chaturbate.com: SecureToken problems

[InterdimensionalCow]

It can be assumed if a stream is passworded, the method of retrieving the stream likely requires some special encoding based on the password itself. Of course, if you have the password, it'd just be a matter of figuring out how the password would have to be applied/used. Then again, if they actually do encrypt based on the password, you'd need to know the algorithm...

Also, is there anything special I should be considering while I let RTMPDump download?

[oelk]

Nope. The password is needed to get access to the stream. The stream itself is likely not to be encoded (except rtmpe, which hasn't to do anything with the password).
I'm not sure about chaturbate, but I didn't know about passworded shows there either.

Until some days ago it was possible to record private and group shows using a little security gap. It seems, that it was closed recently. So if you asked me a week ago to record such shows, I would have said: Let's do it.
(Does anyone know about the direct access to live-origin? Would be nice to find out, that it's still possible.)

[Cbater]

Originally Posted by oelk

Until some days ago it was possible to record private and group shows using a little security gap.

Til yesterday evening. now we need a new skript

[phgonline]

Originally Posted by Cbater

Til yesterday evening. now we need a new skript

Yup, back to the old batch for pubs...

[KSV]

Do you really expected to go this on forever (capping the private/password/group shows from origin server bypassing all security restrictions)? this was a security hole on their end and their fault. when people started posting batch files all around the forums to exploit this they noticed it and recently closed it. now communication between edge and origin servers also requires some security parameters to be passed along with connect requests just as in case of edge serves. we have no access to this communication. so there isn't much anyone can do except guessing the correct sequence and value of those parameters.

obvious excerpts from log:

DEBUG: RTMP_ClientPacket, received: invoke 34 bytes
DEBUG: (object begin)
DEBUG: Property: <Name:            no-name, STRING:	nfo>
DEBUG: Property: <Name:            no-name, NUMBER:	0.00>
DEBUG: Property: NULL
DEBUG: Property: <Name:            no-name, STRING:	version_too_old>
DEBUG: (object end)
DEBUG: HandleInvoke, server invoking <nfo>

DEBUG: (object begin)
DEBUG: Property: <Name:              level, STRING:	error>
DEBUG: Property: <Name:               code, STRING:	NetStream.Play.Failed>
DEBUG: Property: <Name:        description, STRING:	security>
DEBUG: Property: <Name:           clientid, NUMBER:	1661556140.00>
DEBUG: (object end)

[eroyamam]

Hey KSV, or anyone else, before I tackle it, can the last script be modified to do only pw shows? Just wondering if its woth my time.
TIA.

[InterdimensionalCow]

I was just trying the RTMP bookmark on Chaturbate, but when I test it, I get Model Status Error. I ran it on a random different person, same error. I'm not sure why it stopped working today - might just be a fluke since their site has been wonky lately (while trying to find someone to test on, got a 500 internal error, even), but since the cams are technically running, I was curious of your insight (those of you with better knowledge than me).

I get the feeling they changed something about the site, though. You can still access the cameras currently, but the old javascript to compile this no longer works. It might be as simple as adjusting it, or as difficult as a required stream of data which isn't given or easily guessable. I don't know, since I'm not savvy enough.

[oelk]

I don't know which javascript script you're using, but for me everything works well as it did everyday.

If it still doesn't work I could take a look at it. PM me.

[InterdimensionalCow]

I'm using AmazingMatze's javascript:

Originally Posted by AmazingMatze

// I changed it a little bit. This one also retrieves the SwfUrl and the SwfVersion:

javascript:var prm=document.getElementById('movie').childNodes[6].value;prm=prm.replace(/=/g,"&").split("&");swfUrl=document.getElementsByTagName('object')[0].getAttribute('data');swfVers=swfUrl.replace("_",".").split(".");swfVers=swfVers[1];swfVers=swfVers.split("p");prompt('RTMPDumpCL','rtmpdump -v -r "rtmpe://'+prm[3]+'/live-edge" -a "live-edge" -f "WIN 11,5,502,146" -W "http://'+prm[23]+swfUrl+'" -p "http://'+prm[23]+'/'+prm[1]+'" -C S:'+prm[13]+' -C S:'+prm[1]+' -C S:'+swfVers[0]+'.'+swfVers[1]+' -C S:'+prm[25]+' -C S:'+prm[27]+' -y "playpath" -T "m9z#$dO0qe34Rxe@sMYxx%" -o "'+prm[1]+'.flv"');reload();

When I try it, I get Model status is error.

[oelk]

I don't get the model status error.
Are you using the most recent version of rtmpdump?