📌 PINNED
DRM & Content Security
Oct 31, 2026
### How MediaCage Kernel Protection Works
Our client-side and server-side DRM suite provides defense-in-depth protection:
1. **Kernel Daemon Sensor**:
Actively detects OS screen recording daemons (such as `screencapture` on macOS, Xbox Game Bar, and background OBS hook processes). If an active recorder is detected, video decryption is paused and replaced with a hardware security warning.
2. **Canvas WebGL Compositor**:
Renders video frames via an isolated GPU WebGL texture compositor that blocks OS print-screen / screenshot APIs.
3. **Dynamic Steganographic Watermarking**:
Overlays the viewer's IP address, User ID, and timestamp dynamically across the video frames to deter physical camera recording.
4. **URL Token Signing**:
Every stream segment requires a SHA256 HMAC token with an expiration time, strictly bound to the viewer's IP or User-Agent.