Security researchers: the W3C's DRM needs to be thoroughly audited
http://boingboing.net/2016/07/13/security-researchers-the-w3c.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+boingboing%2FiBag+%28Boing+Boing%29
Encrypted Media Extensions (EME), part of a DRM system that's
being standardized at the World Wide Web Consortium (W3C),
marks the first instance in which a W3C standard will fall
under laws like the DMCA, which let companies threaten
security researchers with criminal and civil liability just
for disclosing the defects in these products. The Electronic
Frontier Foundation has asked the W3C to extend its existing
policies (which ban members from using patent rights to attack
those who implement W3C standards) to cover these DMCA rights,
but so far, the organization has not adopted these rules.
Security researchers, privacy experts, and technology
professionals from all over the world have signed an open
letter to the W3C asking it to reconsider. In the meantime,
EME has progressed through the W3C to "candidate
recommendation" stage, just days after an Israeli security
researcher divulged that Google's version of EME has had
serious flaws, possibly latent since 2010, that no one had
reported (Israel is one of the world's few developed nations
without a law like the DMCA).
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently
doing so -- my opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
