{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T13:03:17Z","timestamp":1780664597568,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":45,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,4,26]],"date-time":"2026-04-26T00:00:00Z","timestamp":1777161600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,4,27]]},"DOI":"10.1145\/3767295.3803583","type":"proceedings-article","created":{"date-parts":[[2026,4,24]],"date-time":"2026-04-24T20:20:04Z","timestamp":1777062004000},"page":"484-496","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Digital Hole: Bypassing Commercial Audio DRM Solutions with DReaMcatcher"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-6641-7569","authenticated-orcid":false,"given":"Bj\u00f6rn","family":"Ruytenberg","sequence":"first","affiliation":[{"name":"Vrije Universiteit Amsterdam, Amsterdam, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-5810-4549","authenticated-orcid":false,"given":"Mohammad Sina","family":"Karvandi","sequence":"additional","affiliation":[{"name":"Vrije Universiteit Amsterdam, Amsterdam, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6179-1510","authenticated-orcid":false,"given":"Herbert","family":"Bos","sequence":"additional","affiliation":[{"name":"Vrije Universiteit Amsterdam, Amsterdam, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0312-9913","authenticated-orcid":false,"given":"Erik","family":"van der Kouwe","sequence":"additional","affiliation":[{"name":"Vrije Universiteit Amsterdam, Amsterdam, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-0416-3751","authenticated-orcid":false,"given":"Asia","family":"Slowinska","sequence":"additional","affiliation":[{"name":"Vrije Universiteit Amsterdam, Amsterdam, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,4,26]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Apple Inc. 2016. FairPlay Streaming Overview. https:\/\/developer.apple.com\/streaming\/fps\/. Accessed: 2025-07-11."},{"key":"e_1_3_2_1_2_1","volume-title":"Audacity: Free, Open Source, Cross-Platform Audio Software. https:\/\/www.audacityteam.org\/. Accessed: 2025-09-05.","author":"Team Audacity","year":"2025","unstructured":"Audacity Team. 2025. Audacity: Free, Open Source, Cross-Platform Audio Software. https:\/\/www.audacityteam.org\/. Accessed: 2025-09-05."},{"key":"e_1_3_2_1_3_1","volume-title":"Viruses use Sony anti-piracy CDs","author":"BBC.","unstructured":"BBC. 2005. Viruses use Sony anti-piracy CDs. http:\/\/news.bbc.co.uk\/1\/hi\/technology\/4427606.stm. Accessed: 2025-07-16."},{"key":"e_1_3_2_1_4_1","unstructured":"bunny.net. 2025. Widevine DRM Security Levels. https:\/\/docs.bunny.net\/docs\/widevine-drm-security-levels_#l3-security-level\/. Accessed: 2025-09-02."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274752"},{"key":"e_1_3_2_1_6_1","volume-title":"High Definition Audio Specification (June 17","author":"Intel Corporation","year":"2010","unstructured":"Intel Corporation. 2010. High Definition Audio Specification (June 17, 2010). https:\/\/www.intel.com\/content\/dam\/www\/public\/us\/en\/documents\/product-specifications\/high-definition-audio-specification.pdf. Accessed: 2025-07-11."},{"key":"e_1_3_2_1_7_1","volume-title":"BadRAM: Practical Memory Aliasing Attacks on Trusted Execution Environments. In 46th IEEE Symposium on Security and Privacy (S&P).","author":"Meulemeester Jesse De","year":"2025","unstructured":"Jesse De Meulemeester, Luca Wilke, David Oswald, Thomas Eisenbarth, Ingrid Verbauwhede, and Jo Van Bulck. 2025. BadRAM: Practical Memory Aliasing Attacks on Trusted Execution Environments. In 46th IEEE Symposium on Security and Privacy (S&P)."},{"key":"e_1_3_2_1_8_1","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Delaune St\u00e9phanie","year":"2024","unstructured":"St\u00e9phanie Delaune, Joseph Lallemand, Gwendal Patat, Florian Roudot, and Mohamed Sabt. 2024. Formal Security Analysis of Widevine through the {W3C} {EME} Standard. In 33rd USENIX Security Symposium (USENIX Security 24). 6399\u20136415."},{"key":"e_1_3_2_1_9_1","unstructured":"Cory Doctorow. 2004. Digital Rights Management. https:\/\/web.archive.org\/web\/20040924083612\/http:\/\/www.changethis.com\/pdf\/4.03.DRM.pdf."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2015.06.009"},{"key":"e_1_3_2_1_11_1","unstructured":"Free Software Foundation Europe. [n. d.]. Revisiting the Sony Rootkit. https:\/\/fsfe.org\/activities\/drm\/sony-rootkit-fiasco.en.html. Accessed: 2025-07-16."},{"key":"e_1_3_2_1_12_1","unstructured":"Security Explorations. 2024. Microsoft Warbird and PMP. Technical Report. Security Explorations AG Security Research. https:\/\/security-explorations.com\/microsoft-warbird-pmp.html Online; accessed 2025-09-21."},{"key":"e_1_3_2_1_13_1","unstructured":"FFmpeg Developers. 2025. FFmpeg: A Complete Cross-Platform Solution to Record Convert and Stream Audio and Video. https:\/\/ffmpeg.org\/. Accessed: 2025-09-05."},{"key":"e_1_3_2_1_14_1","unstructured":"FreeBSD Foundation. [n. d.]. snd_hda - Kernel Interfaces Manual. https:\/\/man.freebsd.org\/cgi\/man.cgi?snd_hda. Accessed: 2025-09-21."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1029146.1029162"},{"key":"e_1_3_2_1_16_1","unstructured":"Google. March 6 2017. Widevine DRM Architecture Overview. https:\/\/web.archive.org\/web\/20250908132310\/https:\/\/www.whymatematica.com\/wp-content\/uploads\/2018\/08\/Widevine_DRM_Architecture_Overview.pdf. Accessed: 2025-09-08."},{"key":"e_1_3_2_1_17_1","unstructured":"Google. n.d.. Widevine DRM. https:\/\/www.widevine.com\/solutions\/widevine-drm. Accessed: 2025-07-11."},{"key":"e_1_3_2_1_18_1","volume-title":"Economic, Legal and Political Aspects","author":"Haber Stuart","unstructured":"Stuart Haber, Bill Horne, Joe Pato, Tomas Sander, and Robert Endre Tarjan. 2003. If piracy is the problem, is DRM the answer? In Digital Rights Management: Technological, Economic, Legal and Political Aspects. Springer, 224\u2013233."},{"key":"e_1_3_2_1_19_1","volume-title":"Proceedings of the 17th USENIX Security Symposium","author":"Halderman J. Alex","unstructured":"J. Alex Halderman, Seth D. Schoen, Nadia Heninger, William Clarkson, William Paul, Joseph A. Calandrino, Ariel J. Feldman, Jacob Appelbaum, and Edward W. Felten. 2008. Lest We Remember: Cold Boot Attacks on Encryption Keys. In Proceedings of the 17th USENIX Security Symposium (San Jose, CA, USA) (SS'08). USENIX Association. https:\/\/www.usenix.org\/legacy\/event\/sec08\/tech\/full_papers\/halderman\/halderman.pdf"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485832.3488011"},{"issue":"6","key":"e_1_3_2_1_21_1","first-page":"2","article-title":"Intel 64 and IA-32 Architectures Software Developer's Manual - Volume 3C","volume":"25","author":"Intel Corporation","year":"2023","unstructured":"Intel Corporation 2023. Intel 64 and IA-32 Architectures Software Developer's Manual - Volume 3C. Intel Corporation, 25.6.2. Intel Virtualization Technology (Intel VT).","journal-title":"Intel Corporation"},{"key":"e_1_3_2_1_22_1","unstructured":"Mo Ismailzai. 2024. Picking the Widevine Locks: Acquiring and Using an L3 CDM. https:\/\/www.ismailzai.com\/blog\/picking-the-widevine-locks. Accessed: 2025-09-03."},{"key":"e_1_3_2_1_23_1","unstructured":"Alan J. 2024. Microsoft Engineer Accidentally Leaked 4GB of PlayReady DRM Internal Code Used To Protect Streaming Services. https:\/\/thecyberexpress.com\/microsoft-engineer-leaked-4gb-of-playready-drm\/. Accessed: 2025-09-03."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560649"},{"key":"e_1_3_2_1_25_1","unstructured":"kernel.org. [n. d.]. The Linux Kernel Documentation - More Notes on HD-Audio Driver. https:\/\/docs.kernel.org\/6.8\/sound\/hd-audio\/notes.html. Accessed: 2025-09-21."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICOIN.2018.8343109"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3170274"},{"key":"e_1_3_2_1_28_1","unstructured":"medvm. 2021. medvm\/widevine_keys. https:\/\/github.com\/medvm\/widevine_#keys. Accessed: 2025-09-03."},{"key":"e_1_3_2_1_29_1","unstructured":"Microsoft. 2018. PlayReady Security Level. https:\/\/learn.microsoft.com\/en-us\/playready\/overview\/security-level. Accessed: 2025-07-11."},{"key":"e_1_3_2_1_30_1","unstructured":"Microsoft. 2021. Intel HD Audio Architecture. https:\/\/learn.microsoft.com\/en-us\/windows-hardware\/drivers\/audio\/intels-hd-audio-architecture. Accessed: 2025-09-21."},{"key":"e_1_3_2_1_31_1","unstructured":"Mirone. [n. d.]. MyKextInstaller. https:\/\/github.com\/Mirone\/MyKextInstaller\/. Accessed: 2025-09-21."},{"key":"e_1_3_2_1_32_1","unstructured":"Netflix Inc. 2025. Netflix. https:\/\/www.netflix.com Video streaming service."},{"key":"e_1_3_2_1_33_1","unstructured":"Gwendal Patat. 2022. WideXtractor. https:\/\/github.com\/Avalonswanderer\/wideXtractor. Accessed: 2025-09-05."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW54247.2022.9833867"},{"key":"e_1_3_2_1_35_1","volume-title":"2022 52nd Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN). IEEE, 501\u2013508","author":"Patat Gwendal","year":"2022","unstructured":"Gwendal Patat, Mohamed Sabt, and Pierre-Alain Fouque. 2022. Wide-Leak: how over-the-top platforms fail in Android. In 2022 52nd Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN). IEEE, 501\u2013508."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom60117.2023.00087"},{"key":"e_1_3_2_1_37_1","volume-title":"Narrowbeer: A Practical Replay Attack Against the Widevine DRM. In 34th USENIX Security Symposium (USENIX Security'25)","author":"Roudot Florian","year":"2025","unstructured":"Florian Roudot and Mohamed Sabt. 2025. Narrowbeer: A Practical Replay Attack Against the Widevine DRM. In 34th USENIX Security Symposium (USENIX Security'25)."},{"key":"e_1_3_2_1_38_1","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Schl\u00fcter Benedict","year":"2024","unstructured":"Benedict Schl\u00fcter, Supraja Sridhara, Mark Kuhne, Andrin Bertschi, and Shweta Shinde. 2024. {HECKLER}: Breaking Confidential {VMs} with Malicious Interrupts. In 33rd USENIX Security Symposium (USENIX Security 24). 3459\u20133476."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3719027.3765233"},{"key":"e_1_3_2_1_40_1","unstructured":"Spotify Technology S.A. 2025. Spotify. https:\/\/www.spotify.com Music streaming service."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"crossref","unstructured":"tbodt. 2020. widevine-l3-decryptor. https:\/\/github.com\/tbodt\/widevine-l3-decryptor. Accessed: 2025-09-03.","DOI":"10.1055\/a-1039-6179"},{"key":"e_1_3_2_1_42_1","volume-title":"22nd USENIX Security Symposium (USENIX Security 13)","author":"Wang Ruoyu","year":"2013","unstructured":"Ruoyu Wang, Yan Shoshitaishvili, Christopher Kruegel, and Giovanni Vigna. 2013. Steal This Movie: Automatically Bypassing {DRM} Protection in Streaming Media Services. In 22nd USENIX Security Symposium (USENIX Security 13). 687\u2013702."},{"key":"e_1_3_2_1_43_1","unstructured":"OSDev Wiki. 2022. Intel High Definition Audio. https:\/\/wiki.osdev.org\/Intel_High_Definition_Audio_#0x00_(4_bytes)_Global_Capabilities. Accessed: 2025-09-05."},{"key":"e_1_3_2_1_44_1","unstructured":"Ruiyi Zhang Tristan Hornetz Daniel Weber Fabian Thomas and Michael Schwarz. 2026. StackWarp: Breaking AMD SEV-SNP Integrity via Deterministic Stack-Pointer Manipulation through the CPU's Stack Engine. In USENIX Security."},{"key":"e_1_3_2_1_45_1","volume-title":"Wideshears: Investigating and breaking widevine on QTEE. BlackHat Asia","author":"Zhao Qi","year":"2021","unstructured":"Qi Zhao. 2021. Wideshears: Investigating and breaking widevine on QTEE. BlackHat Asia (2021)."}],"event":{"name":"EUROSYS '26: 21st European Conference on Computer Systems","location":"McEwan Hall\/The University of Edinburgh Edinburgh Scotland UK","acronym":"EUROSYS '26","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the 21st European Conference on Computer Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3767295.3803583","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T12:06:58Z","timestamp":1780661218000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3767295.3803583"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,26]]},"references-count":45,"alternative-id":["10.1145\/3767295.3803583","10.1145\/3767295"],"URL":"https:\/\/doi.org\/10.1145\/3767295.3803583","relation":{},"subject":[],"published":{"date-parts":[[2026,4,26]]},"assertion":[{"value":"2026-04-26","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}