How are you going to respond to widevine l3 decryptor's death at May 31st?

[codehound]

The old =true doesn't work anymore either with vpm

And we wonder why when everyone is talking about it on open forums.

And even the 93 year old lady from number 27 down the road has just dumped the keys from her old nokia 501 with aid from the posts of Video Help "How are you going to respond to widevine l3 decryptor's death at May 31st?" thread.

And extra information was gained from the very discreet underground thread "How To Dump L3 CDM From Android Device's (ONLY Talk About Dumping L3 CDMS) "

Its like a pantomime - you tell us we cant break it - we'll tell you how we've broken it and share it - you own the site where we publish the tools to exploit it (Github owned by M$) - you patch it again.

Google are daily issuing multiple dmca takedown notices to Git depositories / forks that store innocent tools, but are actually storing 90 % + of the world's ripped content on Google Drive. Or is this the reason thousands of google drive account holders have recently been hacked ? To the extent they have had to introduce 2 factor authentication. To kill their own monster like the blitzkrieg and the twin towers ? Go figure.

smh

[moni]

I would like to politely ask the community if someone has come with solution regarding Amazon Prime.
I have now my own pair of keys WHICH I WON'T SHARE FOR THE WORLD - DON'T ASK OR PM ME!!! which work for almost all the sites.
I was using wks-keys and widevine-keys for Amazon Primerr with no success though.
Thanks in advance.

Google are daily issuing multiple dmca takedown notices to Git depositories / forks that store innocent tools, but are actually storing 90 % + of the world's ripped content on Google Drive. Or is this the reason thousands of google drive account holders have recently been hacked ? To the extent they have had to introduce 2 factor authentication. To kill their own monster like the blitzkrieg and the twin towers ? Go figure.

smh

If you see my similar message you'll wholeheartedly agree with me. I was telling the community the same thing!!! Everybody laughed and ridiculed me then.
Where are they now I must ask...

[darkw4v3]

I'd love a lower key venue, but the people already there don't want new people added to the mix.

Even when you do manage to get in nobody shares anything with you.

The really experienced ones hoard their knowledge for themselves and their tight inner circle.

smh

[moni]

I'd love a lower key venue, but the people already there don't want new people added to the mix.

Even when you do manage to get in nobody shares anything with you.

The really experienced ones hoard their knowledge for themselves and their tight inner circle.

smh

The reason why is already explained.
Google is revoking as much CDM keys as they can get in Github /which is their site as well!!!/
So it is useless to share YOUR CDM keys with someone because chances that your private obtained keys to appear in some innocent keygrabbing utility is more than average.
Then the inevitably things happens - your private keys get revoked and your Android devices becomes unusable.
That's the reason for people not sharing their goods.

[ali2022]

I'd love a lower key venue, but the people already there don't want new people added to the mix.

Even when you do manage to get in nobody shares anything with you.

The really experienced ones hoard their knowledge for themselves and their tight inner circle.

smh

Share = Revoked
So you have to rely on yourself, to learn and not become too lazy

[darkw4v3]

I'd love a lower key venue, but the people already there don't want new people added to the mix.

Even when you do manage to get in nobody shares anything with you.

The really experienced ones hoard their knowledge for themselves and their tight inner circle.

smh

The reason why is already explained.
Google is revoking as much CDM keys as they can get in Github /which is their site as well!!!/
So it is useless to share YOUR CDM keys with someone because chances that your private obtained keys to appear in some innocent keygrabbing utility is more than average.
Then the inevitably things happens - your private keys get revoked and your Android devices becomes unusable.
That's the reason for people not sharing their goods.

Umm, I'm not talking about sharing CDMs.

[darkw4v3]

I'd love a lower key venue, but the people already there don't want new people added to the mix.

Even when you do manage to get in nobody shares anything with you.

The really experienced ones hoard their knowledge for themselves and their tight inner circle.

smh

Share = Revoked
So you have to rely on yourself, to learn and not become too lazy

Again, I'm not talking about sharing CDMs or keys.

[Fjullekulle]

Anyone who can tell me the right header to get keys from Paramonunt+ with https://getwvkeys.********.com/ ?

I have right PSSH and License but it always say "WRONG HEADER" or "LICENSE DENIED".

[[ss]vegeta]

Anyone who can tell me the right header to get keys from Paramonunt+ with https://getwvkeys.********.com/ ?

I have right PSSH and License but it always say "WRONG HEADER" or "LICENSE DENIED".

Movie link:

https://www.paramountplus.com/movies/transformers-age-of-extinction

License url:

https://cbsi.live.ott.irdeto.com/widevine/getlicense?CrmId=cbsi&AccountId=cbsi&SubContentType=Default&ContentId=BzNnp6UpAQvTAlTdIrfO26aZoA9sxwTh

PSSH:

AAAAWHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADgIARIQZwUbZlnNRuO+zeWsE+xyPCIgQnpObnA2VXBBUXZUQWxUZElyZk8yNmFab0E5c3h3VGg4AQ==

Headers:

authorization: Bearer eyJhbGciOiJIUzI1NiIsImtpZC[REDACTED_FOR_SAFETY_REASONS1NmY3NjZiNiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyMjgxNTQzNl9VUyIsImVudCI6W3siYmlkIjoiQWxsQWNjZXNzTWFpbiIsImVwaWQiOjh9XSwiaWF0[REDACTED_FOR_SAFETY_REASONS]kiOiI2MzdlOWYxMC1mNDBiLTQyZWItOTM4Zi0wN2FhNGI4YTMwMWUifQ.J7CwETg72gKUDDB4MBWZLisZKpt_zElgraNDg5E_tDI
content-length: "4226"
origin: https://www.paramountplus.com
referer: https://www.paramountplus.com/
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.71 Safari/537.36

Keys:

67051b6659cd46e3becde5ac13ec723c:dda07bf349aee34b5401ee8c8a3cbacd

[Fjullekulle]

Anyone who can tell me the right header to get keys from Paramonunt+ with https://getwvkeys.********.com/ ?

I have right PSSH and License but it always say "WRONG HEADER" or "LICENSE DENIED".

Movie link:

https://www.paramountplus.com/movies/transformers-age-of-extinction

License url:

https://cbsi.live.ott.irdeto.com/widevine/getlicense?CrmId=cbsi&AccountId=cbsi&SubContentType=Default&ContentId=BzNnp6UpAQvTAlTdIrfO26aZoA9sxwTh

PSSH:

AAAAWHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADgIARIQZwUbZlnNRuO+zeWsE+xyPCIgQnpObnA2VXBBUXZUQWxUZElyZk8yNmFab0E5c3h3VGg4AQ==

Headers:

authorization: Bearer eyJhbGciOiJIUzI1NiIsImtpZC[REDACTED_FOR_SAFETY_REASONS1NmY3NjZiNiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyMjgxNTQzNl9VUyIsImVudCI6W3siYmlkIjoiQWxsQWNjZXNzTWFpbiIsImVwaWQiOjh9XSwiaWF0[REDACTED_FOR_SAFETY_REASONS]kiOiI2MzdlOWYxMC1mNDBiLTQyZWItOTM4Zi0wN2FhNGI4YTMwMWUifQ.J7CwETg72gKUDDB4MBWZLisZKpt_zElgraNDg5E_tDI
content-length: "4226"
origin: https://www.paramountplus.com
referer: https://www.paramountplus.com/
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.71 Safari/537.36

Keys:

67051b6659cd46e3becde5ac13ec723c:dda07bf349aee34b5401ee8c8a3cbacd

Hm. Not working with Ghost´s site.

Must I have some proxy or what?

[[ss]vegeta]

Hm. Not working with Ghost´s site.

Actually, I wouldn't reply to you if I didn't try this on ghost's site. I got the keys from ghost's site.
It works without proxy.
If you try it with everything same except you use your own authorization (because mine is redacted), you'll see it works.
You are doing something wrong, trace your steps carefully.

[darkw4v3]

I would like to politely ask the community if someone has come with solution regarding Amazon Prime.
I was using wks-keys and widevine-keys for Amazon Primerr with no success though.
Thanks in advance.

Nobody is going to tell you. I've been barking up this particular tree for a while.

That and pcock are the only sites I can't get to work. The people who actually do know aren't going to share how to do it.

This was the entire point of my other post.

[Fjullekulle]

Hm. Not working with Ghost´s site.

Actually, I wouldn't reply to you if I didn't try this on ghost's site. I got the keys from ghost's site.
It works without proxy.
If you try it with everything same except you use your own authorization (because mine is redacted), you'll see it works.
You are doing something wrong, trace your steps carefully.

Hm. Only get "WRONG BODY/HEADER".

I will check it out later.

[RedPenguin]

I would like to politely ask the community if someone has come with solution regarding Amazon Prime.
I was using wks-keys and widevine-keys for Amazon Primerr with no success though.
Thanks in advance.

Nobody is going to tell you. I've been barking up this particular tree for a while.

That and pcock are the only sites I can't get to work. The people who actually do know aren't going to share how to do it.

This was the entire point of my other post.

Preach it man! lol

I tried myself a few times and got no where at all.

Even if you become very friendly with folks, that still doesn't mean you will be luckily enough to get any info.

[Fjullekulle]

Hm. Not working with Ghost´s site.

Actually, I wouldn't reply to you if I didn't try this on ghost's site. I got the keys from ghost's site.
It works without proxy.
If you try it with everything same except you use your own authorization (because mine is redacted), you'll see it works.
You are doing something wrong, trace your steps carefully.

Hm. The only answer I got is;

Error 404:<br>{"code":130001,"message":"License denied. There were no valid internal or external entitlements for the user:

[lomero]

all people here ask/want key but no one knows how to "listen" to the words of ss_vegeta ...
he explained the method well, in his post#1420.
what you need is just a fresh authorization, that of the post has expired.

[Fjullekulle]

all people here ask/want key but no one knows how to "listen" to the words of ss_vegeta ...
he explained the method well, in his post#1420.
what you need is just a fresh authorization, that of the post has expired.

I have tried with 3 movies from Param+ now and every time it say the same (even with fresh authorization);
Error 404:<br>{"code":130001,"message":"License denied. There were no valid internal or external entitlements for the user:

[[ss]vegeta]

I have tried with 3 movies now and every time it say the same (even with fresh authorization);
Error 404:<br>{"code":130001,"message":"License denied. There were no valid internal or external entitlements for the user:

I still think you are doing something wrong.
There's a low chance that something was "done" to your account. Do you have a friend with an account? Ask him if he can get keys.
Could you record yourself with OBS or something and show us what you are doing?
You might be concerned about your privacy, so, I'll give you my Discord and send me the video there.

[codehound]

Are you using your own appendage to the lic url ?

[Fjullekulle]

Are you using your own appendage to the lic url ?

I use the lic url I get from the movie; https://cbsi.live.ott.irdeto.com/widevine/getlicense?CrmId=cbsi&AccountId=cbsi&SubCont...************** (with the contentID)

[EatThis]

I don't really think certain 'tricks' are not working anymore because is being discussed in open forums. The moment someone made a vunerability available and easy to access to anyone, wether is a security reseracher or meant for piracy reasons, those top and old streaming services start taking actions as soon as possible to prevent people from taking advantage of them. So is not shocking to see changes or adjustments shortly after. Streaming services also know the risks involved when they decide to put the media available to Widevine L3, many seem to have the mentality of 'if it ain't broke, don't fix' but when shit hits the fan harder they still take precautions, as happened with Netflix. Amazon Prime seem to have taken precautions a very long time ago, if anything was achieved recently and now does not work, (in my opinion) is more of a small loophole until they found out.

The only way to prevent it completely hidden is to keep it to yourself, you can't count on a 'private group' of people to consistently keep it private. Lol, not going to work like that all the time. Plus the users in this forum are just learning and getting the bare minimum, the crap that literally happens before your eyes, is not even a secret, the code used to interact with the widevine cdm has been out in the open for years, its only now that someone has made it available to everyone to complete a missing piece on the set. The changes began to take place at that point. It can be agreed that more noise will probably speed up taking actions sooner, but changes are bound to happen sooner or later. If you are curious, learning and working on your own, ie not waiting or relying on someone else's work to happen, I'd say you can probably not have any problems at all regardless of the changes that happens, you will find your way around things eventually.

[EatThis]

Are you using your own appendage to the lic url ?

I use the lic url I get from the movie; https://cbsi.live.ott.irdeto.com/widevine/getlicense?CrmId=cbsi&AccountId=cbsi&SubCont...************** (with the contentID)

P+ is working fine everywhere. You will want to double check all the information you're using.

I can only think of one scenario that may be causing that here and is if you are using the Paramount+ on Latin America, I think getwvkeys is based on the US. If I remember correctly content ID in Latin America is different than the US version even if is the same TV Show/Movie. Many license requests are geo blocked. So maybe your token and content is is generated from the LA service but getwvkeys is requesting a license as if the service was in the US.

If not that, as said before careful copy everything. URL, PSSH and token.

[ElCap]

Has anyone got Stan (AU) working?

Episode Link:

https://play.stan.com.au/programs/3195164/play

License url:

https://lic.drmtoday.com/license-proxy-widevine/cenc/

PSSH:

AAAAMnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAABISEBIFTD2gCkIllfOkIXNrA50=

Headers:

Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Content-Length: "5357"
dt-custom-data: [REDACTED]
Origin: https://play.stan.com.au
Referer: https://play.stan.com.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Sec-GPC: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.71 Safari/537.36

Using NotAGhosts site, i keep getting the response

Error
wrong body content/unsupported

Ive tried removing some of the headers but i always get the same response.

[[ss]vegeta]

License url:

https://lic.drmtoday.com/license-proxy-widevine/cenc/

If it's not a json problem or similar, try changing this to

https://lic.drmtoday.com/license-proxy-widevine/cenc/?specConform=true

[naim2007]

License url:

https://lic.drmtoday.com/license-proxy-widevine/cenc/

If it's not a json problem or similar, try changing this to

https://lic.drmtoday.com/license-proxy-widevine/cenc/?specConform=true

I think drm today is patched "?specConform=true" exploit
by adding some signatures to the license reguest

[ell0]

....

[[ss]vegeta]

Can this be deciphered?

No, it can't.
Especially when you don't provide any other info, like, where you got this code, what are you trying to do, where are you trying etc.

[ell0]

...

[ell0]

.....

[louph]

I have read all of this thread and others, but am still having difficulty getting keys from the RTE Player using https://getwvkeys.********.com/

As an example, if I try:

https://www.rte.ie/player/movie/camera-tripod-bicycle-e1/247795240407


PSSH:

AAAAXHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADwIARIQC82TNRufUSi591plfsmmzBoIdXNwLWNlbmMiGEM4MlROUnVmVVNpNTkxcGxmc21tekE9PSoAMgA=

License:

https://widevine.entitlement.eu.theplatform.com/wv/web/ModularDrm?token=eyJhbGciOiJSUzUxMiJ9.eyJzdWIiOiJydGUtcHJkLXByZC10cnQvYW5vbnltb3VzX25ncnBfcGxheWVyQHJ0ZS5pZSIsImlzcyI6IjEiLCJleHAiOjE2NDIxNzc1MDIsImlhdCI6MTY0MjA5MTEwMjI3NywianRpIjoiODhkYzk4NzQtZTU2Yy00ODIwLWFkYTctOWI4OGQ5MmQ5NzI2IiwiZGlkIjoicnRlLXByZC1wcmQtdHJ0IiwidW5tIjoiYW5vbnltb3VzX25ncnBfcGxheWVyQHJ0ZS5pZSIsImN0eCI6IntcInVzZXJOYW1lXCI6XCJhbm9ueW1vdXNfbmdycF9wbGF5ZXJAcnRlLmllXCJ9XG4iLCJvaWQiOm51bGx9.jDAwTFDRSYSubeaqB5lQD5hje_ptHIj8KDMOE9wClfaFy7bbPF0G___sXAlAdY_xa_v-l6YdzbFhQ5jIntnGYYwlkS95rjKYeVbFJJPk6I-KL01O795N521DfdSG3tbPhw9hqYnD8kC8SSUbY31WB6wk4pDjTDy9lpy8dUp-bm-kDA7p2zoXMsK_KPtDuynReyqLgGpG4NU76kUh1GZSpPEvtBtY5nT7Uivs-7DtWLTy1QAqT4RnjtoFfLRn5SdkAGOnpfSAOueN0jBUYRs9Ra2Y3CTiHXXJg7C_bIuIhnlJOBBCwik15dx3MbRs8fJ4iNmScVOt8sI0xTzxbvNbyA&account=http://access.auth.theplatform.com/data/Account/2700894001&form=json&schema=1.0

Headers:

Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Content-Length: "5719"
content-type: text/plain;charset=UTF-8
Host: widevine.entitlement.eu.theplatform.com
Origin: https://www.rte.ie
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.71 Safari/537.36

I get the error:
"wrong body content/unsupported"

Any ideas where I'm going wrong?

You may need an Irish IP address to try the link above.