WideLeak: How Over-the-Top Platforms Fail in Android

Gwendal Patat (1, 2) , Mohamed Sabt (1, 2) , Pierre-Alain Fouque (1, 3)

1 IRISA-D1 - SYSTÈMES LARGE ÉCHELLE
2 SPICY - Security & PrIvaCY
3 CAPSULE - Applied Cryptography and Implementation Security

Nowadays, most content providers rely on DRM (Digital Right Management) to protect media from illegal distribution. Becoming a major platform for streaming, Android provides its own DRM framework that does not comply with existing DRM standards. Thus, OTT (over-the-top) platforms need to adapt their apps to suit Android design, despite a fragmented ecosystem and little public documentation. Unfortunately, the security implications of how OTT apps leverage Widevine, the most popular Android DRM, have not been studied yet. In this paper, we report the first experimental study on the state of Widevine use in the wild. Our study explores OTT compliance with Widevine guidelines regarding asset protection and legacy phone support. With the evaluation of premium OTT apps, our experiments bring to light that most apps adopt weak and potentially vulnerable practices. We illustrate our findings by showing how to easily recover media content from many OTT apps, including Netflix.

Keywords: Android; Digital Right Management; Over-The-Top; Widevine

Domains: Computer Science [cs]; Cryptography and Security [cs.CR]

Gwendal Patat, Mohamed Sabt, Pierre-Alain Fouque. WideLeak: How Over-the-Top Platforms Fail in Android. DSN 2022 - 52nd Annual IEEE/IFIP International Conference on Dependable Systems and Networks, Jun 2022, Baltimore, MD, United States. ⟨hal-03637107⟩