News for hackers. Stuff that matters.

A comment on Security researcher cracks Google's Widevine DRM (L3 only). Parent comment

Re:Security researcher cracks Google's Widevine DRM (L3 only) by zb3 on Saturday January 05, 2019 @07:04AM (#18831246)
In 2017 it was obfuscated using Arxan's "ProtectIT" (you can view the patent) and did use whitebox cryptography. I didn't look at the dll, but at the .so file for linux (for fun). I guess it should be harder now

EDIT: If reversing this DLL/so is illegal, how I am supposed to be able to test for a potential security vulnerability? Not that I can do this, just wondering...

[ Parent | on HN ]
Re:Security researcher cracks Google's Widevine DRM (L3 only) by bubblethink on Saturday January 05, 2019 @05:38PM (#18834734)
>how I am supposed to be able to test for a potential security vulnerability?

You aren't. There were some amendments made to DMCA recently that added a few more narrow provisions (mainly repairing tractors and such), but I don't think reverse engineering closed libraries was one of them. In particular, things close to DRM were not granted. For example, request for exemptions for tinkering with HDCP or optical drives were denied.

[ Parent | on HN ]