Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

DRM in Firefox is The End of Our Digital Security
Linux Federation ^ | 20 May 2014 | Rahul Bali

Posted on 05/21/2014 8:42:39 AM PDT by ShadowAce

mozilla_drm

Mozilla recently decided to add DRM in Firefox even if Mozilla hates it. Almost all video streaming websites use some kind of DRM and as Microsoft, Apple and Google has already implemented DRM in their browsers, Mozilla thinks not adding the DRM in Firefox would make it useless as a product as the user will have to switch to other browser everytime a user visits a website with DRM.

I am not going to either defend Mozilla on the decision of adding DRM in Firefox or write against it, they did what they had to do. In the end its all business, Firefox is of no use to me if I cannot watch Netflix on it. So I can understand the awkward position Mozilla would be in when deciding on the DRM in Firefox, what I don’t understand is How can Mozilla completely ignore the security complications associated with this decision.

In a single line, DRM in Firefox is going to end our digital security as we know it and I’ll explain it how. I don’t care about other browsers as they have already given up on user liberty long ago but Firefox has long stood for our freedom on the web and I respect that, well used to.

For a moment, let’s say we don’t have any problem with the DRM in Firefox and we are actually happy as now we’ll be able to enjoy services like Netflix and others. The problem is that DRM module implemented in Firefox is being developed by Adobe ( Yes, Adobe ), an HTML 5 based DRM implemented in Firefox is being developed by Adobe.

The DRM module developed by Adobe is closed source, which alone is a deal breaker for many people and worse it is protected by controversial global laws to prevent security research because such information could be used to weaken the DRM and researchers publishing such information publicly has been threatened and prosecuted in the past. In other words, reporting security bugs for Adobe’s DRM module in Firefox can land you in legal trouble.

Dmitry Sklyarov, a Russian Computer Security Researcher was arrested by FBI in 2001 because he presented a paper on the strengths and weaknesses of the software used to protect electronic books at Defcon convention in Las Vegas.

It was our very own Adobe who charged Dmitry Sklyarov with breaking the security on Acrobat’s E-Reader API, trafficking in and offering to the public a software program that could circumvent technological protections on copyrighted material under section 1201(b)(1)(A) of the U.S. Copyright Act which was made law by the 1998 Digital Millennium Copyright Act (the DMCA). He was also charged with aiding and abetting his employer Russian software development company Elcom Ltd (a.k.a. ElcomSoft Co. Ltd) to do that.

What Dmitry Sklyarov did was legitimate security research and he determined the security of several popular E-Book reader products and then notified the respective firms of his findings. His company Elcomsoft published, in Russia, software that circumvented these ineffectual security systems.  His Def Con talk was a clear and evenhanded presentation of the facts. “This security is weak, and here’s why.” he said. One particular company he mentioned stored the password in plaintext inside the executable. So, anyone with Notepad and a few minutes of scrolling could have the book modified for easy distribution.

Even Sony BMG infected millions of computers with an illegal rootkit to prevent people from ripping their Audio CDs which was completely Legal. After the word was out, many security researchers admitted that they had known about the rootkit but were afraid to say anything about it.

So Mozilla is allowing to run such a software in Firefox which is closed source and insecure to such a degree that even Security bugs are illegal to report. Although Mozilla is trying its best to limit the effect of DRM by the running the DRM module in a sandbox which will limit module’s access to other processes in the system and Firefox is the only web browser to do so as the DRM module runs unrestrictedly in other browsers. But that is not enough and Mozilla knows that and admits in a blog post

“Unfortunately, Mozilla alone cannot change the industry on DRM at this point. The new implementation of DRM will soon become the only way browsers can provide access to DRM-controlled content.”

Mozilla openly admits that there is nothing they can do instead of accepting DRM. Mozilla was one the biggest advocate of Open Source and Free Software on the web. With Mozilla’s recent actions, freedom invading industry practices and continuous enforcements of privacy violating laws, I can image what the future looks like.


TOPICS: Computers/Internet
KEYWORDS: drm; firefox; mozilla

1 posted on 05/21/2014 8:42:39 AM PDT by ShadowAce
[ Post Reply | Private Reply | View Replies]

To: rdb3; Calvinist_Dark_Lord; JosephW; Only1choice____Freedom; amigatec; Still Thinking; ...

2 posted on 05/21/2014 8:42:55 AM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 1 | View Replies]

To: ShadowAce

Brendan Eich, the head of the company who was forced out ostensibly for political correctness, was an opponent of adding the technology to Firefox. Many suspect that he was removed in order to facilitate greater NSA penetration of the Web, and that the PC brouhaha was just a cover to divert attention.


3 posted on 05/21/2014 8:45:18 AM PDT by Piranha (Power is not only what you have but what the enemy thinks you have - Saul Alinsky)
[ Post Reply | Private Reply | To 2 | View Replies]

To: ShadowAce

Well, that’s the end of my waterfox updates.

I’ll just stick with current versions until a workaround appears.


4 posted on 05/21/2014 8:50:25 AM PDT by Dr. Sivana ("I'm a Contra" -- President Ronald Reagan)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Piranha

I wonder how he felt about Austrias or what ever that piece of crap is called.


5 posted on 05/21/2014 8:56:52 AM PDT by demshateGod (The fool hath said in his heart, There is no God.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Piranha

The Gaystoppo strikes again.


6 posted on 05/21/2014 8:58:21 AM PDT by rawcatslyentist (Jeremiah 50:32 "The arrogant one will stumble and fall ; / ?)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Dr. Sivana

I use FF 11.0 and Adobe Reader 10.0. Why keep updating just to get the latest bug?


7 posted on 05/21/2014 9:07:39 AM PDT by B4Ranch (Name your illness, do a Google & YouTube search with "hydrogen peroxide". Do it and be surprised.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: B4Ranch
I use FF 11.0 and Adobe Reader 10.0. Why keep updating just to get the latest bug?

Because those old products are gaping wide with security flaws. Especially Adobe Reader, but also with FF. The code writers are always trying to stay one step ahead of the hackers. If you're going to run those old versions, you'd be best served by turning off JavaScript, any video and audio acceleration, etc.

8 posted on 05/21/2014 9:37:21 AM PDT by Sparticus (Tar and feathers for the next dumb@ss Republican that uses the word bipartisanship.)
[ Post Reply | Private Reply | To 7 | View Replies]

To: ShadowAce

It would be nice if he explained what DRM is. Not everyone knows what it is or why we should.


9 posted on 05/21/2014 9:40:25 AM PDT by miele man
[ Post Reply | Private Reply | To 1 | View Replies]

To: Piranha

Bingo.


10 posted on 05/21/2014 9:48:57 AM PDT by Talisker (One who commands, must obey.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Sparticus

Java, active X and all the things that allow pop ups are all shut off. I haven’t had a bug in more than three years.


11 posted on 05/21/2014 9:48:58 AM PDT by B4Ranch (Name your illness, do a Google & YouTube search with "hydrogen peroxide". Do it and be surprised.)
[ Post Reply | Private Reply | To 8 | View Replies]

To: ShadowAce
In other words, reporting security bugs for Adobe’s DRM module in Firefox can land you in legal trouble.

So I can go to jail for pointing out that this thing was made by Adobe?

12 posted on 05/21/2014 9:51:31 AM PDT by MeganC (Never attribute to malice that which is adequately explained by stupidity.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: miele man

Digital Rights Management


13 posted on 05/21/2014 9:52:32 AM PDT by sopwith (LIVE FREE OR DIE)
[ Post Reply | Private Reply | To 9 | View Replies]

To: miele man

Yeah, it’s a trait of the computer clique.


14 posted on 05/21/2014 9:54:23 AM PDT by ansel12 ((Ted Cruz and Mike Lee-both of whom sit on the Senate Judiciary Comm as Ginsberg's importance fades)
[ Post Reply | Private Reply | To 9 | View Replies]

To: ShadowAce

too much jibber jabber and techeeze

english please


15 posted on 05/21/2014 12:03:26 PM PDT by Wuli
[ Post Reply | Private Reply | To 1 | View Replies]

To: Wuli

DRM (Digital Rights Management) is another layer of software to prevent the end user from doing anything that the owner does not want.


16 posted on 05/21/2014 12:05:44 PM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 15 | View Replies]

To: Sparticus

If you just need a pdf reader, there are quite a few alternatives to the Adobe product. I use Sumatra - freeware. It will also read .epub amd .mobi files.
http://blog.kowalczyk.info/software/sumatrapdf/free-pdf-reader.html


17 posted on 05/21/2014 5:27:30 PM PDT by expat1000
[ Post Reply | Private Reply | To 8 | View Replies]

To: ansel12

Yes, apparently so. I’ll now call it a garish name acquistion technique and to institute my new program, I’ll assign it the acronym of “GNATS”. Take that.

Thanks for your reply.


18 posted on 05/21/2014 8:39:43 PM PDT by miele man
[ Post Reply | Private Reply | To 14 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson