5 ms·
Whoa! This is really impressive stuff, and will cause head-ache in my dayjob where we develop a product using this WiFi SoC. Can this vulnerability cause conte
by osivertsson 10y ago
Whoa! This is really impressive stuff, and will cause head-ache in my dayjob where we develop a product using this WiFi SoC.
Can this vulnerability cause content-owners and DRM vendors to no longer allow such devices to decode 4K content? I'm thinking of for example PlayReady certification that may be withdrawn/downgraded because of this issue, but I'm fuzzy on the details how this would work.
- jessaustin 10y agoHow do these certifications deal with e.g. rooted devices (rooted by the device owner, not an attacker)? One suspects that there's not much they can do? If that's the case, why would they worry about this vuln?
- kuschku 10y agoThose devices already can’t play DRM content. Or use Android Pay. Or use Snapchat. Many apps, and especially all with DRM content, require a fully signed boot, and if the user at any point even can see what any app is doing, or MitM anything, will refuse to work. Google has published a solution for this which uses TrustZone to create a hash of the system, transmit this to the Google servers, and Google then verifies the hash, and transmits a token to the servers of the app willing to play DRM content. Rooting, or even unlocking your bootloader, already makes your phone useless today by design. Which makes the work of projects like Replicant harder.
- flukus 10y agoHow many apps use DRM? If androids going to be that locked down then I may as well get an iphone.
- userbinator 10y agoI can't verify them, but a quick search reveals that people have found ways to use those apps on a rooted device.
- kuschku 10y agoMagisk used to work, but now Android trips as soon as the bootloader is unlocked, making it a lot harder.
- Aissen 10y agoThere are SafetyNet bypass strategies, but in the long run, they're getting harder.
- sigjuice 10y agoAre DRM vendors and content-owners usually on the forefront of such CVEs and their potential impact?
- flukus 10y ago>Can this vulnerability cause content-owners and DRM vendors to no longer allow such devices to decode 4K content? I'm thinking of for example PlayReady certification that may be withdrawn/downgraded because of this issue, but I'm fuzzy on the details how this would work. I hope so, it will expose two of the biggest cancers in the industry.