6 ms·

Only Level 3, sadly, which means it can decrypt Standard Definition (480p) videos. This has been out for a while. Some reputable people in the pirating industr

by resynth1943 6y ago

Only Level 3, sadly, which means it can decrypt Standard Definition (480p) videos. This has been out for a while. Some reputable people in the pirating industry have actually cracked Level 1, which means they can decrypt 4K! :-)

kayson 6y ago
Any resources on Level 1 decryption?
- m-p-3 6y ago
  It's probably kept under wraps by large scene groups, they don't want to show their methods and have them patched out.
- gruez 6y ago
  One method appears to be playing back on a legitimate player, then using HDCP strippers on hdmi/displayport outputs[1]. I've seen some 4k releases that clearly show the streaming site's playback controls, for instance. [1] search for "hdcp bypass" on ebay
  - mmm_grayons 6y ago
    I remember cheap chinese hdmi splitters used to inadvertently strip hdcp; is that still current?
    - dannyw 6y ago
      Yes, but you could just explicitly search for a hdcp stripper and it'll work.
- bawolff 6y ago
  There have been a bunch of papers recently about using undervolting to break secure enclaves. No idea about how applicable that is, but that might be a possible attack vector.
- snvzz 6y ago
  Capture HDMI. Strip DHCP. Refer to the perfectly legal NeTV2 + trivial modification if you understand the HDL.
  - Thorrez 6y ago
    Is that considered decryption? Wouldn't that both decrypt and decompress? What if someone wants the original compressed stream so the video doesn't need to be re-compressed?
    - bscphil 6y ago
      That can't be done without hardware hacks, which can (often) be traced to isolated hardware which the manufacturers will then lock out or force a software upgrade for, making it impossible to use in the future. That's why most 4k pirate releases are re-encoded from HDMI, not lossless rips of the original stream as they are for 720p and 1080p.
  - matheusmoreira 6y ago
    Will that reduce the quality of the audio/video?
bawolff 6y ago
Level 1 means everything is done in a secure enclave from what i understand. I wonder if google does something similar to bluray AACS where if a level 1 device is compromised they can revoke just that device (or manufacturer's key). If not, i wonder why they don't. (To clarify my curiosity is in an abstract way, i am ideologically opposed to DRM)
- AlexCoventry 6y ago
  What kind of secure enclave? There have been a lot of catastrophic vulnerabilities in secure enclaves, over the past year or three.
  - bawolff 6y ago
    Whichever one your device has. Its a technology that google licenses out. If you are making a device that has a secure enclave you can apply for a license for level 1 widevine. If indeed level 1 has been breached, presumably it happened via one of those weaker secure enclaves.
    - spondyl 6y ago
      I'd just like to take a second to appreciate the irony/oxymoron of there being weaker "secure" enclaves
      - amiga 6y ago
        ...and the idea of a secure computer in general...
- gruez 6y ago
  >If not, i wonder why they don't. mainly because it's hard to trace back which device key got leaked, especially if all you have to go on are whatever the ripped videos. if you had the tools it'd be much easier, but that's probably kept under tight wraps by the piracy groups.
Retr0spectrum 6y ago
This is just not true. It's up to individual content providers to decide what resolutions to supply via L3, and for Netflix and Amazon Prime, that resolution is 1080p.
- Thorrez 6y ago
  >and for Netflix [...], that resolution is 1080p. Do you have a source for that? This page[1] says Firefox and Chrome on Windows, Linux, and Mac only go up to 720p. Chrome on ChromeOs goes up to 1080p, is that still L3? [1] https://help.netflix.com/en/node/23742 https://help.netflix.com/en/node/23742
  - Retr0spectrum 6y ago
    https://i.imgur.com/uveeA6a.png https://i.imgur.com/uveeA6a.png https://addons.mozilla.org/en-GB/firefox/addon/netflix-1080p-firefox/ https://addons.mozilla.org/en-GB/firefox/addon/netflix-1080p... It seems that many streaming platforms disable 1080p by default, and I assume that this is only for performance reasons (some hardware struggles to run an obfuscated software video decoder...) - it's not a DRM limitation, and in netflix's case it can be re-enabled via trivial changes to the frontend JS.
    - Aissen 6y ago
      Of course you can watch the test streams, but try watching a recent movie from a third party studio and see if it reports the same resolution.
      - Retr0spectrum 6y ago
        This is true, but if you care about quality you'd go directly to the third party source. All of the content I actually use Netflix for is available in 1080p on L3 (Which matters to me, since L3 is the highest supported level on desktop x86 Linux).
    - 0xbkt 6y ago

kayson 6y ago

Any resources on Level 1 decryption?

m-p-3 6y ago
It's probably kept under wraps by large scene groups, they don't want to show their methods and have them patched out.
gruez 6y ago
One method appears to be playing back on a legitimate player, then using HDCP strippers on hdmi/displayport outputs[1]. I've seen some 4k releases that clearly show the streaming site's playback controls, for instance. [1] search for "hdcp bypass" on ebay
- mmm_grayons 6y ago
  I remember cheap chinese hdmi splitters used to inadvertently strip hdcp; is that still current?
  - dannyw 6y ago
    Yes, but you could just explicitly search for a hdcp stripper and it'll work.
bawolff 6y ago
There have been a bunch of papers recently about using undervolting to break secure enclaves. No idea about how applicable that is, but that might be a possible attack vector.
snvzz 6y ago
Capture HDMI. Strip DHCP. Refer to the perfectly legal NeTV2 + trivial modification if you understand the HDL.
- Thorrez 6y ago
  Is that considered decryption? Wouldn't that both decrypt and decompress? What if someone wants the original compressed stream so the video doesn't need to be re-compressed?
  - bscphil 6y ago
    That can't be done without hardware hacks, which can (often) be traced to isolated hardware which the manufacturers will then lock out or force a software upgrade for, making it impossible to use in the future. That's why most 4k pirate releases are re-encoded from HDMI, not lossless rips of the original stream as they are for 720p and 1080p.
- matheusmoreira 6y ago
  Will that reduce the quality of the audio/video?

bawolff 6y ago

Level 1 means everything is done in a secure enclave from what i understand. I wonder if google does something similar to bluray AACS where if a level 1 device is compromised they can revoke just that device (or manufacturer's key). If not, i wonder why they don't. (To clarify my curiosity is in an abstract way, i am ideologically opposed to DRM)

AlexCoventry 6y ago
What kind of secure enclave? There have been a lot of catastrophic vulnerabilities in secure enclaves, over the past year or three.
- bawolff 6y ago
  Whichever one your device has. Its a technology that google licenses out. If you are making a device that has a secure enclave you can apply for a license for level 1 widevine. If indeed level 1 has been breached, presumably it happened via one of those weaker secure enclaves.
  - spondyl 6y ago
    I'd just like to take a second to appreciate the irony/oxymoron of there being weaker "secure" enclaves
    - amiga 6y ago
      ...and the idea of a secure computer in general...
gruez 6y ago
>If not, i wonder why they don't. mainly because it's hard to trace back which device key got leaked, especially if all you have to go on are whatever the ripped videos. if you had the tools it'd be much easier, but that's probably kept under tight wraps by the piracy groups.

Retr0spectrum 6y ago

This is just not true. It's up to individual content providers to decide what resolutions to supply via L3, and for Netflix and Amazon Prime, that resolution is 1080p.

Thorrez 6y ago
>and for Netflix [...], that resolution is 1080p. Do you have a source for that? This page[1] says Firefox and Chrome on Windows, Linux, and Mac only go up to 720p. Chrome on ChromeOs goes up to 1080p, is that still L3? [1] https://help.netflix.com/en/node/23742 https://help.netflix.com/en/node/23742
- Retr0spectrum 6y ago
  https://i.imgur.com/uveeA6a.png https://i.imgur.com/uveeA6a.png https://addons.mozilla.org/en-GB/firefox/addon/netflix-1080p-firefox/ https://addons.mozilla.org/en-GB/firefox/addon/netflix-1080p... It seems that many streaming platforms disable 1080p by default, and I assume that this is only for performance reasons (some hardware struggles to run an obfuscated software video decoder...) - it's not a DRM limitation, and in netflix's case it can be re-enabled via trivial changes to the frontend JS.
  - Aissen 6y ago
    Of course you can watch the test streams, but try watching a recent movie from a third party studio and see if it reports the same resolution.
    - Retr0spectrum 6y ago
      This is true, but if you care about quality you'd go directly to the third party source. All of the content I actually use Netflix for is available in 1080p on L3 (Which matters to me, since L3 is the highest supported level on desktop x86 Linux).
  - 0xbkt 6y ago