Re: Help with HLG profile

Here are some thoughts:

From: Simon Thompson-NM <Simon.Thompson2@bbc.co.uk>
Date: Monday, October 1, 2018 at 3:53 AM
To: Leonard Rosenthol <lrosenth@adobe.com>, Max Derhak <max.derhak@onyxgfx.com>, "public-colorweb@w3.org" <public-colorweb@w3.org>
Subject: RE: Help with HLG profile
Resent-From: <public-colorweb@w3.org>
Resent-Date: Monday, October 1, 2018 at 3:53 AM

Hi all,

Apologies for the delays in replying to this list, I’ve been busy with events over the summer period.

We are interested in furthering this work and getting a usable solution that we can use for our Video on demand platforms.  Similar use cases are explained in this blog: https://medium.com/netflix-techblog/enhancing-the-netflix-ui-experience-with-hdr-1e7506ad3e8<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmedium.com%2Fnetflix-techblog%2Fenhancing-the-netflix-ui-experience-with-hdr-1e7506ad3e8&data=02%7C01%7Cborg%40adobe.com%7Cb9e7093f4d834403c67408d627a549e9%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C636739988193712060&sdata=BFkq%2FHx5GI3xQ7vuVqp%2BsbMTWMX%2BEp9X6ujkzEDzL%2BQ%3D&reserved=0>

Could I just ask:

1.       What the security concerns are with using ICCmax calculator functions?
Any implementation of ICC should be considered insecure and a hacker target.
Implementations that accept scripts as user input such as the calculator are inherently more insecure than pure data tables.
Some historical examples: SQL in input fields, Visual Basic, Word Equations, Flash
ICC is not responsible for security. The ICC reference code is usually not used commercially.
Implementors usually write their own code for better performance.
Each implementor, not ICC, needs to design its code to be secure.


2.       How far are we from widespread deployment of ICCmax?
Be prepared to wait. 15 years since the first spec came out, V4 still is not fully supported.

Could I also check my understanding of the issues?

1.       ICC v4.0 uses D50 as its PCS white point and 1D LUTs?
Don’t confuse PCS with device white points.
ICC V4 and V2 uses D50 purely as a connection point between profiles.
ICC V4 allows for D65 device white points or any other white point.
ICC V4 allows you to convert from a D65 device space to a D60 device space, etc.
ICC V4 allows your LUTs to operate at any white point.

It is rare to use 1D LUTs on the PCS side of a transform.
It is rare to use 1D LUTs in any XYZ space.
ICC 1D LUTs typically operate in device space.
A common exception would be 1D LUTs in CIELab printer profiles with 3D LUTs.


2.       ICCmax allows D65 white points and a calculator function which allows parameters to be passed – this is useful for the Display transform which varies for different screen brightnesses and surround brightnesses.

Best Regards

Simon