this post was submitted on 15 Sep 2024
135 points (99.3% liked)

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

53779 readers
415 users here now

⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don't request invites, trade, sell, or self-promote

3. Don't request or link to specific pirated titles, including DMs

4. Don't submit low-quality posts, be entitled, or harass others



Loot, Pillage, & Plunder


💰 Please help cover server costs.

Ko-FiLiberapay


founded 1 year ago
MODERATORS
 

The DeCENC attack, developed by security researcher David Buchanan, can bypass the Common Encryption Scheme (CENC) used by streaming platforms like Amazon and Netflix, allowing decrypted but compressed video to be captured and saved, posing a theoretical risk to DRM protection.

Although DeCENC offers a novel method to exfiltrate protected video data, Buchanan notes it's largely impractical compared to simpler piracy techniques, such as HDMI capture or exploiting existing vulnerabilities like the Microsoft PlayReady client compromise.

Buchanan criticizes the CENC specification's lack of authentication, highlighting the challenge of conducting security research due to paywalled and complex technical documents, and calls for greater accessibility of these standards for researchers.

top 4 comments
sorted by: hot top controversial new old
[–] [email protected] 12 points 2 days ago

Paywalled specifications sounds a lot like security through obscurity. It works well until it doesn’t.

[–] [email protected] 48 points 3 days ago

Should've Open Sourced the CENC. Now they pay the price.
Everyone* saw it coming.

[–] [email protected] 9 points 2 days ago (1 children)
[–] [email protected] 13 points 2 days ago