3 ms·
Widevine is completely broken. The Nvidia Tegra Boot ROM flaw exposed the Widevine private keys of all Tegra-based devices. Google can't revoke those en masse w
by marcan_42 5y ago
Widevine is completely broken. The Nvidia Tegra Boot ROM flaw exposed the Widevine private keys of all Tegra-based devices. Google can't revoke those en masse without breaking Netflix et al on a ton of tablets and other devices. And those keys are for the highest level, since it's supposed to be handled in TrustZone. It's been game over for Widevine since 2018.
- trasz 5y agoWhy is there no open implementation yet then?
- my123 5y agothe DMCA
- sva_ 5y agoThere's code for the L3, but it doesn't work since end of may because the new RSA keys aren't public https://github.com/tomer8007/widevine-l3-decryptor https://github.com/tomer8007/widevine-l3-decryptor Find the code in the forks, since it was DMCA'd There's none for L1 and L2 though
- ihatevines 5y agoThere’s code for L1 floating around, if you know where to look. Nobody bothers with L2, only L1 or L3.
- trasz 5y ago"Code in the forks"? Is the Open Source community really in such a bad shape, compared to DeCSS times?
- sva_ 5y agoYeah idk on what grounds it would receive DMCA. Perhaps because it contained the keys? Probably not worth the headache of dealing with Googles lawyers, for some independent researcher.