A research project into vulnerabilities affecting Microsoft’s PlayReady DRM raises some questions on responsible disclosure.
January 10, 2025 By Eduard Kovacs

A research project targeting vulnerabilities in widely used content access and protection technology from Microsoft raises some questions over certain aspects of responsible disclosure.
For the past several years, Adam Gowdiak, founder and CEO of AG Security Research (formerly Security Explorations) has been looking into the security of digital content, specifically video streaming platforms. Gowdiak is best known for his Java and TV/streaming platform security research.
The researcher recently demonstrated that an attacker could obtain content keys protected by Microsoft’s PlayReady media file copying prevention technology and use those keys for unauthorized movie downloads from popular streaming services such as Netflix, HBO’s Max, Amazon Prime Video and Sky Showtime.