4 ms·
The point of semi-unusable DRMed crap when L1 released keep getting WEB-DLed? Very likely it's not the Shield now which leaks L1, but an actual key recovery be
by baybal2 5y ago
The point of semi-unusable DRMed crap when L1 released keep getting WEB-DLed?
Very likely it's not the Shield now which leaks L1, but an actual key recovery because they get the stream even before it gets watermarked in the secure domain.
My guess, it's Qualcomm's debugging TZ applets. They cannot really revoke keys because they will take down a giant amount of Snapdragon based handsets for which manufacturers don't bother to put a single OTA.
This is also likely why Netflix uses such a silly restrictions as refusing to run on old Android version numbers on some Snapdragon handsets, which are easily root bypassable.
- step21 5y agoWhat's L1? web-dls I have seen are always relatively low resolution, so at least it protects fullhd or 4k.
- baybal2 5y agoWidevine L1 - the hardware DRM in ARM trustzone with individual keys for each chip.
- nyuszika7h 5y ago1080p WEB-DLs are very common if you're in the right places, but even public trackers should have plenty. 4K is slightly less common but does also happen, with frequency depending on the streaming service.
- gruez 5y ago>so at least it protects fullhd or 4k. Not really. Popular streaming-exclusive shows often get 1080p versions released within a few hours, and the 2160p versions released within a few days.
- drudu 5y agoI cannot find a single popular movie that's available to stream which isn't also available as a 4k WEB-DL on a popular, well known, private tracker.
- denkmoon 5y agoThe Grand Tour S04E03 4k web-dl is readily available on private torrent trackers hours after public release on Amazon Prime. No idea what encryption Amazon use, but suffice to say it is thoroughly broken by someone out there. Given the expense of acquiring those presenters and the production costs of their shows, and how they bring people to the Prime video platform, I suspect Amazon is reasonably interested in keeping that content protected.
- nyuszika7h 5y agoLately Google has mostly stopped revoking whole devices. Instead, when someone extracts a key from a device and it leaks publicly, they just revoke that one specific device's key. That improves the experience for legitimate users, but also means the person who extracted the key can just go buy another device of the same model and use the same exploit to extract a new working key.