From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id 7EF934B863 for ; Wed, 17 Jul 2024 12:19:48 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 68DBB68DA3A; Wed, 17 Jul 2024 15:19:46 +0300 (EEST) Received: from relay9-d.mail.gandi.net (relay9-d.mail.gandi.net [217.70.183.199]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 0955868D7A3 for ; Wed, 17 Jul 2024 15:19:39 +0300 (EEST) Received: by mail.gandi.net (Postfix) with ESMTPSA id EA5EFFF805; Wed, 17 Jul 2024 12:19:38 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=niedermayer.cc; s=gm1; t=1721218779; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=w9CpaaoksjtAiVAF0KhOfe9xVuiYegze+Jn3BVRSoCs=; b=Es+wNRo3wAO1yNhF2vHH6lNO2WjICbf0bHvnkbiFOInQiRuIXhwCCMJ7Z4fVQrYwYi6yn7 Pvpmy3JW6h8zX0XgUJhqib1k2hTpOrUadn7GQ6WW+oEBs/kXQCuQAQm/+BWLYuPttRqeiM 3cnQ/AnxPxko0WZGlpfMZwbZkzWDGzTcbSzDLaiPn1DCx9NlqZ89rx7YuGrio/RnLEIMSG 6SDZSycxAVnP1xGRJKZoNm5YT3o8QSiMeBVfczOifuW2etkYk2Sa3XIKM8vehycHT/a12r MNKqA5UvobBWk+FqNn9x2F9xQpiITF7L/7AWJ40uKsuaXMa2JUGetGwVSG84Fw== Date: Wed, 17 Jul 2024 14:19:38 +0200 From: Michael Niedermayer To: FFmpeg development discussions and patches , Cosmin Stejerean Message-ID: <20240717121938.GR4991@pb2> References: <20240612134729.150227-1-matthieu.bouron@gmail.com> <2009DBEE-686A-42F6-A5DF-35147272EEF0@cosmin.at> <01010190bc3ac66e-29b94bf2-432e-4d05-bc09-4f690413c8ea-000000@us-west-2.amazonses.com> <2088202.tA7jik9aeU@basile.remlab.net> <205EB89E-F6F9-438D-A9BC-E76E5439C7C7@cosmin.at> <01010190bd2e7fe5-8667f0ad-72d1-4361-a894-fbb7b9df9b81-000000@us-west-2.amazonses.com> <172120911304.21847.16652588338657358575@lain.khirnov.net> MIME-Version: 1.0 In-Reply-To: <172120911304.21847.16652588338657358575@lain.khirnov.net> X-GND-Sasl: michael@niedermayer.cc Subject: Re: [FFmpeg-devel] Add Mediacodec audio decoders support X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: multipart/mixed; boundary="===============6085053390352136700==" Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: --===============6085053390352136700== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="oAOQDB2mA8gEsNZP" Content-Disposition: inline --oAOQDB2mA8gEsNZP Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Jul 17, 2024 at 11:38:33AM +0200, Anton Khirnov wrote: > Quoting Cosmin Stejerean via ffmpeg-devel (2024-07-16 22:14:19) > >=20 > >=20 > > > On Jul 16, 2024, at 8:24=E2=80=AFPM, R=C3=A9mi Denis-Courmont wrote: > > >=20 > > > Le tiistaina 16. hein=C3=A4kuuta 2024, 18.48.06 EEST Cosmin Stejerean= via ffmpeg- > > > devel a =C3=A9crit : > > >> To add another data point, the platform decoders might also be more = secure > > >> due to sandboxing. I believe as of Android Q the software decoders p= rovided > > >> by MediaCodec have been moved to run within a constrained sandbox. > > >=20 > > > Platform decoders are in all likelihood strictly less secure than sof= tware=20 > > > decoders. Software decoders will run in a user-space sandboxed within= their=20 > > > respective application. Platform decoders will run in a more privileg= ed system=20 > > > service, with direct access to a kernel driver in EL1, through that t= o the=20 > > > firmware running on the video DSP. > > >=20 > > > More performant and energy-efficient. But also way way less secure. > > >=20 > > > The only viewpoint whence this is more secure, is the content publish= er's:=20 > > > this model enables DRM with hardware pass-through (but that does not = even=20 > > > apply if you use FFmpeg as the front end). > > >=20 > >=20 > > Platform provided *software* decoders should be more secure than bundle= d software decoders due to the sandboxing of software decoders in recent ve= rsions of Android. >=20 > If that is such an important feature to someone then it is not > inconceivable to implement some sort of sandboxing inside avcodec. >=20 > I'm not a big fan of the argument "we should provide passthrough to > proprietary decoders because they are more secure". +1 thx [...] --=20 Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB Dictatorship: All citizens are under surveillance, all their steps and actions recorded, for the politicians to enforce control. Democracy: All politicians are under surveillance, all their steps and actions recorded, for the citizens to enforce control. --oAOQDB2mA8gEsNZP Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iF0EABEKAB0WIQSf8hKLFH72cwut8TNhHseHBAsPqwUCZpe2zwAKCRBhHseHBAsP q+AtAJ4x5Xp42RLKv+dgi1wKj0FyAOZ56QCcDqwO7Vfm1Uz6XB+i1XXC6UUseUQ= =izQ8 -----END PGP SIGNATURE----- --oAOQDB2mA8gEsNZP-- --===============6085053390352136700== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". --===============6085053390352136700==--