Live data from Hacker News

"Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

torrentfreak.com

281–290 of 306 posts

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#281

Earlier quoted context omitted.

That's why they now embed displays with verification modules. Basically whole stack from server to your display is a giant chain verifying you are not doing what they don't want you to do.

Though often they get it wrong, like when I bought a movie off Apple and it errored when I screen mirrored to my dumb TV and it’s back to piracy first for me.

Your dumb TV doesn't have the appropriate HDCP chips, which is why it errored. Your computer didn't know whether it was a dumb TV or if it was an HDMI capture card ready to rip the movie...

Not that I agree with the practice.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#282
post #278

Earlier quoted context omitted.

Quoted post unavailable.

I'm not sure there's some rigorous ethical justification but it's only available to people who have a Hulu account so they could just watch the movies on hulu.com instead of downloading them anyways. It also makes watching Hulu possible to people who don't want to run an opaque obfuscated library (Widevine) on their computer (also people who use musl libc [like myself] which Widevine doesn't work on). Hulu ripping wa…

Just wanted to say thanks, both for writing it and for not being ashamed of it. And also for being honest that reverse engineering is often really fun. (Unlike being an actual pentester, which mostly consists of writing TPS reports.)

P.S. To lighten the mood a little, I have a different question for you. Why "from"? It's a great name; I'm just super curious if there's any meaning. Also surprised that a Python reserved word was available on HN in 2019 -- most of those were snatched up in 2008.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#283

Earlier quoted context omitted.

I've never had this issue. Spotify (on Mac) uses the computer's sound output setting (laptop speakers or monitor), unless you choose another destination with the Spotify 'device' option.

Presumably there's something incompatible with how the Spotify client plays audio and how his system handles audio playback. His point still stands though - with MP3s he can use an alternative player, with Spotify he can't.

You can use the web client which uses the browsers audio interfacing.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#284

I just want to control the viewing experience, not hoard warez. Effortless rewind, skip filler (car chases, sex), play at x1.25 speed, etc. aka the "Blu-Ray experience". If that means I gotta bypass the DRM and download, so be it. -- Some shows have my complete rapt attention. I'll keenly watch (and rewatch) every single frame. Like Netflix's Maniac. OMG. So frikkin good. (So many other examples.) Other shows, especi…

Also performance. I have moderately high-end hardware, and Netflix's windows app stutters drawing subtitles.

Using MPC-HC with LAV splitters/decoders is flawless, even with low-end hardware.

And Smooth Video Project is an excellent alternative to $1000+ "smart" TV frame interpolation.

And even with a gigabit symmetric connection, every streaming service's CDN struggles and gives me a low bitrate every few minutes.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#285

For a while, there were HDMI splitters for sale on Amazon that would effectively strip out HDCP 2.2. I haven't checked in a while, but I bet that's still the case. It seems like these DRM efforts are futile, but then I remember that it's really just about keeping piracy outside of the grasp of "common folks". They will never be able to stop piracy if someone is determined enough.

Really? HDCP 2.2? I'm not aware of any of those except for the HDFury products with a custom firmware.

Any links to examples? Are you sure you're thinking 2.2 and not 1.4?

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#286
post #199

We really need real, ownable media. While I understand that even "owning" a disc 20 years ago was considered a license and not ownership, let's call it what it is for these intents and purposes here. I want to own my music, I want to own my movies and I do NOT want to essentially rent them and have them revokable. Same goes with games. I'll continue to pirate the videos and music as I see fit and continue to play emu…

Sounds like an NFT project

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#287
post #202

Earlier quoted context omitted.

This is not a good experience. I cannot order a box like an Apple TV and just hook it up to my new TV and go. It’s never as easy as anyone says it is, there’s always more steps involved than logging into iTunes and/or subscribing to some service with my credit card. Plus there’s always the chance of a lawsuit hanging over my head.

For a tech illeterare person maybe. using `docker-compose up` to start a preconfigured sonarr, radarr, transmission with VPN , Plex or jellyfin is almost all you need. the only addition is getting a VPN service such as mullvad... If that's too involved for a software developer I'd call that person pretty incompetent, honestly.

It's not a question of competence, it's just a drag...like the construction expert who procrastinates minor home repairs. I'll stay up all night teasing secrets out of locked boxes but when it comes to entertainment I lose interest after about 30 seconds so I just don't bother to pirate stuff unless I find a torrent in the first 30 seconds. I could just be reading a book instead.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#288
post #141

The repo readme is pretty telling - this is being leaked to force this particular key to be blacklisted, I guess one group annoyed with others and wanting to cut off their access (and presumably the leaking group already has other L1 keys so doesn't fear this key being burned...)

I also noticed it provides part of the functionality with a .pyc file, without including the normal python source. This one, for example: https://github.com/widevinedump/WV-AMZN-4K-RIPPER/blob/main/... I'd be a little leery of running that outside of a sandbox.

Forgive me for my ignorance, but would you mind explaining why providing functionality with a .pyc is potentially a red flag? I'm interested in learning more about Python codebases.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#289
post #141

Earlier quoted context omitted.

I also noticed it provides part of the functionality with a .pyc file, without including the normal python source. This one, for example: https://github.com/widevinedump/WV-AMZN-4K-RIPPER/blob/main/... I'd be a little leery of running that outside of a sandbox.

Forgive me for my ignorance, but would you mind explaining why providing functionality with a .pyc is potentially a red flag? I'm interested in learning more about Python codebases.

.pyc files are the compiled bytecode for its corresponding .py file. It's scrambled, you would need a decompiler to inspect the source code and it would be very hard to read (compared to the original source).

People typically ship .pyc files when they want to hide what they are doing, for a wide variety of reasons.

Re: "Widevine Dump":Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix

#290
post #141

The repo readme is pretty telling - this is being leaked to force this particular key to be blacklisted, I guess one group annoyed with others and wanting to cut off their access (and presumably the leaking group already has other L1 keys so doesn't fear this key being burned...)

I also noticed it provides part of the functionality with a .pyc file, without including the normal python source. This one, for example: https://github.com/widevinedump/WV-AMZN-4K-RIPPER/blob/main/... I'd be a little leery of running that outside of a sandbox.

Do you think it could probably be decompiled? [0].

[0]: https://stackoverflow.com/a/14808336/297570

Post reply on HN