this post was submitted on 15 Sep 2024
143 points (99.3% liked)

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

54609 readers
492 users here now

⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don't request invites, trade, sell, or self-promote

3. Don't request or link to specific pirated titles, including DMs

4. Don't submit low-quality posts, be entitled, or harass others



Loot, Pillage, & Plunder

📜 c/Piracy Wiki (Community Edition):


💰 Please help cover server costs.

Ko-Fi Liberapay
Ko-fi Liberapay

founded 1 year ago
MODERATORS
 

The DeCENC attack, developed by security researcher David Buchanan, can bypass the Common Encryption Scheme (CENC) used by streaming platforms like Amazon and Netflix, allowing decrypted but compressed video to be captured and saved, posing a theoretical risk to DRM protection.

Although DeCENC offers a novel method to exfiltrate protected video data, Buchanan notes it's largely impractical compared to simpler piracy techniques, such as HDMI capture or exploiting existing vulnerabilities like the Microsoft PlayReady client compromise.

Buchanan criticizes the CENC specification's lack of authentication, highlighting the challenge of conducting security research due to paywalled and complex technical documents, and calls for greater accessibility of these standards for researchers.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 14 points 2 months ago

Paywalled specifications sounds a lot like security through obscurity. It works well until it doesn’t.