Google Mending Another Crack in Widevine
Summary: Google is working to fix a weakness in its Widevine DRM technology for the second time in two years, this time affecting protection for L3 streams used for low-quality video and audio. Researcher Tomer Hadad built a proof-of-concept browser extension for Windows Chrome users and posted it on GitHub, while Google said the issue is a circumvention that will be fixed and does not affect L1 and L2 streams used for higher-definition content.
What you should know: Hadad's point is that code obfuscation, anti-debugging tricks and whitebox cryptography are security-by-obscurity that will eventually be defeated anyway, and L3 is used on desktops precisely because they lack hardware trusted zones. Streaming providers like Disney, Hulu and Netflix rely on Widevine to keep content from being pirated, and this is the second crack in two years.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026