Who's spying on your streaming video?

The 26th USENIX Security Symposium (USENIX Security ‘17) has a ton of great technical sessions as usual. I’m not able to attend the event in person but they have made it very easy to follow all of the talks I’m interested in through the details on the USENIX Security sessions page.

In the category of Privacy Attacks & Defense there is a talk and paper titled Beauty and the Burst: Remote Identification of Encrypted Video Streams, which is very informative. They talk about a weakness in the MPEG-DASH standard that can allow an attack without even being on the same machine.