News for hackers. Stuff that matters.

A comment on Xfinity Stream on Linux (A Tale of Widevine, ChromeOS, and a Patched Glibc). Parent comment

Re:Xfinity Stream on Linux (A Tale of Widevine, ChromeOS, an... by bmurphy1976 on Sunday January 01, 2023 @08:25AM (#34206092)
Google updates the Widevine CDM regularly and has an aggressive deprecation schedule. I imagine those keys have long since been replaced as a result of this. Each piece of content is encrypted with a unique key and the CDM is only used for key exchange. The leaked keys would be useless for decrypting any stored content.
[ Parent | on HN ]
Re:Xfinity Stream on Linux (A Tale of Widevine, ChromeOS, an... by arsome on Sunday January 01, 2023 @09:29AM (#34206495)
Widevine L1 keys have leaked fairly regularly though and many piracy groups have private L1 keys to allow them to get clean webrips from streaming services. These keys get dumped from a vulnerable device and then don't need to be updated unless that device gets breached publically down the line.
[ Parent | on HN ]
Re:Xfinity Stream on Linux (A Tale of Widevine, ChromeOS, an... by kotaKat on Sunday January 01, 2023 @09:30AM (#34206516)
All it takes is another vulnerable device's keybox being yanked and abused for a while until the keybox leaks further causing revocation of those Widevine keys.

They have quite a supply of keyboxes available to keep decrypting for a while.

[ Parent | on HN ]