Live data from Hacker News

"Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

torrentfreak.com

31–40 of 306 posts

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#31

The repo readme is pretty telling - this is being leaked to force this particular key to be blacklisted, I guess one group annoyed with others and wanting to cut off their access (and presumably the leaking group already has other L1 keys so doesn't fear this key being burned...)

There is something amusing about weaponizing the key revocation process like this...

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#32
post #2

The repos: https://github.com/widevinedump?tab=repositories

I don’t know why but for some reason I was hopeful to see unit tests in any of the repos. Searching “test” for that user doesn’t reveal any tests. :( Even the digital property liberators/internet pirates don’t test their software. I feel like I’m on an island with a small population of test enthusiasts.

What's the best place to get started with testing? As a newbie brogrammer it's intimidating enough writing software that works, let alone suites to comprehensively test it. Is there a testing 'bible'?

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#35
post #32

Earlier quoted context omitted.

I don’t know why but for some reason I was hopeful to see unit tests in any of the repos. Searching “test” for that user doesn’t reveal any tests. :( Even the digital property liberators/internet pirates don’t test their software. I feel like I’m on an island with a small population of test enthusiasts.

What's the best place to get started with testing? As a newbie brogrammer it's intimidating enough writing software that works, let alone suites to comprehensively test it. Is there a testing 'bible'?

You'll fare much better in today's software industry climate if you don't use the word brogrammer

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#36

Earlier quoted context omitted.

I don’t know why but for some reason I was hopeful to see unit tests in any of the repos. Searching “test” for that user doesn’t reveal any tests. :( Even the digital property liberators/internet pirates don’t test their software. I feel like I’m on an island with a small population of test enthusiasts.

>Even the digital property liberators/internet pirates don’t test their software. The lack of automated tests doesn't mean they don't test their software.

You’re right I should be more clear. I was more interested in automated test rather than manual/exploratory testing. Thanks for the opportunity to clarify my comment.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#38

Earlier quoted context omitted.

I don’t know why but for some reason I was hopeful to see unit tests in any of the repos. Searching “test” for that user doesn’t reveal any tests. :( Even the digital property liberators/internet pirates don’t test their software. I feel like I’m on an island with a small population of test enthusiasts.

>Even the digital property liberators/internet pirates don’t test their software. I feel like I’m on an island with a small population of test enthusiasts. Ultimately, what's the point. The tool either works, or it doesn't. Then you patch what doesn't work so it does work. Heck even the Linux kernel isn't tested. Unit tests are so management can have a good metric to sell code quality. I don't know any time unit test…

My experience: running a unit test is much faster than a manual test.

While developing a feature or fixing a bug, it speeds you up overall, in spite of the initial investment in writing the test.

As a bonus, you can keep them running permanently, to prevent new bugs or regressions.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#39
post #22

Earlier quoted context omitted.

That's what Widevine prevents: It ensures the decrypted video is only available to proprietary devices and software which agree not to help you rip the video.

At the end of the day you can always record the video buffer in some way or another (hdmi capture device, etc). The problem is that screen recording isn't what you want: it's lossy because you'll re-encode the output of a lossy encoding (at comparable level). You always want an ultra high quality source for encoding (in comparison with your target quality), else you'll amplify artifacts. To not deteriorate the percep…

> At the end of the day you can always record the video buffer in some way or another (hdmi capture device, etc).

You actually cannot without an HDCP decryptor, which tends not to be sold in a lot of countries since it's primarily used illegally.

The idea with encrypted video such as Widevine, is that any time it passes over an unapproved device (such as an HDMI cable), it is encrypted on it's way to a device authorized to decrypt the signal.

Also, HDMI is a digital format, and you lose nothing in transfer over it.

Post reply on HN