https://hackerpaper.kaipfister.de/p/2204.09298/Collected HN comments and submissions linking this paper.enMon, 02 Nov 2026 11:16:22 GMThttps://news.ycombinator.com/item?id=33146903urn:hackerpapers:mention:2204.09298:33146903Mon, 10 Oct 2022 01:27:19 GMT<p>Widevine has been broken at least a few times, including by recovering the private key from its white-box implementation: https://github.com/tomer8007/widevine-l3-decryptor/wiki/Reve.... Note that the write-up says it was the &quot;old&quot; version, but that&#x27;s relative to the date of the write-up. Google overhauled Widevine after he broke it. I&#x27;m less familiar with shielding data like this, but historically things like VMProtect and Themida were the standard for shielding programs. These offer a degree of resistance to automation, but a determined human will eventually figure them out, and then…</p><p><a href="https://hackerpaper.kaipfister.de/p/2204.09298/">Paper and discussion history</a>. A mention is not an endorsement.</p>cs.CR