Slashdot Mirror
Security Researcher Cracks Google's Widevine DRM (L3 Only) (zdnet.com)
The L3 protection level of Google's Widevine DRM technology has been cracked by a British security researcher who can now decrypt content transferred via DRM-protected multimedia streams. ZDNet's Catalin Cimpanu notes that while this "sounds very cool," it's not likely to fuel a massive piracy wave because "the hack works only against Widevine L3 streams, and not L2 and L1, which are the ones that carry high-quality audio and video content." From the report: Google designed its Widevine DRM technology to work on three data protection levels --L1, L2, and L3-- each usable in various scenarios. According to Google's docs, the differences between the three protection levels is as follows:
L1 - all content processing and cryptography operations are handled inside a CPU that supports a Trusted Execution Environment (TEE).
L2 - only cryptography operations are handled inside a TEE.
L3 - content processing and cryptography operations are (intentionally) handled outside of a TEE, or the device doesn't support a TEE
"Soooo, after a few evenings of work, I've 100% broken Widevine L3 DRM," [British security researcher David Buchanan] said on Twitter. "Their Whitebox AES-128 implementation is vulnerable to the well-studied DFA attack, which can be used to recover the original key. Then you can decrypt the MPEG-CENC streams with plain old ffmpeg." Albeit Buchanan did not yet release any proof-of-concept code, it wouldn't help anyone if he did. In order to get the DRM-encrypted data blob that you want to decrypt, an attacker would still need "the right/permission" to receive the data blob in the first place. If a Netflix pirate would have this right (being an account holder), then he'd most likely (ab)use it to pirate a higher-quality version of the content, instead of bothering to decrypt low-res video and lo-fi audio. The only advantage is in regards to automating the pirating process, but as some users have pointed out, this isn't very appealing in today's tech scene where almost all devices are capable of playing HD multimedia [1, 2].
L1 - all content processing and cryptography operations are handled inside a CPU that supports a Trusted Execution Environment (TEE).
L2 - only cryptography operations are handled inside a TEE.
L3 - content processing and cryptography operations are (intentionally) handled outside of a TEE, or the device doesn't support a TEE
"Soooo, after a few evenings of work, I've 100% broken Widevine L3 DRM," [British security researcher David Buchanan] said on Twitter. "Their Whitebox AES-128 implementation is vulnerable to the well-studied DFA attack, which can be used to recover the original key. Then you can decrypt the MPEG-CENC streams with plain old ffmpeg." Albeit Buchanan did not yet release any proof-of-concept code, it wouldn't help anyone if he did. In order to get the DRM-encrypted data blob that you want to decrypt, an attacker would still need "the right/permission" to receive the data blob in the first place. If a Netflix pirate would have this right (being an account holder), then he'd most likely (ab)use it to pirate a higher-quality version of the content, instead of bothering to decrypt low-res video and lo-fi audio. The only advantage is in regards to automating the pirating process, but as some users have pointed out, this isn't very appealing in today's tech scene where almost all devices are capable of playing HD multimedia [1, 2].
I didn't even know that Google is in this shit business. Good to know, in order to avoid products that use this DRM crap.
u going at tooth hurty?
No, no it isn't. Not everything involving computers that's slightly unusual is a "hack", stupid zdnet, but I repeat myself.
I remember back in the early 2000s when google sounded like some sort of geek paradise where they also paid you.
Now it's all about privacy violation and apparently DRM now too. Yuck.
SJW n. One who posts facts.
Hahahahaha uh no. I have an on call dentist do you not? And you should have said tooth hurTEE
With respect to piracy of entertainment streams, what does it matter when HDCP is so eminently hackable? Widevine has been around forever and has not made any difference to unauthorized recording and distribution of video and audio.
Widevine protects the stream down to the user's endpoint where it is conveniently stripped of any effective protection. I don't see how the entire stream path can ever be completely locked down.
Widevine exists only to satisfy contract demands by content providers to protect the streams. Lot$ spent (and passed on to the consumer) to do nothing.
Just use the analog hole and record the HDMI stream if you want DRM stuff.
Yawn.
"Here's the encrypted message, and here's the decryption device. You know what the plaintext message is."
That CAN'T work. There's a reason military decryption devices are top secret.
How the hell do the morons creating this think it can possibly work? They're openly distributing the encrypted message, the plaintext message, and hundreds of millions if not billions of the decryption devices.
Yeah, it's not the engineers that are the morons - it's the fucking not-smart-enough-to-know-what-they-don't-know executives willing to spend billions of dollars to "protect their content".
Dude - if no one pirates it, it's because no one wants to watch your dreck. The DRM didn't help. The real pirates get though that effectively instantly.
Did anyone even know about this before now?
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
These things don't stop the pirates that matter. The ones that put actual effort in to it.
At some point, these data-streams need to be made useful for human consumption. Every single DRM system fails at that stage because all it takes is hijacking the display / sound drivers with a virtual one and recording that.
Crop, tidy it up, compress it, upload it, let others download it.
They can do whatever moronic shit they want, they will never be able to stop these people. They might be able to stop some shitty extension or 2, but that's about it.
They've also failed disastrously to take down pirate sites because it costs more money than the industries at large make. In fact, it even harms them as has been proved countless times before that piracy aids many industries thrive.
I wish they would stop. It's dumb. It serves nobodies interests.
A large chunk of piracy is sampling for memes, reviews or screencaps, or piracy across borders due to shitty exclusivity rights or outright ban in region X.
Kill the regions, enjoy more profit. Region-blocks are a drain on profits. They are "short-term profits over long-term profits"-minded nonsense. International buyers and sellers are the evidence.
The only stuff I pirate is stuff from countries that will outright not be airing their stuff outside of their respective countries, like China, Japan, Korea. Gotta see my Chinese basket-weaving cartoons.
If they were to stop being so hateful of the west, they could make even more money off content.
Korean and Japanese gaming industries are proof of that, and to a lesser extent, animation and 3D modelling. (Korea especially in the latter 2, to say "Japanese anime" is almost laughable since most has been superseded by Korean animators!)
I would like to not do it. I like supporting people. But there is zero chance to avoid that.
They don't see anyone outside their countries as an income source. No harm done with respect to them...
And Smoke It
Every hour spent watching Netflix is an hour lost forever. Wasted and thrown away. Anyone wanting to break DRM and pirate Netflix movies is an even bigger moron.
Yup. For all those 5 of us still using firefox post-52 Quantum, the old NPAPI plug-in architecture/plumbing is still inthere, alive and well. It is used to support certain "strategic" plug-ins. Only by "invite".
Flash is the one which garnered the most publicity, but a few others still exist, and Google's SandVine is among them. In my install, the other one is Cisco's H264 decoder Plug in. Others may exist. Please notice that this has nothing to do with your previous install. If your plug-in is in the white list, it will be installed. If not, firefox will refuse to run it, even if all the plumbing is still there because "Quantum" and "Reasons"...
*** Suerte a todos y Feliz dia!
where u find a llama dentist at????????????????????????
Pretty sure there is a WinAmp plugin for that.
Seriously, nobody can see 4K on a phone. Nobody can see HD on a phone. Regular old low-res video looks JUST FINE on a phone. If your screen is 4 inches across and 18 inches from your face, that's a 4.5:1 ratio, meaning that SD is just fine. It's not until you get below 3:1 that even 720p begins to become noticeable, let alone necessary.
This guy could scrape Netflix' entire library and phone users would be perfectly happy with the results.
Oh they is everywhere. I guess you were not aware that camelid orthodontia is the highest satisfaction rated profession in the world. It is possible that your veteridentist is away for professional development so just leave a message and they will call you when they return to the office :)
Do they have telemedicine for dentists now? Just turn on bluetooth!
I tried one but it really kicked the llama's ass
Yep, only psychopaths would not refuse to treat others like that. But they wouldn't be honest.
Obviously, that's incomprehensible gibberish to an American, from the society of psychopaths.
DRM, *by definiton* requires the user to receive the decryption key. So his computer can decrypt the data.
That's why the actual "pirates" (the Content Mafia that steals our money and doesnâ(TM)t work for it) came up with the TPM.
Because of course, the above only works, *if it is not your device!*
Like any console, non-"rooted" smartphone, or TPM-tainted PC.
Unless of course, you have *physical access*. Then it depends on how tamper-proof it is.
So for PCs, it requires bullshit like bus communication between the CPU, GPU and even screen (HDMI) to be encrypted!
Which of course still does not help, since your freaking *eyes* still need to actually *see* the "content".
Which every other device hence can always do too.
That's why I always said that the logical "final solution" would be DRM chips right inside your brain.
I have *zero* doubt, that the coke-headed criminals that came up with the whole "intellectual property" oxymorom, to create their imaginaly artificial scarcity monopoly, to steal the money of us and of artists without working for it (and no other purpose whatsoever) would gladly force global implantation of such chips, if they could.
L1 and L2 are not (yet) broken, but L3 is the only supported option on hardware without a "Trusted Execution Environment".
Web rips are still a thing; good luck stopping recording lol...
First inception of a DFA attack on White-box Cryptography AES:
https://www.blackhat.com/eu-15/briefings.html#unboxing-the-white-box-practical-attacks-against-obfuscated-ciphers
Tooling used for the attack:
https://github.com/SideChannelMarvels/JeanGrey
Blog post on tool and experiments:
https://blog.quarkslab.com/differential-fault-analysis-on-white-box-aes-implementations.html
He cracked this bs and now Google and Netflix cut access to streaming of people with L3 devices. Even if you pay HD, you are now restricted to 480p.