Privacy implications of browsers’ (mis)implementations of Widevine EME (2023)

  • I've set DRM to require explicit approval in the browser, and I've seen random web sites that have no obvious reason to do so randomly request the permission.

    I don't know what exactly causes this, since it's intermittent (the same web site doesn't always do it) and happens even with various ad and tracking blockers in place.

  • Interestingly, DRM is also being used by Signal for privacy concerns over Windows Recall, as discussed on HN [0] previously.

    [0] https://news.ycombinator.com/item?id=44053364

  • Popular web browsers way too complex, far too difficult to control.

    Simpler software could satisfy web users.

    Could reduce potential for surveillance and annoying distractions. Easier to audit and control.

  • (I had to editorialize to get the title within the limits)

  • I flat out have DRM disabled in my browser. If I really really need it, then that's what VMs and VPNs are for.

  • Not surprising at all.

  • [dead]