Paywall Optional: Stream for Free w/ New Technique, RRE
Introduces Real-time Re-encryption (RRE), a technique that defeats commercial DRM and streaming paywalls across digital media platforms.
Summary
Digital Rights Management in Video Streaming
Commercial streaming platforms rely on Digital Rights Management (DRM) technologies (such as Widevine and FairPlay) to encrypt media streams and enforce subscriber paywalls.
Real-Time Re-Encryption (RRE) Mechanics
Farzan Karim presents Real-time Re-encryption (RRE), a novel methodology that intercepts decrypted media buffers from trusted hardware decoders and re-encrypts streams with user-controlled keys in real time.
Defeating Browser and Hardware DRM Protections
By exploiting memory mapping flaws and API timing discrepancies within browser media pipelines, RRE extracts pristine video and audio streams without triggering anti-piracy protections.
Hardening Media Delivery Architectures
Securing streaming media platforms requires continuous hardware attestation, server-side watermarking, and dynamic DRM key rotation.
Related talks
Main Stage·40 min
Julian Horoszkiewicz
Demonstrates rapid vulnerability discovery methodologies that uncovered seven zero-day local privilege escalation flaws in pre-installed OEM bloatware.
Main Stage·39 min
S Collins · M Muench · T Chothia
Investigates anti-cheat detection heuristics and server-side validation flaws across competitive online games, revealing how unusual play triggers bans.
Main Stage·50 min
Aapo Oksman
Aapo Oksman introduces certmitm, an automated tool designed to discover and exploit insecure TLS client certificate validation flaws across iOS, Windows 11, and embedded devices.