Messages in this thread | | | From | "Downing, Thomas" <> | Subject | RE: Flame Linus to a crisp! | Date | Thu, 24 Apr 2003 18:10:01 -0400 |
| |
> From: Daniel Phillips [mailto:phillips@arcor.de] > > To join a game, you'd have to be able to prove you're running code > > that is secure all the way from boot to reboot, where everything > > from network driver to physics engine is known to be compiled from > > open source that all participants agree is good. > > How would you do that? What's the protocol?
Public key exchange lets you communicate securely over an insecure link.
> So, the game server and the BIOS have a chat, through the operating > system (which counts as an insecure link), and the BIOS tells the > server that it is the correct DRM BIOS, and it loaded a signed kernel.
How does the server _know_ that the BIOS is what it says it is? Again, what's the protocol? Saying that they 'have a chat' is bypassing the hard bits.
If I have the BIOS, any secrets it holds are now knowable to me. This means that any protocol that relies on a secret in the BIOS is broken from the start. So now you need to define a protocol which does not rely on any secret being known to the BIOS. What is this protocol?
> Substitute "broadcaster" for "game server" and you see that the same ? methods ensure that you really have the TV switched on and you are not > recording the show.
The proposed 'end-to-end' copy protection schemes for entertainment media etc, rely on proprietary _hardware_. This is still beatable, although at a higher cost. Nor is the problem quite parallel. The broadcast problem is 'how do we keep content encrypted till the last possible moment?' and 'how do we keep the decryption engine tamper proof reverse engineering proof'. The first part is easy. The second part is not possible in an absolute sense. It can only be made more or less dificult. Hence the DMCA etc.
> They also ensure you are not recording a screenshot of a politically > sensitive article about Iraq that was accidentally shown on CNN's web > site for 10 minutes. We can't have people recording things like that.
God forbid! ;-)
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |