Google Widevine Content Decryption Module DMCA

I am missing a party in this discussion: The role of the github monoculture. Because all these repos are hosted by the same party, one lawyer writing one letter can cause global disruption.<p>Github did nothing wrong here. They got an important, maybe controlling share of the market by creating a great product. While they might have a monopoly, I see no abuse of it.<p>But that&#x27;s irrelevant for the rest of the world. The simple existance of the monoculture makes all of us vulnerable to attacks.

It was one thing when it was the RIAA that was coming for our repositories. Now that it is Google, I&#x27;m extremely sad and disappointed.<p>I think the time has come for there to be a repository hosting service that is based somewhere in Switzerland :)

Only Level 3, sadly, which means it can decrypt Standard Definition (480p) videos. This has been out for a while.<p>Some reputable people in the pirating industry have actually cracked Level 1, which means they can decrypt 4K! :-)

<i>In addition to this request, we have filed a separate Sensitive Data takedown request of this file: &#x2F;widevine-l3-decryptor as it contains the secret Widevine RSA private key, which was extracted from the Widevine CDM and can be used in other circumvention technologies</i><p>They are practically asking for Streisand Effect... if you distribute your key with the software, then whatever form it is in, I would not consider it &quot;private&quot; at all!

Repository mirror: <a href="https:&#x2F;&#x2F;archive.softwareheritage.org&#x2F;browse&#x2F;origin&#x2F;directory&#x2F;?origin_url=https:&#x2F;&#x2F;github.com&#x2F;tomer8007&#x2F;widevine-l3-decryptor" rel="nofollow">https:&#x2F;&#x2F;archive.softwareheritage.org&#x2F;browse&#x2F;origin&#x2F;directory...</a>

Trying to get Widevine going on iOS &#x2F; macOS has been a royal pain in the ass so far (crashes when you touch the lib while having a debugger attached, so you can&#x27;t even debug your own code unless you swap in a severely castrated development version that only works on the simulator) and Google guards access to the official libs and docs like it&#x27;s the precioussss.<p>To me this is just one of the many developer hostile steps I&#x27;ve seen. I understand they don&#x27;t want you to access illegal content too easily but honestly the only thing that could drive me back to Torrenting is the declining quality of content on Netflix &amp; co.

I honestly believe this is just a small component, which is a part of the long term strategy of the RIAA and others: a periodical check to test the waters to see where public opinion is at, to be able to guage if they can implement more dramatic and restrictive DRM mechanisms yet [1].<p>They are either 1) waiting for us to be too exhausted to notice&#x2F;care&#x2F;fight back, or 2) seeing whether they have to go further to &#x27;protect content creators&#x27; by lobbying for more draconian laws that allow for the use of new DRM strategies. It reminds me of reading about how Corporate personhood was invented to protect freed slaves [2], yet is now used as a way for business owners to avoid personal liability&#x2F;responsibility. One could even argue that Corporate personhoood is one of the most destructive forces that exists today; causing some of the worst crimes in modern history [3].<p>It&#x27;s important we continue to fight back and set a precedent for protecting users over corporations or governments.<p>[1] <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;The_Right_to_Read" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;The_Right_to_Read</a><p>[2] <a href="https:&#x2F;&#x2F;www.history.com&#x2F;news&#x2F;14th-amendment-corporate-personhood-made-corporations-into-people" rel="nofollow">https:&#x2F;&#x2F;www.history.com&#x2F;news&#x2F;14th-amendment-corporate-person...</a><p>[3] <a href="https:&#x2F;&#x2F;www.counterpunch.org&#x2F;2013&#x2F;02&#x2F;05&#x2F;corporate-personhood-and-the-culture-of-pathology&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.counterpunch.org&#x2F;2013&#x2F;02&#x2F;05&#x2F;corporate-personhood...</a>

Some self hosting options:<p>Gitea:<p><a href="https:&#x2F;&#x2F;gitea.io&#x2F;" rel="nofollow">https:&#x2F;&#x2F;gitea.io&#x2F;</a><p>sourcehut:<p><a href="https:&#x2F;&#x2F;sourcehut.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;sourcehut.org&#x2F;</a><p>Gogs:<p><a href="https:&#x2F;&#x2F;gogs.io&#x2F;" rel="nofollow">https:&#x2F;&#x2F;gogs.io&#x2F;</a><p>Gitlab:<p><a href="https:&#x2F;&#x2F;gitlab.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;gitlab.com&#x2F;</a>

Wherein, Google asserts a copyright on the API for their license system, the protobuf file. Maybe this file is more creative than the Java APIs?<p>Additionally, the Git repo contains several files that violate Google’s copyrights: Google license_protcol.proto (see Google copyright at the top of the file): &#x2F;widevine-l3-decryptor&#x2F;blob&#x2F;main&#x2F;license_protocol.proto

Isn&#x27;t DRM... Completely fucking pointless? I can go on The Pirate Bay and find 4K rips of all movies and shows I want. If DRM can&#x27;t prevent that, what&#x27;s the point?<p>All it does is infringe on our rights to be able to do what we want on our own devices. It&#x27;s crazy.

Google, you&#x27;re disappointing.<p>You&#x27;re not cool, and you definitely not good.<p>I hope the future moves on without you.

This might be a good explanation why my Philips 55POS9002 oled tv can no longer stream 4K with Netflix&#x2F;Prime&#x2F;YouTube. A Widevine certificate was revoked for some Philips TVs. Maybe the RSA key was leaked in the Philips firmware.

They should host the software in France, like VideoLan.<p><a href="https:&#x2F;&#x2F;www.videolan.org&#x2F;legal.html" rel="nofollow">https:&#x2F;&#x2F;www.videolan.org&#x2F;legal.html</a><p>&gt;&gt;&gt; Are libdvdcss and libaacs legal? libdvdcss is a library that can find and guess keys from a DVD in order to decrypt it. This method is authorized by a French law decision CE 10e et 9e sous­sect., 16 juillet 2008, n° 301843 on interoperability.<p>&gt;&gt;&gt; Patents and codec licenses. Neither French law nor European conventions recognize software as patentable (see French section below). Therefore, software patents licenses do not apply on VideoLAN software.

Looks like someone missed the most recent forks. There are still a number of repos not listed in the DMCA complaint that have the extension content: <a href="https:&#x2F;&#x2F;github.com&#x2F;tomer8007&#x2F;widevine-l3-decryptor&#x2F;network&#x2F;members" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;tomer8007&#x2F;widevine-l3-decryptor&#x2F;network&#x2F;m...</a>

Is this a leak? Was it previously publicly known? Will this allow me to watch netflix on my arm linux box like DeCSS allowed me to watch DVD&#x27;s in early 2000&#x27;s?

Today, Apple and Google have been exposed in anti-user shenanigans.<p>The future looks bleak.

Google says API’s can be copyrighted now. I thought the oracle case was ongoing:<p>&gt; <i>Additionally, the Git repo contains several files that violate Google’s copyrights: Google license_protcol.proto (see Google copyright at the top of the file): &#x2F;widevine-l3-</i>

Does this mean I have to update the MAFIAA.org website to add Google now?

Funny how people think anyone cares to hide this key after it is out now.<p>Leaked = known<p>Do they need to take action? Obvious but not because the key is out but because it would look bad if Google wouldn&#x27;t do anything.<p>Content providers might hesitate to do deals like this again.

I&#x27;m generally of the opinion that if a creator doesn&#x27;t want you to watch or listen to something, you shouldn&#x27;t watch or listen to it.<p>The solution to DRM is not to work around it, it is that everyone refuses to use or pay for it.

Say what you want about fossil[0], but having the issues be part of the repo would come in real handy in times like this.<p>0: <a href="https:&#x2F;&#x2F;fossil-scm.org" rel="nofollow">https:&#x2F;&#x2F;fossil-scm.org</a>

What countries are there that do not honor the DMCA? That would be a good place to host these types of software.

<a href="https:&#x2F;&#x2F;github.com&#x2F;github&#x2F;dmca&#x2F;pull&#x2F;8283" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;github&#x2F;dmca&#x2F;pull&#x2F;8283</a> added widevine decryptor to dmca idk if theyll take it down

If you don&#x27;t like DRM, just stop downloading DRM-encumbered content.

Github is an abusive Lawyer&#x27;s dream. One DMCA notice and they can DDOS thousands of volunteers work.<p>While Git itself is fairly decentralized, we need a user-friendly GUI and project management system.

After RIAA stunt corporations see that Github is weak. They are coming for your repos! I wish Microsoft would have stood up for the community, but for them it is all about profit.

The youtube-dl fiasco has given a bunch of lawyers the precedent (or perhaps idea) they needed to fight open source software. It’s a shame.

The keys they are trying to suppres can be found at many locations now, one of them is <a href="https:&#x2F;&#x2F;pastebin.com&#x2F;QxhukwBR" rel="nofollow">https:&#x2F;&#x2F;pastebin.com&#x2F;QxhukwBR</a>

At least in the past it seems like China doesn&#x27;t care about copyright or the DMCA. Why not host a repository there? There are a lot of ethical issues but if your goal is to avoid the DMCA, why not?

Really Google? Shame on you. We can&#x27;t trust our industry peers anymore than the RIAA and MPAA? Seriously?<p>Whatever happened to the Google that started &quot;chilling effects&quot; as an act of civil disobedience?

at least thanks to git a lot of people have a full local repo copies and can restore them online fast, maybe not in github, but anywhere else<p>btw, if would be nice if git would allow a salt be configured per repo for their hashes, and if needed to resalt whole repo; this would make commit bashed censor like github does impossible and expensive and unreliable if they need to hash all files

just gonna put this right here <a href="https:&#x2F;&#x2F;docs.ipfs.io&#x2F;how-to&#x2F;host-git-style-repo&#x2F;" rel="nofollow">https:&#x2F;&#x2F;docs.ipfs.io&#x2F;how-to&#x2F;host-git-style-repo&#x2F;</a>

so......... can any one here in clear terms explain how to use this.... that chrome only extension thing is hot right now but i read somewhere its windows only..

it is very clear what github is becoming if value open source as a developer find alternatives github.com could not any longer be trusted.<p>self host

Youtube on DRM next year then?

I&#x27;m happy to see bi-partisan support for breaking the FAANG companies up. Enough is enough.

RMS was right...youtube-dl, now this...and apple computer apps not working fiasco...etc...was the crazy communist guy not so crazy after all?

Just to quickly help the Streisand effect, this is the private key, extracted from [1]:<p>-----BEGIN PRIVATE KEY----- MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC10dxEGINZbF0nIoMtM8705Nqm6ZWdb72DqTdFJ+UzQIRIUS59lQkYLvdQp71767vz0dVlPTikHmiv dYHRc7Fo6JsmSUsGR3th+fU6d1Wt6cwpMTUXj&#x2F;qODmubDK&#x2F;ioVDW7wz9OFlSsCBvylOYp9v2+u&#x2F;VXwACnBXNxCDezjx4RKcqMFT31WTxqU9OM9J86ChMOW4bFA41aLAJ ozB+02xis7OV175XdQ5vkVXM9ys6ZoRF&#x2F;K6NXeHiwcZFtMKyphXAxqU7uGY2a16bC3TEG5&#x2F;km6Jru3Wxy4nKlDyUjWISwH4llWjdSi99r2c1fSCXlMCrW0CHoznn+22l YCKtYe8JAgMBAAECggEAGOPDJvFCHd43PFG9qlTyylR&#x2F;2CSWzigLRfhGsClfd24oDaxLVHav+YcIZRqpVkr1flGlyEeittjQ1OAdptoTGbzp7EpRQmlLqyRoHRpT+MxO Hf91+KVFk+fGdEG+3CPgKKQt34Y0uByTPCpy2i10b7F3Xnq0Sicq1vG33DhYT9A&#x2F;DRIjYr8Y0AVovq0VDjWqA1FW5OO9p7vky6e+PDMjSHucQ+uaLzVZSc7vWOh0tH5M 0GVk17YpBiB&#x2F;iTpw4zBUIcaneQX3eaIfSCDHK0SCD6IRF7kl+uORzvWqiWlGzpdG2B96uyP4hd3WoPcZntM79PKm4dAotdgmalbueFJfpwKBgQDUy0EyA9Fq0aPF4LID HqDPduIm4hEAZf6sQLd8Fe6ywM4p9KOEVx7YPaFxQHFSgIiWXswildPJl8Cg5cM2EyMU1tdn5xaR4VIDk8e2JEDfhPtaWskpJp2rU2wHvAXOeAES7UFMrkhKVqqVOdbo IhlLdcYp5KxiJ3mwINSSO94ShwKBgQDavJvF+c8AINfCaMocUX0knXz+xCwdP430GoPQCHa1rUj5bZ3qn3XMwSWa57J4x3pVhYmgJv4jpEK+LBULFezNLV5N4C7vH63a Zo4OF7IUedFBS5B508yAq7RiPhN2VOC8LRdDh5oqnFufjafF82y9d+&#x2F;czCrVIG43D+KO2j4F7wKBgDg&#x2F;HZWF0tYEYeDNGuCeOO19xBt5B&#x2F;tt+lo3pQhkl7qiIhyO8KXr jVilOcZAvXOMTA5LMnQ13ExeE2m0MdxaRJyeiUOKnrmisFYHuvNXM9qhQPtKIgABmA2QOG728SX5LHd&#x2F;RRJqwur7a42UQ00Krlr235F1Q2eSfaTjmKyqrHGDAoGAOTrd 2ueoZFUzfnciYlRj1L+r45B6JlDpmDOTx0tfm9sx26j1h1yfWqoyZ5w1kupGNLgSsSdimPqyR8WK3&#x2F;KlmW1EXkXIoeH8&#x2F;8aTZlaGzlqtCFN4ApgKyqOiN44cU3qTrkhx 7MY+7OUqB83tVpqBGfWWeYOltUud6qQqV8v8LFsCgYEAnOq+Ls83CaHIWCjpVfiWC+R7mqW+ql1OGtoaajtA4AzhXzX8HIXpYjupPBlXlQ1FFfPem6jwa1UTZf8CpIb8 pPULAN9ZRrxG8V+bvkZWVREPTZj7xPCwPaZHNKoAmi3Dbv7S5SEYDbBX&#x2F;NyPCLE4sj&#x2F;AgTPbUsUtaiw5TvrPsFE= -----END PRIVATE KEY-----<p>[1] <a href="https:&#x2F;&#x2F;archive.softwareheritage.org&#x2F;browse&#x2F;origin&#x2F;content&#x2F;?origin_url=https:&#x2F;&#x2F;github.com&#x2F;tomer8007&#x2F;widevine-l3-decryptor&amp;path=content_key_decryption.js" rel="nofollow">https:&#x2F;&#x2F;archive.softwareheritage.org&#x2F;browse&#x2F;origin&#x2F;content&#x2F;?...</a>

This inspired me to research and download Brave Browser. Thanks Streisand Effect! So nice to have a browser that doesn&#x27;t feel like bloatware