20 ms·

Apple TV Content

580 points by janekg 5y ago

e-clinton 5y ago
I subscribe to all these services and I’m thankful these tools exist. Yesterday I was on an 8.5h plane ride and of course, all the movies I pre-downloaded on Disney+ refused to play because it kept wanting to connect to the internet first. Netflix refused to download anything because apparently I have stuff downloaded in too many devices. Which to me, they should provide an easy way to deauthorize the other devices, but not sure what that’s even an issue since I have 4 profiles. Apple TV has been pretty great so far without issues.
Transisto 5y ago
I tend to forget the 4-5 subscriptions I pay for, and where is which content, so I use streamio most of the time.
swyx 5y ago
it's now 404ing :( does anyone have a backup?
mixmastamyk 5y ago
Interesting, I think Kanopy uses widevine as well. How long will this last now that it has been posted to HN?
- nyuszika7h 5y ago
  The L1 device key they posted was already revoked earlier today. The tools themselves might continue to work for a while longer with an appropriate non-revoked key depending on how much services want to change up their APIs.
  - scoopertrooper 5y ago
    I can't see them changing up their APIs in any meaningful way. It'd seem kind of pointless to me. At the end of the day, if you're exposing something on the internet, then it won't take a huge amount of time for people to reverse engineer how web clients interact with the server. Main game should be rotating the L1 keys. I don't know about L2 keys, but rotating L3 keys seems like a lost cause to me, some dude made a Chrome extension that can extract them. Some theorise that Microsoft's Pluton/TPM antics with Windows 11 are a ploy to bring L1-style keys to the desktop. https://www.extremetech.com/computing/317512-microsoft-pluton-chip-will-bring-xbox-like-security-to-windows-pcs https://www.extremetech.com/computing/317512-microsoft-pluto... https://www.anandtech.com/show/16269/microsoft-pluton-hardware-security-coming-to-our-cpus-amd-intel-qualcomm https://www.anandtech.com/show/16269/microsoft-pluton-hardwa...
    - nyuszika7h 5y ago
      You can't really "rotate" L1 keys without breaking HD playback on millions of old vulnerable devices and pissing off a ton of legitimate customers in the process. A hardware vulnerability can't be fixed with a software update. Instead, nowadays when a key is leaked usually Google just revokes the key of the unique device it was extracted from and not the entire model. But major streaming services often blacklist or limit playback quality on known compromised models. As for L1 on desktop, Google did announce exactly that [1], but TPM would be likely too weak for that, so maybe something like Intel ME would be used. But so far there's no evidence of them actually rolling anything like that out. So for now if you want hardware DRM on desktop you have to use Edge or native Windows 10 apps with PlayReady DRM. And about the APIs, streaming services do sometimes change up APIs, make old app versions stop working, etc., but often things work with no or minimal changes even years later. They do have to be careful not to break compatibility with all of their own apps across multiple platforms as well. [1] https://web.archive.org/web/20210819093936/https://widevine.com/news https://web.archive.org/web/20210819093936/https://widevine....
    - adityapatadia 5y ago
      Here is the plugin: https://github.com/cryptonek/widevine-l3-decryptor https://github.com/cryptonek/widevine-l3-decryptor
  - marcan_42 5y ago
    Widevine is completely broken ever since Nvidia Tegra devices were irreparably compromised due to a boot ROM bug. You can just pull the L1 key from any one of them, and Google can't mass revoke the entire device class since it would screw over a ton of legitimate users. (I don't know the details of how to dump the keys, I just know it's possible by definition given the security loss on that platform, and I'm sure some people have tooling for this somewhere)
    - nyuszika7h 5y ago
      Well, what they did to Nvidia Tegra devices is either downgrade them to L3, or revoke them and issue a new L1 key for them. OTA updates patched something, but a hardware flaw can't be patched fully with a software update. However, most people nowadays are simply exploiting phones and tablets with old vulnerable MSM chips, there are a lot more of those to choose from. Usually what Google does now is when someone publicly leaks a compromised device key, they revoke the unique key of that specific device but not the whole model. However, sometimes streaming services (especially Amazon, Netflix and Disney+) may still choose to blacklist an entire vulnerable model and limit it to SD playback.
- morpheuskafka 5y ago
  IIRC Kanopy just uses L3, for which there was an existing Chrome extension based leak. The key is necessarily in main memory for L3, it’s just a matter of finding it.
gnabgib 5y ago
Dupe from yesterday 399pts, 268 comments https://news.ycombinator.com/item?id=29702110 https://news.ycombinator.com/item?id=29702110
- fragmede 5y ago
  ish. The link to Github prods Microsoft to either take it down, or leave it up, and we'll have to see what they do. Content producers aren't going to be happy about this and are going to put pressure on Microsoft to do something about it, same as with youtube-dl.
  - gnabgib 5y ago
    Yesterday's article links to this github page too and includes a screen shot of the related repos (possibly because they don't expect them to survive). Plus it's linked several times in the HN discussion.
Crazyontap 5y ago
One of the best layman hacks to rip all these services is still using ffmpeg/sse with Xvfb. They can DRM and engineer all they want but nobody can stop me from recording what's playing on my screen :D
- benbristow 5y ago
  If you try and screenshot or use something like OBS on Windows you just get a black box on top of the media content. Is that not the case using that solution?
  - marcan_42 5y ago
    There is no protected media path on Linux. It always works there.
    - deleted 5y ago
      [deleted]
    - easton 5y ago
      Which is why you get the 480p/720p low bitrate version instead of the 4K one on Netflix/Disney+.
      - serf 5y ago
        no, it's the motivation, not the reason. the reason why linux users get lower bitrate versions of media is that companies with a bit too much power decided to try to abuse the entirety of the PC world in order to slow the efforts of a very few pirates. it's a stupid untenable unwinnable arms-race that only results in poorer user experience and less and less user-liberty and choice across the board in order to slightly inconvenience a few bad actors, not stop them. Meanwhile a 10 dollar video dongle setup and a pirated Windows copy will easily meet most DRM requirements and still allow for easy piracy. These efforts (DRM schemes) are useless and anti-human, and most research from the 90s until now indicates that DRM enforcement does little for profit except for those that sell DRM solutions -- and that piracy increases social effect of released media; generally aiding sales and profitability.
daveevad 5y ago
Apple uses Widevine for Apple TV content not Fairplay, maybe ever since they licensed Apple TV on non-Apple televisions?
- wtallis 5y ago
  Apple TV+ also lets you stream through a web browser, though that's their least-publicized delivery method.
  - ngngngng 5y ago
    The UI is also terrible. I always end up on the marketing page for a show and have to figure out how to be redirected to the page that actually lets me stream.
  - daveevad 5y ago
    I did not know that - thank you.
- Wowfunhappy 5y ago
  I think they use Widevine in Chrome but Fairplay in Safari? And presumably Fairplay if you’re using the official app on one of their platforms.
dmix 5y ago
I for one thank our piracy overlords who endlessly work to make every form of content (optionally) freely available in high quality. I pay for plenty of subscription services that finally figured out how to make content as easy and accessible as piracy but there will forever exist legitimate gaps where “just pay for it” is simply insufficient (geo being #1, silly copyright owners #2, etc etc). The other article mentions this dump is a result of a Discord dispute and we randos seem to be the winners. And who knows it might inspire others to get into the scene.
- dghughes 5y ago
  Amazon and Apple lure you in but many shows it seems need to be rented or bought. How much disposable income do these companies think the average Joe has to spend? the answer seems to be $10 to $20 to rent or "buy" movies. Which you never own a physical copy of. They seem to be out of touch with reality.
  - duxup 5y ago
    I find I have access to a ton of content for the cost of a couple cds and dvds. I like it. Content is mostly ephemeral for me. I don't want to manage a ton of files or physical media.
  - dmix 5y ago
    I stupidly “rented” a copy of Apollo 13 for $3.99 and being a long movie fell asleep halfway through. I came back to watch it a few days later and found the rental had “expired” in 2-3 days and was required to pay again to continue watching. Sometimes I think these people live in an alternate universe. last time I did that.
    - azinman2 5y ago
      And what happened in the VHS days?
      - archsurface 5y ago
benbristow 5y ago
Even before these tools doesn't really seem to affect the pirates. The rips on pirate sites (not that I've watched them!) are pretty flawless and they're out very quickly after the initial release to the streaming site.
- stordoff 5y ago
  AIUI, these (or similar) tools were used by some of the piracy groups, but never made public to avoid the keys being revoked.
  - Fnoord 5y ago
    You can release the tools without the keys. That way, anyone can get the tool, and anyone with a valid key can use the tool.
    - Thorrez 5y ago
      The content companies can look for differences in how the tools work compared to how a legitimate client works, and block any requests for content that are formatted the way the tools do it.
xyst 5y ago
Cloning these and saving for later. Knowing GH’s past (ie, youtube-dl), these won’t stay up for long.
- Wowfunhappy 5y ago
  Fyi, youtube-dl and yt-dlp are on Github, they were only down for a few weeks.
Aisen8010 5y ago
Any suggestions for downloading the playlists from Spotify?
- Jamie9912 5y ago
  For ripping the actual audio stream I used this on a 800+ song playlist, took over 24 hours but still worked: https://github.com/eviabs/downtify-premium https://github.com/eviabs/downtify-premium
  - nebula8804 5y ago
    Can you try ripping a Joe Rogan episode with your setup? His podcast introduces ads even if you pay and while yt-dlp worked for a while now they are encrypting with Widevine (for supposedly his podcast only). Here is a link to an episode to test: https://open.spotify.com/episode/0DsunsN5MGI0CWwvuaxZdt https://open.spotify.com/episode/0DsunsN5MGI0CWwvuaxZdt To date I have not found a way to rip this other than recording the episode on Desktop. The main use case for me is that when I am driving, I hate when it randomly stops the podcast to talk about some underwear brand and it is hard to skip and not cause an accident. :)
- bendauphinee 5y ago
  SidifySpotifyMusic. Good enough that I pay for a license.
  - nebula8804 5y ago
    Does this work for podcasts? Would you be able to try ripping a Joe Rogan episode with this app to test? They use widewine and so it breaks yt-dlp. They play ads even if you pay for a subscription. Here is an example link: https://open.spotify.com/episode/0DsunsN5MGI0CWwvuaxZdt https://open.spotify.com/episode/0DsunsN5MGI0CWwvuaxZdt
- yogeshimac 5y ago
  ZSpotify
mot0rola 5y ago
lazy web: do these not require an account to get content?
- dmix 5y ago
  Yes they do.
_august 5y ago
Why is it possible to pirate 4k content from these sites but not simply view 4k officially on my mac? (disney+ in particular)
- boomboomsubban 5y ago
  Presumably the piracy apps tell those sites you're using something like Windows XP and need a certain version of the file.
  - Thorrez 5y ago
    I think 4K is only available on smart TVs and game consoles. The piracy code probably tells the sites you're using one of them.
  - xenophonf 5y ago
    You don't have to presume anything. The source code is right there.
    - boomboomsubban 5y ago
      I don't think which user agent they fake is particularly interesting, the point is they fake it.
- zaxbeast 5y ago
  It's not pirating... you have to have an account, I believe,
  - kevin_thibedeau 5y ago
    It's an unauthorized copy.
    - zaxbeast 5y ago
      they can ban me, I guess ... if they don't want to receive payments.
ALittleLight 5y ago
I don't understand the point of these. Couldn't I get any content from a streaming service via streaming it and screen recording? Does this allow you to download the videos without an account?
- deleted 5y ago
  [deleted]
- xuki 5y ago
  It’s about getting the best quality copy. You also don’t have to wait hours for it to capture, which is important in the pirate scene (being the first to upload). > Does this allow you to download the videos without an account? No.
- nindalf 5y ago
  > screen recording I’m sure some tools work but the in-built one in macOS (QuickTime) doesn’t. I was trying to capture a couple of seconds of video but all I got was a black screen. I understand wanting to disable video capture but I’ve also noticed image capture being prevented in some cases.
- derekdahmer 5y ago
  You can’t screen record content being delivered over HDCP. Only <= 720p is generally allowed to be streamed without copyright protection.
  - deleted 5y ago
    [deleted]
deleted 5y ago
[deleted]
DennisP 5y ago
What is the CDM mentioned in this description? https://github.com/widevinedump/WV-AMZN-4K-RIPPER https://github.com/widevinedump/WV-AMZN-4K-RIPPER They mention you can email for the CDM and it's not free. Disney is the same.
- vimy 5y ago
  The key to decrypt the content.
  - DennisP 5y ago
    So they're really playing with fire then.
- kkirsche 5y ago
  Content Decryption Modules (CDM) are used to decrypt Encrypted Media Extensions (EME)
- shoghicp 5y ago
  There is one they "burned" here https://github.com/widevinedump/LenovoTB-X505X-L1-KEY https://github.com/widevinedump/LenovoTB-X505X-L1-KEY Just a keypair + certificate.
ladzoppelin 5y ago
The amazon app for Samsung TV's does not tell you if you already rented a movie or not, it just displays the price. Will someone here get this fixed? Its not worth even explaining why this is horrible. Edit: If it was included with Prime and not for rent it would display "resume" or "play from beginning".
liups 5y ago
I wonder(worry) that this dump is actually a key honeypot. May have people thinking: "I already have a <STREAM-SERVICE> account, but with this I could at least get 4k." They put their legitimate key in, and maybe it phones home the key before begining the download? This comment from a previous thread illuminates some concerning oversights concerning public repository etiquette: > I also noticed it provides part of the functionality with a .pyc file, without including the normal python source.[0] [0] https://news.ycombinator.com/item?id=29704610 https://news.ycombinator.com/item?id=29704610
shp0ngle 5y ago
I never understand what pushes people to download Netflix/Disney media and share it on torrent sites. Don't get me wrong, I am glad they do. But, what is the positive for them? The negatives (angry copyright lawyers from one of the richest corporations) outweighs the positives (some clout on 1337x or Usenet or wherever these guys dump it)
- Red_Leaves_Flyy 5y ago
  >I never understand what pushes people to download Netflix/Disney media and share it on torrent sites. The challenge, kindness, compassion and the joy of sharing all come to mind. I also wouldn’t be surprised if there aren’t a few state funded groups that do it for lulz.
  - EMIRELADERO 5y ago
    > The challenge, kindness, compassion and the joy of sharing all come to mind. I have been in some scene group chats and I can tell you that many "important" people there don't give a damn about the "spirit of sharing" and just do it for the fun of beating a challenge. They see the sharing of these tools/decryption keys as "throwing food scrapps to homeless people". Lots of ego-driven "I don't give a fuck about anyone" attitude in some groups.
- xboxnolifes 5y ago
  (At least) two reasons. First, once you already made your own personal copy, and you already have your torrenting strategy in place, adding another torrent is basically as easy as just dropping it into a folder. Second, exchanging content. You upload shows X, Y and Z since you have them and hopefully you can get access to A, B, and C from someone else who happens to have them. Though, this is more prominent in private trackers and risker in public ones.
- ravenstine 5y ago
  Probably the same reason people provide open source code for free at no monetary benefit to themselves (even when they probably should be charging money).
thrdbndndn 5y ago
Does anyone actually try these tools? Do they work?
boppo1 5y ago
Who has time to program something like this? To be this good at making software but not employed making it? Or is this teams working in their spare time?
- markovbot 5y ago
  what gives you the impression that the author of this software isn't employed?
  - deleted 5y ago
    [deleted]
  - jaredsohn 5y ago
    "not employed making it"
  - kyle_martin1 5y ago
    I think he’s implying that the investment of time must be so large to do something like this that it couldn’t just be a hobby.
- phist_mcgee 5y ago
  You could say the same about any skilled hobbyist. Some people just love the challenge, and don't care about financial reward.
diogenesjunior 5y ago
i have copies of every repo the user has uploaded (12 total) if you are looking for anything and it happens to be removed, email me at diogenesjunior@protonmail.com and i will happily provide a copy for free :)
princevegeta89 5y ago
The saturation in digital/streaming video is simply out of control now. I'm gonna buy Netflix, Amazon prime since it's free with prime anyway, and maybe just another one like Hulu on a subscription basis. But no, I'm not gonna throw my dollars on every little platform out there like Disney+, HBO, Vudu, Fandango, and other crappy services from other companies just because some content I needed exists only there. Guys, if we look closely this is basically all back to TV Channels all over again. So, no thank you. I'll keep pirating my content with a VPN.
- Underphil 5y ago
  What really bothers me is that if I watch a non-English film on Netflix or Amazon Prime, the subtitles are often garbage. Sometimes even English films have spelling mistakes and poor attempts to condense the dialogue. With piracy, I have a choice of multiple subtitle providers.
  - princevegeta89 5y ago
    Hmmm, haven't run into situations with bad subtitles on foreign films, I watched a few and they were decent. I thought there was good quality control. But I definitely agree on the absence of multiple choices and options when it comes to dialogue and subtitles
    - Underphil 5y ago
      Not that I've seen it, but I'm told the subtitles for Squid Game lost a lot of context in the translations.
      - princevegeta89 5y ago
        Are you talking about the dubbing? Or just subs? Dubbing was ..pure nonsense. Subs, I could definitely tell they're off.
avindroth 5y ago
I like open source, but I think society wanting things for free (and thinking they deserve things for free) can have adverse side effects.
KyeRussell 5y ago
I’d be happy to pay for content if there was a cohesive interface to actually consume it. Alas, at the moment that interface is Plex and the various ‘*arr’s.
ehnto 5y ago
What surprised me is how quickly it felt like the consensus went from "DRM is evil" to "Neat, Netflix!". Same thing with privacy and anonymity online. I have to imagine it's because the internet quickly filled with people not primed to be interested in those concerns and so they became popular in spite of the previous concerns. Less like the boiling of the frog metaphor and more like they started boiling a mouse and then threw a million frogs in, so the mouse didn't matter anymore.
- oefnak 5y ago
  I think for most people it was the fact that Netflix was the first app that was as convenient as popcorn time.
- heavyset_go 5y ago
  > I have to imagine it's because the internet quickly filled with people not primed to be interested in those concerns and so they became popular in spite of the previous concerns. It's because of a lot of PR and astroturfing.
whatever1 5y ago
DMCA takedown kind request in 3, 2, 1…
- b-star 5y ago
  Yup, done..
  - proctoration 5y ago
    Released over holidays - good move - td took longer
busia 5y ago
Bring back the video rental stores, with couple of bucks per film
kybernetikos 5y ago
I accept that Netflix and Disney are rental services. Google and amazon however "sell" films and series that can be accessed through their service. In my opinion users should have a legally protected right to download / backup any content that they buy that is not explicitly time limited.
manzu 5y ago
but how do I rip redbull.tv?
- indianmouse 5y ago

580 points by janekg 5y ago

I subscribe to all these services and I’m thankful these tools exist. Yesterday I was on an 8.5h plane ride and of course, all the movies I pre-downloaded on Disney+ refused to play because it kept wanting to connect to the internet first. Netflix refused to download anything because apparently I have stuff downloaded in too many devices. Which to me, they should provide an easy way to deauthorize the other devices, but not sure what that’s even an issue since I have 4 profiles. Apple TV has been pretty great so far without issues.

Transisto 5y ago

I tend to forget the 4-5 subscriptions I pay for, and where is which content, so I use streamio most of the time.

swyx 5y ago

it's now 404ing :( does anyone have a backup?

mixmastamyk 5y ago

Interesting, I think Kanopy uses widevine as well. How long will this last now that it has been posted to HN?

nyuszika7h 5y ago
The L1 device key they posted was already revoked earlier today. The tools themselves might continue to work for a while longer with an appropriate non-revoked key depending on how much services want to change up their APIs.
- scoopertrooper 5y ago
  I can't see them changing up their APIs in any meaningful way. It'd seem kind of pointless to me. At the end of the day, if you're exposing something on the internet, then it won't take a huge amount of time for people to reverse engineer how web clients interact with the server. Main game should be rotating the L1 keys. I don't know about L2 keys, but rotating L3 keys seems like a lost cause to me, some dude made a Chrome extension that can extract them. Some theorise that Microsoft's Pluton/TPM antics with Windows 11 are a ploy to bring L1-style keys to the desktop. https://www.extremetech.com/computing/317512-microsoft-pluton-chip-will-bring-xbox-like-security-to-windows-pcs https://www.extremetech.com/computing/317512-microsoft-pluto... https://www.anandtech.com/show/16269/microsoft-pluton-hardware-security-coming-to-our-cpus-amd-intel-qualcomm https://www.anandtech.com/show/16269/microsoft-pluton-hardwa...
  - nyuszika7h 5y ago
    You can't really "rotate" L1 keys without breaking HD playback on millions of old vulnerable devices and pissing off a ton of legitimate customers in the process. A hardware vulnerability can't be fixed with a software update. Instead, nowadays when a key is leaked usually Google just revokes the key of the unique device it was extracted from and not the entire model. But major streaming services often blacklist or limit playback quality on known compromised models. As for L1 on desktop, Google did announce exactly that [1], but TPM would be likely too weak for that, so maybe something like Intel ME would be used. But so far there's no evidence of them actually rolling anything like that out. So for now if you want hardware DRM on desktop you have to use Edge or native Windows 10 apps with PlayReady DRM. And about the APIs, streaming services do sometimes change up APIs, make old app versions stop working, etc., but often things work with no or minimal changes even years later. They do have to be careful not to break compatibility with all of their own apps across multiple platforms as well. [1] https://web.archive.org/web/20210819093936/https://widevine.com/news https://web.archive.org/web/20210819093936/https://widevine....
  - adityapatadia 5y ago
    Here is the plugin: https://github.com/cryptonek/widevine-l3-decryptor https://github.com/cryptonek/widevine-l3-decryptor
- marcan_42 5y ago
  Widevine is completely broken ever since Nvidia Tegra devices were irreparably compromised due to a boot ROM bug. You can just pull the L1 key from any one of them, and Google can't mass revoke the entire device class since it would screw over a ton of legitimate users. (I don't know the details of how to dump the keys, I just know it's possible by definition given the security loss on that platform, and I'm sure some people have tooling for this somewhere)
  - nyuszika7h 5y ago
    Well, what they did to Nvidia Tegra devices is either downgrade them to L3, or revoke them and issue a new L1 key for them. OTA updates patched something, but a hardware flaw can't be patched fully with a software update. However, most people nowadays are simply exploiting phones and tablets with old vulnerable MSM chips, there are a lot more of those to choose from. Usually what Google does now is when someone publicly leaks a compromised device key, they revoke the unique key of that specific device but not the whole model. However, sometimes streaming services (especially Amazon, Netflix and Disney+) may still choose to blacklist an entire vulnerable model and limit it to SD playback.
morpheuskafka 5y ago
IIRC Kanopy just uses L3, for which there was an existing Chrome extension based leak. The key is necessarily in main memory for L3, it’s just a matter of finding it.

gnabgib 5y ago

Dupe from yesterday 399pts, 268 comments https://news.ycombinator.com/item?id=29702110 https://news.ycombinator.com/item?id=29702110

fragmede 5y ago
ish. The link to Github prods Microsoft to either take it down, or leave it up, and we'll have to see what they do. Content producers aren't going to be happy about this and are going to put pressure on Microsoft to do something about it, same as with youtube-dl.
- gnabgib 5y ago
  Yesterday's article links to this github page too and includes a screen shot of the related repos (possibly because they don't expect them to survive). Plus it's linked several times in the HN discussion.

Crazyontap 5y ago

One of the best layman hacks to rip all these services is still using ffmpeg/sse with Xvfb. They can DRM and engineer all they want but nobody can stop me from recording what's playing on my screen :D

benbristow 5y ago
If you try and screenshot or use something like OBS on Windows you just get a black box on top of the media content. Is that not the case using that solution?
- marcan_42 5y ago
  There is no protected media path on Linux. It always works there.
  - deleted 5y ago
    [deleted]
  - easton 5y ago
    Which is why you get the 480p/720p low bitrate version instead of the 4K one on Netflix/Disney+.
    - serf 5y ago
      no, it's the motivation, not the reason. the reason why linux users get lower bitrate versions of media is that companies with a bit too much power decided to try to abuse the entirety of the PC world in order to slow the efforts of a very few pirates. it's a stupid untenable unwinnable arms-race that only results in poorer user experience and less and less user-liberty and choice across the board in order to slightly inconvenience a few bad actors, not stop them. Meanwhile a 10 dollar video dongle setup and a pirated Windows copy will easily meet most DRM requirements and still allow for easy piracy. These efforts (DRM schemes) are useless and anti-human, and most research from the 90s until now indicates that DRM enforcement does little for profit except for those that sell DRM solutions -- and that piracy increases social effect of released media; generally aiding sales and profitability.

daveevad 5y ago

Apple uses Widevine for Apple TV content not Fairplay, maybe ever since they licensed Apple TV on non-Apple televisions?

wtallis 5y ago
Apple TV+ also lets you stream through a web browser, though that's their least-publicized delivery method.
- ngngngng 5y ago
  The UI is also terrible. I always end up on the marketing page for a show and have to figure out how to be redirected to the page that actually lets me stream.
- daveevad 5y ago
  I did not know that - thank you.
Wowfunhappy 5y ago
I think they use Widevine in Chrome but Fairplay in Safari? And presumably Fairplay if you’re using the official app on one of their platforms.

dmix 5y ago

I for one thank our piracy overlords who endlessly work to make every form of content (optionally) freely available in high quality. I pay for plenty of subscription services that finally figured out how to make content as easy and accessible as piracy but there will forever exist legitimate gaps where “just pay for it” is simply insufficient (geo being #1, silly copyright owners #2, etc etc). The other article mentions this dump is a result of a Discord dispute and we randos seem to be the winners. And who knows it might inspire others to get into the scene.

dghughes 5y ago
Amazon and Apple lure you in but many shows it seems need to be rented or bought. How much disposable income do these companies think the average Joe has to spend? the answer seems to be $10 to $20 to rent or "buy" movies. Which you never own a physical copy of. They seem to be out of touch with reality.
- duxup 5y ago
  I find I have access to a ton of content for the cost of a couple cds and dvds. I like it. Content is mostly ephemeral for me. I don't want to manage a ton of files or physical media.
- dmix 5y ago
  I stupidly “rented” a copy of Apollo 13 for $3.99 and being a long movie fell asleep halfway through. I came back to watch it a few days later and found the rental had “expired” in 2-3 days and was required to pay again to continue watching. Sometimes I think these people live in an alternate universe. last time I did that.
  - azinman2 5y ago
    And what happened in the VHS days?
    - archsurface 5y ago

benbristow 5y ago

Even before these tools doesn't really seem to affect the pirates. The rips on pirate sites (not that I've watched them!) are pretty flawless and they're out very quickly after the initial release to the streaming site.

stordoff 5y ago
AIUI, these (or similar) tools were used by some of the piracy groups, but never made public to avoid the keys being revoked.
- Fnoord 5y ago
  You can release the tools without the keys. That way, anyone can get the tool, and anyone with a valid key can use the tool.
  - Thorrez 5y ago
    The content companies can look for differences in how the tools work compared to how a legitimate client works, and block any requests for content that are formatted the way the tools do it.

xyst 5y ago

Cloning these and saving for later. Knowing GH’s past (ie, youtube-dl), these won’t stay up for long.

Wowfunhappy 5y ago
Fyi, youtube-dl and yt-dlp are on Github, they were only down for a few weeks.

Aisen8010 5y ago

Any suggestions for downloading the playlists from Spotify?

Jamie9912 5y ago
For ripping the actual audio stream I used this on a 800+ song playlist, took over 24 hours but still worked: https://github.com/eviabs/downtify-premium https://github.com/eviabs/downtify-premium
- nebula8804 5y ago
  Can you try ripping a Joe Rogan episode with your setup? His podcast introduces ads even if you pay and while yt-dlp worked for a while now they are encrypting with Widevine (for supposedly his podcast only). Here is a link to an episode to test: https://open.spotify.com/episode/0DsunsN5MGI0CWwvuaxZdt https://open.spotify.com/episode/0DsunsN5MGI0CWwvuaxZdt To date I have not found a way to rip this other than recording the episode on Desktop. The main use case for me is that when I am driving, I hate when it randomly stops the podcast to talk about some underwear brand and it is hard to skip and not cause an accident. :)
bendauphinee 5y ago
SidifySpotifyMusic. Good enough that I pay for a license.
- nebula8804 5y ago
  Does this work for podcasts? Would you be able to try ripping a Joe Rogan episode with this app to test? They use widewine and so it breaks yt-dlp. They play ads even if you pay for a subscription. Here is an example link: https://open.spotify.com/episode/0DsunsN5MGI0CWwvuaxZdt https://open.spotify.com/episode/0DsunsN5MGI0CWwvuaxZdt
yogeshimac 5y ago
ZSpotify

mot0rola 5y ago

lazy web: do these not require an account to get content?

dmix 5y ago
Yes they do.

_august 5y ago

Why is it possible to pirate 4k content from these sites but not simply view 4k officially on my mac? (disney+ in particular)

boomboomsubban 5y ago
Presumably the piracy apps tell those sites you're using something like Windows XP and need a certain version of the file.
- Thorrez 5y ago
  I think 4K is only available on smart TVs and game consoles. The piracy code probably tells the sites you're using one of them.
- xenophonf 5y ago
  You don't have to presume anything. The source code is right there.
  - boomboomsubban 5y ago
    I don't think which user agent they fake is particularly interesting, the point is they fake it.
zaxbeast 5y ago
It's not pirating... you have to have an account, I believe,
- kevin_thibedeau 5y ago
  It's an unauthorized copy.
  - zaxbeast 5y ago
    they can ban me, I guess ... if they don't want to receive payments.

ALittleLight 5y ago

I don't understand the point of these. Couldn't I get any content from a streaming service via streaming it and screen recording? Does this allow you to download the videos without an account?

deleted 5y ago
[deleted]
xuki 5y ago
It’s about getting the best quality copy. You also don’t have to wait hours for it to capture, which is important in the pirate scene (being the first to upload). > Does this allow you to download the videos without an account? No.
nindalf 5y ago
> screen recording I’m sure some tools work but the in-built one in macOS (QuickTime) doesn’t. I was trying to capture a couple of seconds of video but all I got was a black screen. I understand wanting to disable video capture but I’ve also noticed image capture being prevented in some cases.
derekdahmer 5y ago
You can’t screen record content being delivered over HDCP. Only <= 720p is generally allowed to be streamed without copyright protection.
- deleted 5y ago
  [deleted]

deleted 5y ago

[deleted]

DennisP 5y ago

What is the CDM mentioned in this description? https://github.com/widevinedump/WV-AMZN-4K-RIPPER https://github.com/widevinedump/WV-AMZN-4K-RIPPER They mention you can email for the CDM and it's not free. Disney is the same.

vimy 5y ago
The key to decrypt the content.
- DennisP 5y ago
  So they're really playing with fire then.
kkirsche 5y ago
Content Decryption Modules (CDM) are used to decrypt Encrypted Media Extensions (EME)
shoghicp 5y ago
There is one they "burned" here https://github.com/widevinedump/LenovoTB-X505X-L1-KEY https://github.com/widevinedump/LenovoTB-X505X-L1-KEY Just a keypair + certificate.

ladzoppelin 5y ago

The amazon app for Samsung TV's does not tell you if you already rented a movie or not, it just displays the price. Will someone here get this fixed? Its not worth even explaining why this is horrible. Edit: If it was included with Prime and not for rent it would display "resume" or "play from beginning".

liups 5y ago

I wonder(worry) that this dump is actually a key honeypot. May have people thinking: "I already have a <STREAM-SERVICE> account, but with this I could at least get 4k." They put their legitimate key in, and maybe it phones home the key before begining the download? This comment from a previous thread illuminates some concerning oversights concerning public repository etiquette: > I also noticed it provides part of the functionality with a .pyc file, without including the normal python source.[0] [0] https://news.ycombinator.com/item?id=29704610 https://news.ycombinator.com/item?id=29704610

shp0ngle 5y ago

I never understand what pushes people to download Netflix/Disney media and share it on torrent sites. Don't get me wrong, I am glad they do. But, what is the positive for them? The negatives (angry copyright lawyers from one of the richest corporations) outweighs the positives (some clout on 1337x or Usenet or wherever these guys dump it)

Red_Leaves_Flyy 5y ago
>I never understand what pushes people to download Netflix/Disney media and share it on torrent sites. The challenge, kindness, compassion and the joy of sharing all come to mind. I also wouldn’t be surprised if there aren’t a few state funded groups that do it for lulz.
- EMIRELADERO 5y ago
  > The challenge, kindness, compassion and the joy of sharing all come to mind. I have been in some scene group chats and I can tell you that many "important" people there don't give a damn about the "spirit of sharing" and just do it for the fun of beating a challenge. They see the sharing of these tools/decryption keys as "throwing food scrapps to homeless people". Lots of ego-driven "I don't give a fuck about anyone" attitude in some groups.
xboxnolifes 5y ago
(At least) two reasons. First, once you already made your own personal copy, and you already have your torrenting strategy in place, adding another torrent is basically as easy as just dropping it into a folder. Second, exchanging content. You upload shows X, Y and Z since you have them and hopefully you can get access to A, B, and C from someone else who happens to have them. Though, this is more prominent in private trackers and risker in public ones.
ravenstine 5y ago
Probably the same reason people provide open source code for free at no monetary benefit to themselves (even when they probably should be charging money).

thrdbndndn 5y ago

Does anyone actually try these tools? Do they work?

boppo1 5y ago

Who has time to program something like this? To be this good at making software but not employed making it? Or is this teams working in their spare time?

markovbot 5y ago
what gives you the impression that the author of this software isn't employed?
- deleted 5y ago
  [deleted]
- jaredsohn 5y ago
  "not employed making it"
- kyle_martin1 5y ago
  I think he’s implying that the investment of time must be so large to do something like this that it couldn’t just be a hobby.
phist_mcgee 5y ago
You could say the same about any skilled hobbyist. Some people just love the challenge, and don't care about financial reward.

diogenesjunior 5y ago

i have copies of every repo the user has uploaded (12 total) if you are looking for anything and it happens to be removed, email me at diogenesjunior@protonmail.com and i will happily provide a copy for free :)

princevegeta89 5y ago

The saturation in digital/streaming video is simply out of control now. I'm gonna buy Netflix, Amazon prime since it's free with prime anyway, and maybe just another one like Hulu on a subscription basis. But no, I'm not gonna throw my dollars on every little platform out there like Disney+, HBO, Vudu, Fandango, and other crappy services from other companies just because some content I needed exists only there. Guys, if we look closely this is basically all back to TV Channels all over again. So, no thank you. I'll keep pirating my content with a VPN.

Underphil 5y ago
What really bothers me is that if I watch a non-English film on Netflix or Amazon Prime, the subtitles are often garbage. Sometimes even English films have spelling mistakes and poor attempts to condense the dialogue. With piracy, I have a choice of multiple subtitle providers.
- princevegeta89 5y ago
  Hmmm, haven't run into situations with bad subtitles on foreign films, I watched a few and they were decent. I thought there was good quality control. But I definitely agree on the absence of multiple choices and options when it comes to dialogue and subtitles
  - Underphil 5y ago
    Not that I've seen it, but I'm told the subtitles for Squid Game lost a lot of context in the translations.
    - princevegeta89 5y ago
      Are you talking about the dubbing? Or just subs? Dubbing was ..pure nonsense. Subs, I could definitely tell they're off.

avindroth 5y ago

I like open source, but I think society wanting things for free (and thinking they deserve things for free) can have adverse side effects.

KyeRussell 5y ago

I’d be happy to pay for content if there was a cohesive interface to actually consume it. Alas, at the moment that interface is Plex and the various ‘*arr’s.

ehnto 5y ago

What surprised me is how quickly it felt like the consensus went from "DRM is evil" to "Neat, Netflix!". Same thing with privacy and anonymity online. I have to imagine it's because the internet quickly filled with people not primed to be interested in those concerns and so they became popular in spite of the previous concerns. Less like the boiling of the frog metaphor and more like they started boiling a mouse and then threw a million frogs in, so the mouse didn't matter anymore.

oefnak 5y ago
I think for most people it was the fact that Netflix was the first app that was as convenient as popcorn time.
heavyset_go 5y ago
> I have to imagine it's because the internet quickly filled with people not primed to be interested in those concerns and so they became popular in spite of the previous concerns. It's because of a lot of PR and astroturfing.

whatever1 5y ago

DMCA takedown kind request in 3, 2, 1…

b-star 5y ago
Yup, done..
- proctoration 5y ago
  Released over holidays - good move - td took longer

busia 5y ago

Bring back the video rental stores, with couple of bucks per film

kybernetikos 5y ago

I accept that Netflix and Disney are rental services. Google and amazon however "sell" films and series that can be accessed through their service. In my opinion users should have a legally protected right to download / backup any content that they buy that is not explicitly time limited.

manzu 5y ago

but how do I rip redbull.tv?

indianmouse 5y ago