Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

"Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

torrentfreak.com

Post reply on HN
Print view View original

11–20 of 306 posts

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#11

Post by ordx »

alt227 wrote: post #5
sydthrowaway wrote: post #3

I've often wondered how easy it would be for people in the scene to rip Netflix or others streaming content. Isn't it as simple as getting the URL of the video player element in the browser and using cURL or wget?

It is, but the resulting files are encrypted. Hence this post being about exposing CDMs (Content Decryption Modules). These use decryption keys obtained through hacking or paying internal staff. Once the decryption keys are exposed like this then the content providers 'burn'; them and generate new ones meaning the process has to start over again.

I assume at some point Widevine plugin decrypts these files to display the actual video stream in the browser, correct? Why don't they capture already decrypted stream?

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#13

Post by e3bc54b2 »

ordx wrote: post #11
alt227 wrote: post #5

Earlier quoted context omitted.

It is, but the resulting files are encrypted. Hence this post being about exposing CDMs (Content Decryption Modules). These use decryption keys obtained through hacking or paying internal staff. Once the decryption keys are exposed like this then the content providers 'burn'; them and generate new ones meaning the process has to start over again.

I assume at some point Widevine plugin decrypts these files to display the actual video stream in the browser, correct? Why don't they capture already decrypted stream?

That's why they now embed displays with verification modules. Basically whole stack from server to your display is a giant chain verifying you are not doing what they don't want you to do.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#14

Post by ocdtrekkie »

peanut_worm wrote: post #12

Can’t you just record the screen or is there something preventing it?

That's what Widevine prevents: It ensures the decrypted video is only available to proprietary devices and software which agree not to help you rip the video.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#15

Post by Scoundreller »

ordx wrote: post #11
alt227 wrote: post #5

Earlier quoted context omitted.

It is, but the resulting files are encrypted. Hence this post being about exposing CDMs (Content Decryption Modules). These use decryption keys obtained through hacking or paying internal staff. Once the decryption keys are exposed like this then the content providers 'burn'; them and generate new ones meaning the process has to start over again.

I assume at some point Widevine plugin decrypts these files to display the actual video stream in the browser, correct? Why don't they capture already decrypted stream?

My thought is that the decryption and decompression are interlinked.

So while it’s relatively easy to get the raw stream, if you want to re-distribute it, you’ll have to compress it again.

With these leaks, you can get the compressed and decrypted files and re-distribute without any added compression loss.

Maybe I’m wrong, but it’s the only thing that makes sense to me.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#17

Post by vmception »

This is one of those github repositories that you just clone and move on.

Don't fork, just clone to your local system. When it gets taken down the forks will disappear, whereas the clones will not. You can also just download a zip file.

https://github.com/widevinedump?tab=repositories

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#18

Post by tjoff »

peanut_worm wrote: post #12

Can’t you just record the screen or is there something preventing it?

The DRM (tries to) prevent it.

You can also record the HDMI signal, which HDCP is supposed to guard against. But it was cracked even before it was being used/enforced. So now it only serves to create incompatibility issues and bugs for paying users. Even though it has been irrelevant for more than a decade.

I guess the reason for why it still exist is because it prevents/hinders legal products to circumvent it, since that is against the law in many jurisdictions.

Anyway, the downside of both solutions is that you have to re-encode the video, which will never be as good as the original source you get directly from streaming it. Though I'd imagine the difference is quite negligible. More effort though!

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#19

Post by Scoundreller »

e3bc54b2 wrote: post #13
ordx wrote: post #11

Earlier quoted context omitted.

I assume at some point Widevine plugin decrypts these files to display the actual video stream in the browser, correct? Why don't they capture already decrypted stream?

That's why they now embed displays with verification modules. Basically whole stack from server to your display is a giant chain verifying you are not doing what they don't want you to do.

Though often they get it wrong, like when I bought a movie off Apple and it errored when I screen mirrored to my dumb TV and it’s back to piracy first for me.
Post reply on HN