<story><title>Microsoft PlayReady – Complete Client Identity Compromise</title><url>https://seclists.org/fulldisclosure/2024/May/5</url></story><parent_chain><item><author>jsheard</author><text>4K streaming content is hit or miss because most services lock that behind Widevine L1, which requires implementors to use a secure enclave and the entire signal path to use strong encryption. If an L1 implementation gets compromised it quickly has its keys revoked and is downgraded to L2&amp;#x2F;L3, so piracy groups have a limited time window to dump as much 4K content as possible. Those lower Winevines tiers are permanently broken though so everything is immediately available in at least 1080p.&lt;p&gt;4K Blurays are currently always ripped due to an unfixable compromise in Intel SGX allowing PowerDVDs keys to be extracted, they could close that hole by revoking PowerDVDs keys for new Bluray releases but they haven&amp;#x27;t done that yet. I imagine they will at some point because PowerDVD &lt;i&gt;requires&lt;/i&gt; SGX to play UHDs, and Intel stopped supporting that on newer consumer hardware, so 4K Bluray playback on PCs is effectively being phased out.</text></item><item><author>londons_explore</author><text>Is there any video DRM scheme which successfully protects video content appearing on the pirate bay within 24 hours?&lt;p&gt;I really don&amp;#x27;t see why so many millions (billions?) of dollars have been spent on technologies which so far have never kept the bad guys out.</text></item></parent_chain><comment><author>grishka</author><text>&amp;gt; the entire signal path to use strong encryption&lt;p&gt;But the display panel itself still receives an unencrypted LVDS signal, which should not be too hard to decode. There are (were?) also cheap HDMI splitters that conveniently strip HDCP.&lt;p&gt;Your only issue is that yes, you can&amp;#x27;t get at the original compressed video stream and have to reencode, possibly losing a tiny bit of quality.</text></comment>
<story><title>Microsoft PlayReady – Complete Client Identity Compromise</title><url>https://seclists.org/fulldisclosure/2024/May/5</url></story><parent_chain><item><author>jsheard</author><text>4K streaming content is hit or miss because most services lock that behind Widevine L1, which requires implementors to use a secure enclave and the entire signal path to use strong encryption. If an L1 implementation gets compromised it quickly has its keys revoked and is downgraded to L2&amp;#x2F;L3, so piracy groups have a limited time window to dump as much 4K content as possible. Those lower Winevines tiers are permanently broken though so everything is immediately available in at least 1080p.&lt;p&gt;4K Blurays are currently always ripped due to an unfixable compromise in Intel SGX allowing PowerDVDs keys to be extracted, they could close that hole by revoking PowerDVDs keys for new Bluray releases but they haven&amp;#x27;t done that yet. I imagine they will at some point because PowerDVD &lt;i&gt;requires&lt;/i&gt; SGX to play UHDs, and Intel stopped supporting that on newer consumer hardware, so 4K Bluray playback on PCs is effectively being phased out.</text></item><item><author>londons_explore</author><text>Is there any video DRM scheme which successfully protects video content appearing on the pirate bay within 24 hours?&lt;p&gt;I really don&amp;#x27;t see why so many millions (billions?) of dollars have been spent on technologies which so far have never kept the bad guys out.</text></item></parent_chain><comment><author>486sx33</author><text>“4K Bluray playback on PCs is effectively being phased out.”&lt;p&gt;Which will only perpetuate and speed up the problem. 4K blu ray discs suck on a lot of new tvs and players for frame rate and detail so the best visual experience is going to be on high dpi PCs (or Mac? Retina?)&lt;p&gt;If I can’t play a 4K blu ray I purchased on my pc… I’m going to probably download a ripped version and not feel guilty about it since I purchased the disc …&lt;p&gt;My M2 Pro can decode and play 4K without breaking a sweat and with amazing battery life on VLC player</text></comment>