Live data from Hacker News

"Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

torrentfreak.com

21–30 of 306 posts

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#22

Can’t you just record the screen or is there something preventing it?

That's what Widevine prevents: It ensures the decrypted video is only available to proprietary devices and software which agree not to help you rip the video.

At the end of the day you can always record the video buffer in some way or another (hdmi capture device, etc). The problem is that screen recording isn't what you want: it's lossy because you'll re-encode the output of a lossy encoding (at comparable level). You always want an ultra high quality source for encoding (in comparison with your target quality), else you'll amplify artifacts. To not deteriorate the perceptual quality you'll have to do little lossy compression (ie big file size, much bigger than the original encode).

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#23
post #2

The repos: https://github.com/widevinedump?tab=repositories

I don’t know why but for some reason I was hopeful to see unit tests in any of the repos. Searching “test” for that user doesn’t reveal any tests. :( Even the digital property liberators/internet pirates don’t test their software. I feel like I’m on an island with a small population of test enthusiasts.

>Even the digital property liberators/internet pirates don’t test their software.

The lack of automated tests doesn't mean they don't test their software.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#24
The repo readme is pretty telling - this is being leaked to force this particular key to be blacklisted, I guess one group annoyed with others and wanting to cut off their access (and presumably the leaking group already has other L1 keys so doesn't fear this key being burned...)

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#25
post #2

The repos: https://github.com/widevinedump?tab=repositories

I don’t know why but for some reason I was hopeful to see unit tests in any of the repos. Searching “test” for that user doesn’t reveal any tests. :( Even the digital property liberators/internet pirates don’t test their software. I feel like I’m on an island with a small population of test enthusiasts.

>Even the digital property liberators/internet pirates don’t test their software. I feel like I’m on an island with a small population of test enthusiasts.

Ultimately, what's the point. The tool either works, or it doesn't. Then you patch what doesn't work so it does work.

Heck even the Linux kernel isn't tested.

Unit tests are so management can have a good metric to sell code quality. I don't know any time unit testing has actually benefited shipping faster (which really is the only bottom line those above you care about)

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#26

The repo readme is pretty telling - this is being leaked to force this particular key to be blacklisted, I guess one group annoyed with others and wanting to cut off their access (and presumably the leaking group already has other L1 keys so doesn't fear this key being burned...)

or they had the skills to just dump it again

Edit: nvm I understood which key you were talking about. I would have replied, but I'm rate limited.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#27

The repo readme is pretty telling - this is being leaked to force this particular key to be blacklisted, I guess one group annoyed with others and wanting to cut off their access (and presumably the leaking group already has other L1 keys so doesn't fear this key being burned...)

or they had the skills to just dump it again Edit: nvm I understood which key you were talking about. I would have replied, but I'm rate limited.

Ah, I thought L1 keys were burned into hardware, so blacklisting this key was effectively blacklisting a bunch of Lenovo tablets from accessing 4K HDR streaming?

Edit: looks like I'm wrong about this, and the Widevine L1 keys can be changed with a firmware update. There's an interesting breakdown of how it works on Qualcomm chips here: http://bits-please.blogspot.com/2016/04/exploring-qualcomms-...

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#28

I don't care about downloading anything. Does it allow me to watch netflix without the need of proprietary software?

source available software can still be proprietary

Can't ffmpeg/gstreamer/whatever just use the keys?

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#29
post #2

The repos: https://github.com/widevinedump?tab=repositories

I don’t know why but for some reason I was hopeful to see unit tests in any of the repos. Searching “test” for that user doesn’t reveal any tests. :( Even the digital property liberators/internet pirates don’t test their software. I feel like I’m on an island with a small population of test enthusiasts.

There's no point I guess, this kind of thing does not work for very long anyway. Because it gets blocked server side once it's out.

It's more like a proof of concept than production code.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#30
post #11

Earlier quoted context omitted.

I assume at some point Widevine plugin decrypts these files to display the actual video stream in the browser, correct? Why don't they capture already decrypted stream?

That's why they now embed displays with verification modules. Basically whole stack from server to your display is a giant chain verifying you are not doing what they don't want you to do.

And see how well it works. 2 hours after airing everything is online. The only ones they're giving any hassle are legitimate consumers.
Post reply on HN