Secure token issue

(http://stream-recorder.com/forum/showthread.php?t=20170)

Re: Secure token issue

Quote:

Originally Posted by drbmn (Post 79195)

http://atresdownloader.com/teadecrypt.php

if you look the flash within you'll see that the token is computed so:

private var _typeOfServerAccepted:String = "937a417fd8b8aaa672743035cd18f1d9b31c82f628c1600f" ;

_typeOfServer = TEA.decrypt(_typeOfServerAccepted,"0x0000");

"937a417fd8b8aaa672743035cd18f1d9b31c82f628c16 00f" as securetoken

"0x0000" as key.

not 100% sure how denobis found the 937a417xxx part.

ok thanks

Re: Secure token issue

Ok time to fix this, and seal the player, wait there :) ah and remember, ovcast_live_streaming token was dumb for a reason! ;)

Re: Secure token issue

Quote:

Originally Posted by drbmn (Post 79195)

Thanks for your help and suggestions!

Re: Secure token issue

Quote:

Originally Posted by mybeststream (Post 79198)

Ok time to fix this, and seal the player, wait there :) ah and remember, ovcast_live_streaming token was dumb for a reason! ;)

You failed the first time, you will fail again. :D

Re: Secure token issue

Ok, since TEA encryption is a pretty old standard, and if i start using AES with a dynamic key based on UTC on server and on player, are you sure that you can find it?

Quote:

Originally Posted by drbmn (Post 79174)

Are you stupid? i'm pretty sure if i can rip from Amazon i can rip your shitty SD Streams. :D

No my friend, im not stupid, and believe im better than you. Wait for it.

Re: Secure token issue

Quote:

Originally Posted by mybeststream (Post 79202)

Ok, since TEA encryption is a pretty old standard, and if i start using AES with a dynamic key based on UTC on server and on player, are you sure that you can find it?

No my friend, im not stupid, and believe im better than you. Wait for it.

Will give it my damn best to crack your crap! :D

Re: Secure token issue

Hi,

datas you can find in AS part of the file.

Code:

      private var _typeOfServer:String;

      

      private var _typeOfServerAccepted:String = "937a417fd8b8aaa672743035cd18f1d9b31c82f628c1600f";

      

      private var _video:Video;

      

      private var _loading:Boolean = false;

      

      private var _afterLoading:Function = null;

      

      private var _typeOfSmoothStream:String = "165269f7b36c725e8f4a34008a7d1ffd2cd01ba60fab039323f3de76da42d305";

      

      public function RTMPMediaProvider(param1:Boolean = true)



---------

trait Qname(PrivateNamespace("com.longtailvideo.jwplayer.media:RTMPMediaProvider"),"_typeOfServerAccepted") slot slotid 0 type Qname(PackageNamespace(""),"String") value Utf8("937a417fd8b8aaa672743035cd18f1d9b31c82f628c1600f")

---------



            if(param1.info.secureToken != undefined)

            {

               _typeOfServer = TEA.decrypt(_typeOfServerAccepted,"0x0000");

               _loc6_ = TEA.decrypt(param1.info.secureToken,_typeOfServer);

               _connection.call("secureTokenResponse",null,_loc6_);

               ExternalInterface.call("console.log","Anti-Theft Player v.1.1 (info@rte.pm)");

---------

937a417fd8b8aaa672743035cd18f1d9b31c82f628c1600f

0x0000

= ovcast_live_streaming

---------



               _application = TEA.decrypt(_typeOfSmoothStream,"0x0020");

---------

165269f7b36c725e8f4a34008a7d1ffd2cd01ba60fab039323f3de76da42d305

0x0020

= rtmpe://l.mybeststream.xyz/r/

---------

greetz

Re: Secure token issue

Hmm hmm, yeah yeah...

Try now. ;)

PS: Next time if someone crack it, the code will be obfuscated, and i'll put some entropy among the generation process.

Re: Secure token issue

Hi,

your streams are no more working now and player in browser loads endless. :) Other streams of deltatv are working.I get this... (can't post all values correctly and in one line in code tags below)

Code:

?‹e        w?g3G“?§™s;

f

€™Ä?¨

Nice is also that...so I think you wanted to send drbmn a message with that or was it a invitation to drbmn to come in private now? ;) Just joking a little of course.

Code:

PLEASE, **** MY BIG HEAD ****, I TOLD YOU I'M BETTER THAN YOU!

Anyway so I can't test it if your streams are no more working.

greetz

Re: Secure token issue

Quote:

Originally Posted by troller12 (Post 79230)

Code:

?‹e        w?g3G“?§™s;

f

€™Ä?¨

Nice is also that...so I think you wanted to send drbmn a message with that or was it a invitation to drbmn to come in private now? ;) Just joking a little of course.

Code:

PLEASE, **** MY BIG HEAD ****, I TOLD YOU I'M BETTER THAN YOU!

Anyway so I can't test it if your streams are no more working.

greetz

Yes they are working 100% now, I was finishing something, and yes that's a message for all who try to steal whats on my servers.