Live data from Hacker News

"Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

torrentfreak.com

121–130 of 306 posts

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#121
post #88

> Hi! My name is WVDUMP. I am Leaking the CDM to burn it & punish few idiots that think themselves as dicord lords :smile: Why do so many people doing illegal/shady shit online use Discord? You might as well be using Facebook at the point.

They use Discord for illegal stuff because they already use it for tons of other things. Sure it's a bad idea, but they don't care (and with all honesty, Discord support doesn't seem to either).

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#122
post #113

Am I correct that homomorphic encryption will solve the DRM problem, in the sense that it will be mathematically proven (in the cryptographic sense) to be impossible to bypass? Of course, you'll still be able to cam-record the actual output, or steal the image from the TFT/OLED electronics, but no easy bypass.

You are wrong. An encryption, any encryption, needs a key for decryption process. If the client is given that key then it can decrypt and rip the content. If the client is not given the key then how will they legally watch it since they paid for the content anyway?

As a rule of thumb, anything that was made by humans can be unmade by humans. All you can do is make the pirate life harder, but never impossible.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#123
post #86

A pile of .exes and compiled python code like this, especially with such a targeted audience, seems like a great vector to potentially own a lot of people's boxes.

This was my first though as well, but not everything is in compiled form. For example see `bad34.py` in the Paramount-Plus-4k-Downloader repository.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#124

Earlier quoted context omitted.

Who the hell skips car chases? What movie had a car chase that you wanted to skip that made that movie more watchable (this sentence applies to the furious films as well, skipping the chase scenes there gives you the dumbest drama of all time).

Car chases are often filler like action scenes in general are filler, IMO. It's not universally true and depends on how consequential the scenes are. If you could flash " " instead and not miss much, I don't want it. Movies with top, top notch action and/or better integrated action are exceptions. The original Matrix, John Wick movies, Baby Driver, The Italian Job, Mission Impossible, etc. Superhero movies are usuall…

It is not the fact they are a car chase but their relevance in the story.

Personally when I rewatch the Back to the Future trilogy, I skip much of the car chasing stuff.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#125
post #113

Am I correct that homomorphic encryption will solve the DRM problem, in the sense that it will be mathematically proven (in the cryptographic sense) to be impossible to bypass? Of course, you'll still be able to cam-record the actual output, or steal the image from the TFT/OLED electronics, but no easy bypass.

The issue is that the image will always exist in a decrypted state if you're presenting it to the user. You can push that decoder further and further down the pipeline, but there's always a clean framebuffer to rip, no matter how you frame it. Yes, they could make it harder, but I could also design an Arduino that dumps the serial output of your decoder before it reaches the display controller. It would take some borderline space-age technology to design an IC resistant to that sort of vuln.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#126
post #98

Earlier quoted context omitted.

The DRM technologies in place prevent screen recording from working, as far as I know. Or at least prevent it from working at high resolutions.

I found this interesting, so I tried: I recorded a HD movie on Netflix in Firefox, recorded using simplescreenrecorder on KDE5 in Xorg. I remember it was impossible to record shared screen in old (Ebay owned Skype).

HD != 4K

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#127
post #11
post #5

Earlier quoted context omitted.

It is, but the resulting files are encrypted. Hence this post being about exposing CDMs (Content Decryption Modules). These use decryption keys obtained through hacking or paying internal staff. Once the decryption keys are exposed like this then the content providers 'burn'; them and generate new ones meaning the process has to start over again.

I assume at some point Widevine plugin decrypts these files to display the actual video stream in the browser, correct? Why don't they capture already decrypted stream?

You are technically correct. The stupid thing about DRM is that the player has to download the decryption keys into the RAM of the player. All these players do is try to obfuscate the keys so they can't be accessed very easily. When you see these proper rips out there they are being done by groups who extracted a decryption key from the player and used that to unencrypt the stream.

DRM is dumb. I used to work on DRM. It was dumb then, it's dumb now.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#128

Earlier quoted context omitted.

Who the hell skips car chases? What movie had a car chase that you wanted to skip that made that movie more watchable (this sentence applies to the furious films as well, skipping the chase scenes there gives you the dumbest drama of all time).

As a counter example, I watch Bullitt just for the car chase.

Yes but is not Bullit the original "car chase" movie?

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#129
post #98

Earlier quoted context omitted.

The DRM technologies in place prevent screen recording from working, as far as I know. Or at least prevent it from working at high resolutions.

I found this interesting, so I tried: I recorded a HD movie on Netflix in Firefox, recorded using simplescreenrecorder on KDE5 in Xorg. I remember it was impossible to record shared screen in old (Ebay owned Skype).

This is why Netflix only serves Firefox low resolution video.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#130
post #85

the videos look interesting but i am on linux and this looks windows only. also, i need some background knowledge to get this working so i could not retry. a good attempt imo. if i had the time and the necessary technical competency, i would've loved to jump into it. for many years piratebay was my default homepage. now, lookmovie or vumoo gets my occasional streaming fix

I imagine it's windows only because widevine on Linux is crippled for many services, like HBO Max.

well if the utility is merely breaking encryption on the url, it shouldn't matter what the host is? right?
Post reply on HN