Talk:Widevine/GA1

GA Review
The edit link for this section can be used to add comments to the review.''

Reviewer: Sammi Brie (talk · contribs) 03:08, 7 August 2023 (UTC)

Looking good for the most part. Give it a fresh once-over as it's been a while. Sammi Brie (she/her • t • c) 03:08, 7 August 2023 (UTC)
 * Nominator replied on WP:DISCORD. Pointed out coverage decreased when Google bought Widevine, which does make some sense as it would no longer have been a standalone public company. The other issues were all fixed, and I will pass. Sammi Brie  (she/her • t • c) 03:35, 7 August 2023 (UTC)

Copy changes

 * Yes, that should be Telus's (MOS:'S)
 * There is a relevant? tag on the sentence The acquisition occurred on the same day Viacom filed an appeal in Viacom v. YouTube, a case regarding Google's role in users uploading content owned by Viacom onto YouTube. that must be addressed.
 * Is there anything further about Google development/uptake of Widevine in the 2010s? I see material in the Client support section, too... Would any of that belong in that area?
 * Consider linking proxy server
 * The block is AES-128-CBC encrypted with a random initialization vector (IV) and the fields are defined in big-endian byte order. Add a comma after (IV). User:Sammi Brie/Commas in sentences (CinS)
 * Despite this, vendors may still choose to encrypt audio and video with the same key, or may not even encrypt the audio at all. Remove this comma: "vendors" is the subject in both halves of the sentence. (CinS)
 * Also remove this comma in a footnote: remote_attestation_verified requires the use of a Trusted Platform Module (TPM), and is enabled at boot for devices with a TPM. (CinS)
 * I would change HBO Max to Max to remain current.
 * In 2021, the Android version of Widevine L3 has been reverse engineered and broken by security researchers. The same year, Qi Zhao presented the first attack breaking Widevine L1 in Android by recovering the L1 keybox.
 * Tense error in first sentence.
 * Second sentence does not end in an inline citation, though it contains one.

Sourcing and spot checks
The Forbes article was staff-written, and the TechCrunch article is fine as not being used to demonstrate notability.


 * 4: Article in Streaming Media. This seems to somewhat follow a press release and actually introduces a typo (DEX-X instead of DES-X). The source release seems to be . I doubt there's anything better myself. ✅
 * 14: 2007 Advanced Television article on Widevine suing Verimatrix on patent infringement. ✅
 * 19: 2009 funding round. ✅
 * 25: 2022 Android Police article on Widevine. To meet security Level 1, all content processing, cryptography, and control must be performed within the Trusted Execution Environment (TEE) of the device’s processor. This is to prevent external tampering and copying of the media file. All ARM Cortex-A processors implement TrustZone technology, creating a hardware separation that allows a trusted OS (such as Android) to create a TEE for DRM, and other secure applications. ✅
 * 43: Patat et al 2022a p.43. I cannot seem to access this citation including in Wikipedia Library (doi:10.1109/SPW54247.2022.9833867).
 * 53: Google 2017 p.23. I found the reference elsewhere: Android 5+ includes a version of Chrome that supports HTML5. You can implement an HTML5 DASH and CENC video application using Encrypted Media Extensions (EME) and Media Source Extensions (MSE). Shaka Player supports Chrome on Android. See Shaka Player section for more information on HTML5 playback. This, I believe, would suggest Widevine support. ✅

Earwig finds a handful of technical terms and banal phrases that aren't concerning.

Images
The only image is a PD-text/below TOO logo. Encouragement: Add alt text.