The DeCENC attack, developed by security researcher David Buchanan, can bypass the Common Encryption Scheme (CENC) used by streaming platforms like Amazon and Netflix, allowing decrypted but compressed video to be captured and saved, posing a theoretical risk to DRM protection.
Although DeCENC offers a novel method to exfiltrate protected video data, Buchanan notes it’s largely impractical compared to simpler piracy techniques, such as HDMI capture or exploiting existing vulnerabilities like the Microsoft PlayReady client compromise.
Buchanan criticizes the CENC specification’s lack of authentication, highlighting the challenge of conducting security research due to paywalled and complex technical documents, and calls for greater accessibility of these standards for researchers.
http://phrack.org/issues/71/6.html#article here’s the original paper for the intrested.
https://github.com/DavidBuchanan314/DeCENC
Here is the tool for the interested.
Paywalled specifications sounds a lot like security through obscurity. It works well until it doesn’t.
Should’ve Open Sourced the CENC. Now they pay the price.
Everyone* saw it coming.
