I'm confused about how open source DRM can even be a thing. Presumably once you've obtained one of these client identity files, you can modify OpenWV to capture the decrypted / raw video to wherever you want?
Mindwipe•2w ago
It isn't, it's just an open source library to talk to the closed source Widevine plugin included with Chrome, or, in this case with keys illicitly obtained from a broken Google plugin that they haven't revoked yet.
There were some open source white box cryptography attempts fifteen or so years ago and they didn't work because of precisely what you say.
rwmj•2w ago
Thanks that makes more sense (and is also a bit disappointing!)
jervant•2w ago
That's not true and wouldn't work on OpenBSD anyway (binaries are not compatible). The files you're copying from another device are just encryption keys.
I did say that in the second half of the sentence.
But it still isn't an example of someone shipping an open source DRM module - it's just software to crack DRM with a leaked key.
(Incidentally and this is not legal advice, but if you are in one of many European territories and downloading software from Git here I would encourage people to think about the possibility you are committing an actual criminal offence by doing so, as you are "importing" it by virtue obtaining it from a US entity.)
pjmlp•2w ago
> If you want to use OpenWV, you must obtain an appropriate wvd file yourself,
and copy it to /etc/openwv/widevine_device.wvd
rwmj•2w ago
Mindwipe•2w ago
There were some open source white box cryptography attempts fifteen or so years ago and they didn't work because of precisely what you say.
rwmj•2w ago
jervant•2w ago
OpenWV is implementing the decryption itself:
https://github.com/tchebb/openwv
Mindwipe•1w ago
But it still isn't an example of someone shipping an open source DRM module - it's just software to crack DRM with a leaked key.
(Incidentally and this is not legal advice, but if you are in one of many European territories and downloading software from Git here I would encourage people to think about the possibility you are committing an actual criminal offence by doing so, as you are "importing" it by virtue obtaining it from a US entity.)