https://overkazaf.github.io/blogs/tags/security-research/Recent content in Security-Research on +5 Security ResearchHugozh-cnWed, 30 Sep 2026 10:00:00 +0800https://overkazaf.github.io/blogs/posts/rp2350-diy-audio-drm-from-scratch/Wed, 30 Sep 2026 10:00:00 +0800https://overkazaf.github.io/blogs/posts/rp2350-diy-audio-drm-from-scratch/用 RP2350 微控制器做一个完整的音频 DRM 原型：内容加密、设备绑定、授权下发、密钥保护，然后自己攻击它。https://overkazaf.github.io/blogs/posts/playready-pro-license-sl3000-deep-dive/Mon, 24 Aug 2026 14:00:00 +0800https://overkazaf.github.io/blogs/posts/playready-pro-license-sl3000-deep-dive/从 DASH 里的 PlayReady SystemID 开始，逐字节拆开 PSSH、PRO 与 WRMHEADER，再沿 License、设备证书、SL2000/SL3000、TEE 和 OPL 还原 PlayReady 的完整信任链，并给出可复现的自有内容实验与参考项目地图。https://overkazaf.github.io/blogs/posts/cromite-bromite-widevine-stream-export-failure/Sun, 23 Aug 2026 04:15:00 +0800https://overkazaf.github.io/blogs/posts/cromite-bromite-widevine-stream-export-failure/拿到 Chromium 源码、打开 proprietary codecs、改 UA、截 MSE、拼 fMP4，为什么仍然过不了 Widevine？一份从 Cromite/Bromite 编译链一路撞到 Netflix License 与安全输出边界的失败记录。https://overkazaf.github.io/blogs/posts/widevine-pssh-license-l1-deep-dive/Sat, 22 Aug 2026 14:00:00 +0800https://overkazaf.github.io/blogs/posts/widevine-pssh-license-l1-deep-dive/从 Widevine SystemID、PSSH protobuf 与 CENC box 结构开始，沿 Chrome/Android 通信架构、License Proxy、设备 Provisioning、MediaDrm、OEMCrypto、L1/L2/L3 和安全输出还原完整信任链。