Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

"Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

torrentfreak.com

Post reply on HN
Print view View original

51–60 of 306 posts

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#51

Post by natdempk »

Tobu wrote: post #47
natdempk wrote: post #40

Does anyone know what CDM stands for or refers to? Saw the acronym mentioned in a lot of the repos.

Content decryption module: https://en.wikipedia.org/wiki/Encrypted_Media_Extensions A component that decrypts streams locally, which DRM makers intend will be restricted enough to not leak the keys it uses.

Thanks for the explanation. So it seems like these repos are just scripts to download content and decode it once you have a CDM then? Seems like the actual CDMs here are ripped from devices and not actually included in this leak from a cursory glance.

Edit: Yep this is what is happening, but there is an L1 CDM in the Lenovo repo. I should read the article before jumping in to the comments/code. :)

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#52

Post by searine »

specialist wrote: post #44

I just want to control the viewing experience, not hoard warez. Effortless rewind, skip filler (car chases, sex), play at x1.25 speed, etc. aka the "Blu-Ray experience". If that means I gotta bypass the DRM and download, so be it. -- Some shows have my complete rapt attention. I'll keenly watch (and rewatch) every single frame. Like Netflix's Maniac. OMG. So frikkin good. (So many other examples.) Other shows, especi…

FYI There is a great chrome extension that allows you to control playback speed, and it works on just about every video site.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#53

Post by londons_explore »

garblegarble wrote: post #27
charcircuit wrote: post #26

Earlier quoted context omitted.

or they had the skills to just dump it again Edit: nvm I understood which key you were talking about. I would have replied, but I'm rate limited.

Ah, I thought L1 keys were burned into hardware, so blacklisting this key was effectively blacklisting a bunch of Lenovo tablets from accessing 4K HDR streaming? Edit: looks like I'm wrong about this, and the Widevine L1 keys can be changed with a firmware update. There's an interesting breakdown of how it works on Qualcomm chips here: http://bits-please.blogspot.com/2016/04/exploring-qualcomms-...

Does this mean if I have a lenovo tablet that currently streams 4K, that it will lose 4K video support? Could I ask Lenovo for a refund?

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#54

Post by shakna »

unbanned wrote: post #25
sovietmudkipz wrote: post #10

Earlier quoted context omitted.

I don’t know why but for some reason I was hopeful to see unit tests in any of the repos. Searching “test” for that user doesn’t reveal any tests. :( Even the digital property liberators/internet pirates don’t test their software. I feel like I’m on an island with a small population of test enthusiasts.

>Even the digital property liberators/internet pirates don’t test their software. I feel like I’m on an island with a small population of test enthusiasts. Ultimately, what's the point. The tool either works, or it doesn't. Then you patch what doesn't work so it does work. Heck even the Linux kernel isn't tested. Unit tests are so management can have a good metric to sell code quality. I don't know any time unit test…

> Heck even the Linux kernel isn't tested.

Apart from the Linux Test Project [0], run by all the big Linux names, who regularly issue very detailed bug reports and usually patches as well, you mean?

[0] https://linux-test-project.github.io/

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#55

Post by develop7 »

unbanned wrote: post #25
sovietmudkipz wrote: post #10

Earlier quoted context omitted.

I don’t know why but for some reason I was hopeful to see unit tests in any of the repos. Searching “test” for that user doesn’t reveal any tests. :( Even the digital property liberators/internet pirates don’t test their software. I feel like I’m on an island with a small population of test enthusiasts.

>Even the digital property liberators/internet pirates don’t test their software. I feel like I’m on an island with a small population of test enthusiasts. Ultimately, what's the point. The tool either works, or it doesn't. Then you patch what doesn't work so it does work. Heck even the Linux kernel isn't tested. Unit tests are so management can have a good metric to sell code quality. I don't know any time unit test…

but linux kernel is covered by tests. Not 100%, not all the subsystems, but there are automated tests nevertheless (introduced by Greg K-H, AFAIR)

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#56

Post by sdflhasjd »

ocdtrekkie wrote: post #39
lapinot wrote: post #22

Earlier quoted context omitted.

At the end of the day you can always record the video buffer in some way or another (hdmi capture device, etc). The problem is that screen recording isn't what you want: it's lossy because you'll re-encode the output of a lossy encoding (at comparable level). You always want an ultra high quality source for encoding (in comparison with your target quality), else you'll amplify artifacts. To not deteriorate the percep…

> At the end of the day you can always record the video buffer in some way or another (hdmi capture device, etc). You actually cannot without an HDCP decryptor, which tends not to be sold in a lot of countries since it's primarily used illegally. The idea with encrypted video such as Widevine, is that any time it passes over an unapproved device (such as an HDMI cable), it is encrypted on it's way to a device authori…

> You actually cannot without an HDCP decryptor, which tends not to be sold in a lot of countries since it's primarily used illegally.

They are trivially easy to buy online though

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#57

Post by hatware »

betterunix2 wrote: post #31
garblegarble wrote: post #24

The repo readme is pretty telling - this is being leaked to force this particular key to be blacklisted, I guess one group annoyed with others and wanting to cut off their access (and presumably the leaking group already has other L1 keys so doesn't fear this key being burned...)

There is something amusing about weaponizing the key revocation process like this...

Everything about it is fascinating. These people all have day jobs yet they provide a better experience than the multi-trillion dollar corporations that are releasing the product in the first place.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#58

Post by jrm4 »

jrm4 wrote: post #42
vmception wrote: post #17

This is one of those github repositories that you just clone and move on. Don't fork, just clone to your local system. When it gets taken down the forks will disappear, whereas the clones will not. You can also just download a zip file. https://github.com/widevinedump?tab=repositories

"Making an imaginary-ish copy that stays on the big Microsoft-owned system is mostly unnecessary and probably not enough to keep it around, make sure you save a copy on your own computer that they can't get to." Don't want to be (too) condescending, but, as an old-timer it's kind of wild to me that people who work with tech a lot do actually sometimes need to be reminded of this.

Okay, I know I might be breaking some kind of HN rule here, but I'm super genuinely curious as to why the downvotes here. Seriously. Is it "because people already know and I'm being condescending?" Is it "No, they shouldn't do this and instead allow the code to be censored?" Where are y'all going with this?

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#59

Post by nikanj »

londons_explore wrote: post #53
garblegarble wrote: post #27

Earlier quoted context omitted.

Ah, I thought L1 keys were burned into hardware, so blacklisting this key was effectively blacklisting a bunch of Lenovo tablets from accessing 4K HDR streaming? Edit: looks like I'm wrong about this, and the Widevine L1 keys can be changed with a firmware update. There's an interesting breakdown of how it works on Qualcomm chips here: http://bits-please.blogspot.com/2016/04/exploring-qualcomms-...

Does this mean if I have a lenovo tablet that currently streams 4K, that it will lose 4K video support? Could I ask Lenovo for a refund?

Yes and yes. Lenovo probably doesn’t give a shit, though. But you can ask!

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#60

Post by phreack »

tjoff wrote: post #18
peanut_worm wrote: post #12

Can’t you just record the screen or is there something preventing it?

The DRM (tries to) prevent it. You can also record the HDMI signal, which HDCP is supposed to guard against. But it was cracked even before it was being used/enforced. So now it only serves to create incompatibility issues and bugs for paying users. Even though it has been irrelevant for more than a decade. I guess the reason for why it still exist is because it prevents/hinders legal products to circumvent it, since…

> So now it only serves to create incompatibility issues and bugs for paying users. Even though it has been irrelevant for more than a decade.

Hey that's me! Every time I open a website that has DRM to the max like Spotify or Netflix, my second monitor goes black for like 10 seconds. Fun times.

Post reply on HN