boxee :: forums  

Go Back   boxee :: forums > boxee community > Boxee Box help

Reply
 
Thread Tools Display Modes
  #21  
Old January 31st, 2011, 07:32 PM
war59312 war59312 is offline
Senior Member
 
Join Date: Dec 2010
Posts: 209
Default

If this were really about stopping applications from interfering with BB and not about blocking third party apps you don't like..

Then all is needed is an encrypted database that holds private keys that trusted applications, such as Netflix, would use to be able to do specific actions on the BB. Not a full blown gate keeper, blocking apps totally.

In other words, no third party app could take these actions without being given the private key. And still in a way that provides protection between the BB and between different third party apps.

So yes there would still being a signing process, but it would not be about blocking third party apps but more about a policy stating what third party apps are allowed to do.

Seeing as BB did not take this route, and instead decided to use a gatekeeper mechanism instead, this tells me they 100% plan on using it to block third party apps they do not like, even one's that do NOT interfere with BB or other apps.

This is DRM at it's finest.
Reply With Quote
  #22  
Old January 31st, 2011, 07:44 PM
pbiancardi pbiancardi is offline
Senior Member
 
Join Date: Nov 2010
Posts: 166
Default

Quote:
Originally Posted by darcilicious View Post
It has not been DIRECTLY answered. I find it very hard to believe that they will officially allow access to a piracy app, that is why I am asking for clarification.
Reply With Quote
  #23  
Old January 31st, 2011, 08:15 PM
bluestarCVO bluestarCVO is offline
Member
 
Join Date: Dec 2010
Posts: 35
Default

Quote:
Originally Posted by pbiancardi View Post
It has not been DIRECTLY answered. I find it very hard to believe that they will officially allow access to a piracy app, that is why I am asking for clarification.
Why do you need clarity??? You don't even have a Box anymore. You returned it to amazon amidst all your whining, so why do you care what they do or do not allow on the box. You are just simply trying to stir up more crap, which is what you've been doing for a month or so now.

And YES, it was directly answered in linked post!
Reply With Quote
  #24  
Old January 31st, 2011, 08:21 PM
chaluga chaluga is offline
Senior Member
 
Join Date: Dec 2010
Posts: 183
Default

if everyone puts pbiancardi in your ignore list then no one will be able to quote him . I think when u sign up for this forum he should be on your ignore list by default. He's the dude who complains about the parade route when his local team wins the Superbowl/World Series/Stanley Cup etc.
__________________
SP3
Samsung 50" Plasma
Denon Receiver
B&W 5.1 Speakers
Reply With Quote
  #25  
Old January 31st, 2011, 08:45 PM
Bigheadyogi Bigheadyogi is offline
Junior Member
 
Join Date: Nov 2010
Location: NJ
Posts: 25
Default

yeah he is ..annoying..but i think he really wants it to be good...but if they allow netflix and block third party navi-x...then we are doomed..i can get netflix on a ton of devices...boxee is special for the content..lets hope they do not sell us out. I think and want to believe they will not. if i cannot get third party then ebay here we come...and i love the box the way it is now! It will just be another thing ruined by the masses...
Reply With Quote
  #26  
Old January 31st, 2011, 09:26 PM
Bixiee Bixiee is offline
Senior Member
 
Join Date: Nov 2010
Posts: 232
Default

Quote:
Originally Posted by Bigheadyogi View Post
yeah he is ..annoying..but i think he really wants it to be good...but if they allow netflix and block third party navi-x...then we are doomed..i can get netflix on a ton of devices...boxee is special for the content..lets hope they do not sell us out. I think and want to believe they will not. if i cannot get third party then ebay here we come...and i love the box the way it is now! It will just be another thing ruined by the masses...
Well then you are doomed I think, they way Rob explained it Boxee essentially "approves" all apps (a court might well see it as such), then they run the risk of getting slammed by lawsuits (say contributory copyright infringement).

What they should consider in general is turn the system around, Android apps also need to be signed with a unique name, but the programmers just make up one on their own - they just have to make sure its unique.

A somewhat similar system might be implemented here - then the developers can contact Boxee and request permissions for certain system abilities if AppX needs access to SomethingY - they hand over their key to Boxee who approves it. But if AppX does not need access to SomethingY then the developers need never contact Boxee, and they wouldn't know of the app.
__________________
Wanna design a better interface for Boxee? Here is your chance: Job Application
Reply With Quote
  #27  
Old January 31st, 2011, 10:35 PM
whipmyhair whipmyhair is offline
Member
 
Join Date: Dec 2010
Posts: 38
Default

Quote:
Originally Posted by StevenR View Post
I expect that the requirement for apps to be signed will actually be to prevent unauthorised modifications of apps, rather than to allow Boxee to block certain apps.

Taking Netflix as an example, without signing it might be possible to get hold of the files for the Netflix app when released and edit it to do things that Netflix would not want. Requiring the app to be signed will prevent this (or at least make it very difficult) as the modifications would invalidate the signature which would stop it working on the Boxee Box.

If this is the case then this could result in more apps being developed for Boxee, as there may be content providers who would develop apps but are currently put off by the ease with which somebody else can modify their app.

I only hope that this doesn't make it more difficult for first time developers, as I'm sure that a lot of them will start off (like I did) by creating apps based on the source code of an existing app.

how does this differ from boxee box to boxee software - where netflix is already a functioning app
Reply With Quote
  #28  
Old January 31st, 2011, 11:02 PM
daniel1440 daniel1440 is offline
Member
 
Join Date: Jan 2011
Posts: 33
Default

app signing is a easy way to controll / limit what user can do in BoxeeBox

like changing background, if they dont want a specific app

they will simply invalidate their key and it will stop running

main target is probably

1) make sure all online content give them money
2) later ask money from app singing like Iphone, Blackberry
3) no more hacking using app
Reply With Quote
  #29  
Old January 31st, 2011, 11:04 PM
killerbeesateme killerbeesateme is offline
Junior Member
 
Join Date: Jan 2009
Posts: 23
Default

Quote:
Originally Posted by whipmyhair View Post
how does this differ from boxee box to boxee software - where netflix is already a functioning app
It's because the boxee software uses the components already supplied by being on a windows box. It uses silverlight just as if you went directly to netflix via the browser. Boxee is just a glorified wrapper around the content.

My suspicion is that they may use this code signing for some kind of encryption. The boxee updates are just linux system images (debian i think?). So, some friendly people who are really smart could end up ripping the necessary chunks for netflix support out of them. This would be the bees knees for linux users everywhere but netflix would be pissed.

Other factor to consider is that boxee does allow some python code to be executed, which is another factor they have to consider. So, you could theoretically use a plugin to modify another plugin (I'm not sure if they sandbox or how much python kungfu you can really use)

These are just my idea as to why this is necessary.
Reply With Quote
  #30  
Old January 31st, 2011, 11:21 PM
Luterin Luterin is offline
Senior Member
 
Join Date: Dec 2010
Posts: 125
Default

Quote:
Originally Posted by Ozpeter View Post
Don't panic...
That's what they say today...

The fact still is that before 1.0.4 the app system was open and anyone could do whatever apps they wanted, and after they would just have to "press a button" and suddenly all apps they didn't like would stop working.

Would love to see the reasoning for why they implemented the signing for apps, but seems that feedback on many issues is something they are not very willing to deal with.

Last edited by Luterin; January 31st, 2011 at 11:23 PM.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 08:46 AM.


skin based on greenzero from vBSkins.com

 
Powered by vBulletin® Version 3.7.5
Copyright ©2000 - 2011, Jelsoft Enterprises Ltd.