DeCENC is yet another way to beat Amazon, Netflix video DRM

The DeCENC attack, developed by security researcher David Buchanan, can bypass the Common Encryption Scheme (CENC) used by streaming platforms like Amazon and Netflix, allowing decrypted but compressed video to be captured and saved, posing a theoretical risk to DRM protection.

Although DeCENC offers a novel method to exfiltrate protected video data, Buchanan notes it’s largely impractical compared to simpler piracy techniques, such as HDMI capture or exploiting existing vulnerabilities like the Microsoft PlayReady client compromise.

Buchanan criticizes the CENC specification’s lack of authentication, highlighting the challenge of conducting security research due to paywalled and complex technical documents, and calls for greater accessibility of these standards for researchers.