undefined | Better HN

0 pointsKeplerBoy6mo ago0 comments

And it's an entirely useless effort. No idea how it is done but the internet is full 4k rips.

0 comments

They find devices that are easy to hack (and I mean rip and tear) and extract the decryption keys from each of them, from what I have heard cheap chinese tvs and set top boxes, they extract the keys from the chips (hardware hacking, heard some even use microscopes to read the keys by hand), and then use them to decrypt streams, I heard that they catch them pretty fast to they use like 1 device per season. This is why they use mostly stollen devices.

jcalvinowens6mo ago

The really shitty thing is that vulnerable devices get blacklisted en masse, so all legitimate users get stuck with 480p video content on streaming services. The Nexus 5 got this treatment, as I understand it, because it was too easy to extract the keys.

zelphirkalt6mo ago

Not a Netflix user here: Are you saying that paying customers get cut off from higher video quality, that they are possibly paying for, and pressured into buying new devices? That shit should be illegal!

jcalvinowens6mo ago

Yes, that's exactly what happens!

charcircuit6mo ago

It provides a good incentive for manufacturers to invest into security for their devices.

jcalvinowens6mo ago

No, it provides no incentive at all!

It's the users who suffer when this happens, not the manufacturers. The manufacturers couldn't care less, the money is already in the bank.

If the manufacturers were required to replace all the revoked devices at their cost, that would be a real incentive.

1 more reply

alerighi6mo ago

More easily in the past (I don't think if it's still true for 4K) you only needed an HDMI splitter to bypass HDCP copy protection.

jasomill6mo ago

Now you need both a buggy HDCP 1.4 splitter and an HDCP 2.1 to 1.4 converter.

13hunteo6mo ago

Interesting - do you have any sources to read further?

472828476mo ago

Search for widevine decrypt. You’ll find code and forums where at least some L3 (software) keys are publicly shared. For high resolution on some platforms, you need L1 keys, but as far as I understand the decryption process basically stays the same once you have a working key.

Random article: https://www.ismailzai.com/blog/picking-the-widevine-locks

Claimed to be L1 key leaks (probably all blacklisted by now): https://github.com/Mavrick102/WIDEVINE-CDM-L1-Giveaway

sodality26mo ago

You won't find a ton of up-to-date info that would let you do the same - the scene groups hold their methods closely specifically because of this cat-and-mouse game.

gpderetta6mo ago

The analog hole is real.

allan_s6mo ago

I was wondering how easy it is

I.e I know that hdmi stream can be encrypted so I guess for Netflix you can't juste have a "hdmi splitter"? Do you need to go as far as plugging yourself just before the lcd pixels ? And if so , is it the moment where its easier to have a high def camera pointed at your lcd screen with post processing?

bob10296mo ago

Breaking HDCP is a lot easier than breaking the other things. You don't have to attack the torment nexus directly. This is not the most ideal option but it is information theoretically correct assuming your capture rig is set up properly.

jcalvinowens6mo ago

Yeah. The HDCP1 master key was leaked over a decade ago, it's a joke compared to widevine. Encoding the raw input is very feasible on modern hardware.

piperswe6mo ago

You can only get a WEBRip that way, not a WEBDL, since you'll need to re-encode and introduce some generational loss. The gold standard for streaming piracy is stripping the DRM from the original compressed bitstream, remuxing it to mkv, and uploading that as-is for maximum quality.

charcircuit6mo ago

It would be harder to break HDCP and you wouldn't even get the original compressed media content. It's a worse idea.

j / k navigate · click thread line to collapse

0 comments

alex7o6mo ago

jcalvinowens6mo ago

zelphirkalt6mo ago

jcalvinowens6mo ago

Yes, that's exactly what happens!

charcircuit6mo ago

It provides a good incentive for manufacturers to invest into security for their devices.

jcalvinowens6mo ago

No, it provides no incentive at all!

It's the users who suffer when this happens, not the manufacturers. The manufacturers couldn't care less, the money is already in the bank.

If the manufacturers were required to replace all the revoked devices at their cost, that would be a real incentive.

1 more reply

alerighi6mo ago

More easily in the past (I don't think if it's still true for 4K) you only needed an HDMI splitter to bypass HDCP copy protection.

jasomill6mo ago

Now you need both a buggy HDCP 1.4 splitter and an HDCP 2.1 to 1.4 converter.

13hunteo6mo ago

Interesting - do you have any sources to read further?

472828476mo ago

Random article: https://www.ismailzai.com/blog/picking-the-widevine-locks

Claimed to be L1 key leaks (probably all blacklisted by now): https://github.com/Mavrick102/WIDEVINE-CDM-L1-Giveaway

sodality26mo ago

You won't find a ton of up-to-date info that would let you do the same - the scene groups hold their methods closely specifically because of this cat-and-mouse game.

gpderetta6mo ago

The analog hole is real.

allan_s6mo ago

I was wondering how easy it is

bob10296mo ago

jcalvinowens6mo ago

Yeah. The HDCP1 master key was leaked over a decade ago, it's a joke compared to widevine. Encoding the raw input is very feasible on modern hardware.

piperswe6mo ago

charcircuit6mo ago

It would be harder to break HDCP and you wouldn't even get the original compressed media content. It's a worse idea.

j / k navigate · click thread line to collapse