3 ms·
Widevine is completely broken ever since Nvidia Tegra devices were irreparably compromised due to a boot ROM bug. You can just pull the L1 key from any one of t
by marcan_42 5y ago
Widevine is completely broken ever since Nvidia Tegra devices were irreparably compromised due to a boot ROM bug. You can just pull the L1 key from any one of them, and Google can't mass revoke the entire device class since it would screw over a ton of legitimate users.
(I don't know the details of how to dump the keys, I just know it's possible by definition given the security loss on that platform, and I'm sure some people have tooling for this somewhere)
- nyuszika7h 5y agoWell, what they did to Nvidia Tegra devices is either downgrade them to L3, or revoke them and issue a new L1 key for them. OTA updates patched something, but a hardware flaw can't be patched fully with a software update. However, most people nowadays are simply exploiting phones and tablets with old vulnerable MSM chips, there are a lot more of those to choose from. Usually what Google does now is when someone publicly leaks a compromised device key, they revoke the unique key of that specific device but not the whole model. However, sometimes streaming services (especially Amazon, Netflix and Disney+) may still choose to blacklist an entire vulnerable model and limit it to SD playback.