploit_sony_ant.html |archive-date=16 Nov 2006 |access-date=20 Apr 2025 |website=Washington Post}}</ref> | ||
DRM in video games has frequently been implemented in an intrusive manner, hurting load times and performance.<ref>{{Cite web |last=Kessler |first=Ana |date=25 May 2023 |title=Testing Reveals Games with Denuvo Launch Up to Four Times Slower |url=https://80.lv/articles/testing-reveals-games-with-denuvo-launch-up-to-four-times-slower/ |url-status=live |archive-url=https://web.archive.org/web/20250911084255/https://80.lv/articles/testing-reveals-games-with-denuvo-launch-up-to-four-times-slower |archive-date=2025-09-11 |access-date=20 Apr 2025 |website=80.lv}}</ref> This behavior has been more a result of negligent usage of the DRM rather than deliberate malicious intent. The detrimental effect of DRM on games appears to be known to their developers and publishers, seeing that DRM is removed from some games some time after the release,<ref>{{Cite web |last=Wesh |first=Oli |date=2009-07-09 |title=DRM removed, UGC in Witcher patch |url=https://www.eurogamer.net/drm-removed-ugc-added-in-witcher-patch |url-status=live |archive-url=https://web.archive.org/web/20241211070935/https://www.eurogamer.net/drm-removed-ugc-added-in-witcher-patch |archive-date=2024-12-11 |website=Eurogamer}}</ref> often with no announcement.<ref>{{Cite web |date=2016-12-08 |title=Doom Becomes Latest Game To Drop Anti-Piracy Tech Denuvo |url=https://kotaku.com/doom-becomes-latest-game-to-drop-anti-piracy-tech-denuv-1789838010 |website=Kotaku}}</ref> | DRM in video games has frequently been implemented in an intrusive manner, hurting load times and performance.<ref>{{Cite web |last=Kessler |first=Ana |date=25 May 2023 |title=Testing Reveals Games with Denuvo Launch Up to Four Times Slower |url=https://80.lv/articles/testing-reveals-games-with-denuvo-launch-up-to-four-times-slower/ |url-status=live |archive-url=https://web.archive.org/web/20250911084255/https://80.lv/articles/testing-reveals-games-with-denuvo-launch-up-to-four-times-slower |archive-date=2025-09-11 |access-date=20 Apr 2025 |website=80.lv}}</ref> This behavior has been more a result of negligent usage of the DRM rather than deliberate malicious intent. The detrimental effect of DRM on games appears to be known to their developers and publishers, seeing that DRM is removed from some games some time after the release,<ref>{{Cite web |last=Wesh |first=Oli |date=2009-07-09 |title=DRM removed, UGC in Witcher patch |url=https://www.eurogamer.net/drm-removed-ugc-added-in-witcher-patch |url-status=live |archive-url=https://web.archive.org/web/20241211070935/https://www.eurogamer.net/drm-removed-ugc-added-in-witcher-patch |archive-date=2024-12-11 |website=Eurogamer}}</ref> often with no announcement.<ref>{{Cite web |last=Grayson |first=Nathan |date=2016-12-08 |title=Doom Becomes Latest Game To Drop Anti-Piracy Tech Denuvo |url=https://kotaku.com/doom-becomes-latest-game-to-drop-anti-piracy-tech-denuv-1789838010 |url-status=live |archive-url=https://web.archive.org/web/20250821033141/https://kotaku.com/doom-becomes-latest-game-to-drop-anti-piracy-tech-denuv-1789838010 |archive-date=2025-08-21 |website=Kotaku}}</ref> | ||
DRM failures can also come as a surprise. For example, with a YouTube Premium subscription, you can "Download videos to watch offline", but such videos are only available for 48 hours without an internet connection.<ref>{{Cite web |title=Watch videos offline on mobile in select countries & regions |url=https://support.google.com/youtube/answer/6141269 |url-status=live |archive-url=https://web.archive.org/web/20260115091128/https://support.google.com/youtube/answer/6141269 |archive-date=2026-01-15 |access-date=20 Apr 2025 |website=YouTube Help}}</ref> This creates confusion and problems, as users may want to download videos in anticipation of a period without internet access. | DRM failures can also come as a surprise. For example, with a YouTube Premium subscription, you can "Download videos to watch offline", but such videos are only available for 48 hours without an internet connection.<ref>{{Cite web |title=Watch videos offline on mobile in select countries & regions |url=https://support.google.com/youtube/answer/6141269 |url-status=live |archive-url=https://web.archive.org/web/20260115091128/https://support.google.com/youtube/answer/6141269 |archive-date=2026-01-15 |access-date=20 Apr 2025 |website=YouTube Help}}</ref> This creates confusion and problems, as users may want to download videos in anticipation of a period without internet access. | ||
| Line 36: | Line 36: | ||
==DRM in video content== | ==DRM in video content== | ||
Attempting to prevent the copying of video content is one of the most common and long-standing uses of DRM. The idea of using copy obstruction on video content predates the term "DRM", one early example being the "Automatic Gain Control" requirement in VCRs used to enforce the "Macrovision" copy-protection scheme.<ref>{{Cite web |date=1999-11-29 |title=17 U.S. Code § 1201 - Circumvention of copyright protection systems |url=https://www.law.cornell.edu/uscode/text/17/1201#k_1_A |url-status=live |archive-url=https://web.archive.org/web/20260201101756/https://www.law.cornell.edu/uscode/text/17/1201#k_1_A |archive-date=2026-02-01 |access-date=2026-02-06 |website=Cornell Law School}}</ref><ref>{{Cite web |date=2018 |title=Macrovision Demystified |url=https://cs.stanford.edu/people/eroberts/courses/cs181/projects/1999-00/dmca-2k/macrovision.html |url-status=live |archive-url=https://web.archive.org/web/20251212001352/https://cs.stanford.edu/people/eroberts/courses/cs181/projects/1999-00/dmca-2k/macrovision.html |archive-date=2025-12-12 |access-date=2026-02-06 |website=Stanford Engineering Computer Science}} </ref> | Attempting to prevent the copying of video content is one of the most common and long-standing uses of DRM. The idea of using copy obstruction on video content predates the term "DRM", one early example being the "Automatic Gain Control" requirement in VCRs used to enforce the "Macrovision" copy-protection scheme.<ref>{{Cite web |date=1999-11-29 |title=17 U.S. Code § 1201 - Circumvention of copyright protection systems |url=https://www.law.cornell.edu/uscode/text/17/1201#k_1_A |url-status=live |archive-url=https://web.archive.org/web/20260201101756/https://www.law.cornell.edu/uscode/text/17/1201#k_1_A |archive-date=2026-02-01 |access-date=2026-02-06 |website=Cornell Law School}}</ref><ref>{{Cite web |date=2018 |title=Macrovision Demystified |url=https://cs.stanford.edu/people/eroberts/courses/cs181/projects/1999-00/dmca-2k/macrovision.html |url-status=live |archive-url=https://web.archive.org/web/20251212001352/https://cs.stanford.edu/people/eroberts/courses/cs181/projects/1999-00/dmca-2k/macrovision.html |archive-date=2025-12-12 |access-date=2026-02-06 |website=Stanford Engineering Computer Science}} </ref> | ||
Formally known as "Analog Copy Protection", the scheme worked by encoding specific control signals into the output signal that corrupted the video. <ref name="hackaday_article"> | |||
{{Cite web | |||
| last = Maloney | |||
| first = Dan | |||
| date = 2018-05-27 | |||
| title = Rolling Old School With Copy Protection From The 1980s | |||
| url = https://hackaday.com/2018/05/27/rolling-old-school-with-copy-protection-from-the-1980s/ | |||
| access-date = 2026-03-19 | |||
| archive-url = https://ghostarchive.org/archive/wa2zi | |||
| archive-date = 2026-03-19 | |||
}} | |||
</ref> | |||
These signals were generally ignored by TVs, so when the VHS tape was played back, the video appeared correct, but VCRs handled these bogus signals, causing the recorded tape to contain the corrupted video. <ref name="hackaday_article" /> | |||
From 1996, DVDs began to feature the "Content Scramble System" (CSS), an encryption based DRM. CSS was successfully circumvented as early as 1999, less than five years after its introduction, partly due to the limited length of the 40-bit encryption key, which was used to comply with US government export regulations of the time.<ref>{{Cite web |last=Stevenson |first=Frank Andrew |date=27 Oct 1999 |title=[Livid-dev] Successfull attack on CSS algorithm |url=https://www.cs.cmu.edu/~dst/DeCSS/FrankStevenson/mail1.txt |url-status=live |archive-url=https://web.archive.org/web/20260114031245/https://www.cs.cmu.edu/~dst/DeCSS/FrankStevenson/mail1.txt |archive-date=2026-01-14 |access-date=2026-02-06 |website=Carnegie Mellon University School of Computer Science}}</ref><ref>{{Cite web |last=Stevenson |first=Frank A. |date=8 November 1999 |title=Cryptanalysis of Contents Scrambling System |url=http://www.dvd-copy.com/news/cryptanalysis_of_contents_scrambling_system.htm |url-status=dead |archive-url=https://web.archive.org/web/20000302000206/http://www.dvd-copy.com/news/cryptanalysis_of_contents_scrambling_system.htm |archive-date=2000-03-02 |access-date=2026-02-06 |website=DVD-Copy}}</ref> Following this, DVDs as well as HD-DVDs and Blu-Rays would implement other types of DRM, one of them being the "Advanced Access Content System".<ref>{{Cite web |title=Advanced Access Content System (AACS) |url=https://www.aacsla.com/specifications/specs091/AACS_Spec_Common_0.91.pdf |url-status=dead |archive-url=https://web.archive.org/web/20070302130221/http://www.aacsla.com/specifications/specs091/AACS_Spec_Common_0.91.pdf |archive-date=2 Mar 2007 |access-date=20 Apr 2025}} | From 1996, DVDs began to feature the "Content Scramble System" (CSS), an encryption based DRM. CSS was successfully circumvented as early as 1999, less than five years after its introduction, partly due to the limited length of the 40-bit encryption key, which was used to comply with US government export regulations of the time.<ref>{{Cite web |last=Stevenson |first=Frank Andrew |date=27 Oct 1999 |title=[Livid-dev] Successfull attack on CSS algorithm |url=https://www.cs.cmu.edu/~dst/DeCSS/FrankStevenson/mail1.txt |url-status=live |archive-url=https://web.archive.org/web/20260114031245/https://www.cs.cmu.edu/~dst/DeCSS/FrankStevenson/mail1.txt |archive-date=2026-01-14 |access-date=2026-02-06 |website=Carnegie Mellon University School of Computer Science}}</ref><ref>{{Cite web |last=Stevenson |first=Frank A. |date=8 November 1999 |title=Cryptanalysis of Contents Scrambling System |url=http://www.dvd-copy.com/news/cryptanalysis_of_contents_scrambling_system.htm |url-status=dead |archive-url=https://web.archive.org/web/20000302000206/http://www.dvd-copy.com/news/cryptanalysis_of_contents_scrambling_system.htm |archive-date=2000-03-02 |access-date=2026-02-06 |website=DVD-Copy}}</ref> Following this, DVDs as well as HD-DVDs and Blu-Rays would implement other types of DRM, one of them being the "Advanced Access Content System".<ref>{{Cite web |title=Advanced Access Content System (AACS) |url=https://www.aacsla.com/specifications/specs091/AACS_Spec_Common_0.91.pdf |url-status=dead |archive-url=https://web.archive.org/web/20070302130221/http://www.aacsla.com/specifications/specs091/AACS_Spec_Common_0.91.pdf |archive-date=2 Mar 2007 |access-date=20 Apr 2025}} | ||
| Line 52: | Line 65: | ||
===Always-online DRM=== | ===Always-online DRM=== | ||
Some DRM requires a constant internet connection. While this may make sense in something that inherently requires an internet connection such as a streaming service or multiplayer-only video game, this has also been employed in games with single-player content, rendering customers unable to use their purchase if they do not have an active internet connection.<ref>{{Cite web |last=Kain |first=Erik |date=17 May 2012 |title='Diablo III' Fans Should Stay Angry About Always-Online DRM |url=https://www.forbes.com/sites/erikkain/2012/05/17/diablo-iii-fans-should-stay-angry-about-always-online-drm/ |url-status=live |archive-url=https://web.archive.org/web/20251024065743/https://www.forbes.com/sites/erikkain/2012/05/17/diablo-iii-fans-should-stay-angry-about-always-online-drm/ |archive-date=2025-10-24 |access-date=20 Apr 2025 |website=Forbes}}</ref> Conversely, if operations for these services are shut down, | Some DRM requires a constant internet connection. While this may make sense in something that inherently requires an internet connection such as a streaming service or multiplayer-only video game, this has also been employed in games with single-player content, rendering customers unable to use their purchase if they do not have an active internet connection.<ref>{{Cite web |last=Kain |first=Erik |date=17 May 2012 |title='Diablo III' Fans Should Stay Angry About Always-Online DRM |url=https://www.forbes.com/sites/erikkain/2012/05/17/diablo-iii-fans-should-stay-angry-about-always-online-drm/ |url-status=live |archive-url=https://web.archive.org/web/20251024065743/https://www.forbes.com/sites/erikkain/2012/05/17/diablo-iii-fans-should-stay-angry-about-always-online-drm/ |archive-date=2025-10-24 |access-date=20 Apr 2025 |website=Forbes}}</ref> Conversely, if operations for these services are shut down, users, even those with legitimate copies of software and internet access, cannot run their games without resorting to hacking them first.<ref>{{Cite web |last=Vitor |first=João |date=12 Jul 2024 |title=Rewriting completely the GameSpy support from 2000 to 2004 using Reverse Engineering on EA and Bungie Games |url=https://keowu.re/posts/Rewriting-completely-the-GameSpy-support-from-2000-to-2004-using-Reverse-Engineering-on-EA-and-Bungie-Games/ |url-status=live |archive-url=https://web.archive.org/web/20251216155905/https://keowu.re/posts/Rewriting-completely-the-GameSpy-support-from-2000-to-2004-using-Reverse-Engineering-on-EA-and-Bungie-Games |archive-date=2025-12-16 |access-date=20 Apr 2025 |website=Keowu Blog's}}</ref><ref>{{Cite web |last=Burns |first=Chris |date=4 Apr 2014 |title=GameSpy Shuts Down May 31: Will Your Game Be Affected? |url=https://www.slashgear.com/gamespy-shuts-down-may-31-will-your-game-be-affected-04323788/ |url-status=live |archive-url=https://web.archive.org/web/20251024204157/https://www.slashgear.com/gamespy-shuts-down-may-31-will-your-game-be-affected-04323788/ |archive-date=2025-10-24 |access-date=20 Apr 2025 |website=SlashGear}}</ref> [[Ubisoft]] has historically been known for server shutdowns and transfers cutting off access to games for many players.<ref>{{Cite web |last=Sharkey |first=Mike |date=2012-02-08 |title=Ubisoft DRM Locks Out Paying Customers |url=https://pc.gamespy.com/articles/121/1218211p1.html |url-status=dead |archive-url=https://web.archive.org/web/20150906130332/http://pc.gamespy.com/articles/121/1218211p1.html |archive-date=2015-09-06 |access-date=20 Apr 2025 |website=IGN Entertainment}}</ref> Encrypted [[ATSC 3.0]] channels cannot be tuned to without a persistent internet connection.<ref>{{Cite web |last=Seidman |first=Lon |date=3 Sep 2023 |title=The ADTH Nextgen TV Box Shows Us Just How Bad ATSC 3.0 Encryption Will Be.. |url=https://blog.lon.tv/2023/09/03/the-adth-nextgen-tv-box-shows-us-just-how-bad-atsc-3-0-encrpytion-will-be/ |url-status=live |archive-url=https://web.archive.org/web/20251214005506/https://blog.lon.tv/2023/09/03/the-adth-nextgen-tv-box-shows-us-just-how-bad-atsc-3-0-encrpytion-will-be/ |archive-date=2025-12-14 |access-date=20 Apr 2025 |website=Lon.tv}}</ref> | ||
| Line 79: | Line 92: | ||
==Further reading== | ==Further reading== | ||
*[[Automotive digital restrictions management]] | *[[Automotive digital restrictions management]] | ||
=== Types of DRM === | |||
==== Gaming ==== | |||
* [[Denuvo]] | |||
* [[SecuROM]] | |||
==== Other ==== | |||
* [[HP Dynamic Security]] | |||
==References== | ==References== | ||
<references /> | <references /> | ||
[[Category:Digital rights management]] | [[Category:Digital rights management]] | ||