Secure token issue

[biezom]

Originally Posted by drbmn

http://atresdownloader.com/teadecrypt.php

if you look the flash within you'll see that the token is computed so:

private var _typeOfServerAccepted:String = "937a417fd8b8aaa672743035cd18f1d9b31c82f628c1600f" ;

_typeOfServer = TEA.decrypt(_typeOfServerAccepted,"0x0000");

"937a417fd8b8aaa672743035cd18f1d9b31c82f628c16 00f" as securetoken

"0x0000" as key.

not 100% sure how denobis found the 937a417xxx part.

ok thanks

[mybeststream]

Ok time to fix this, and seal the player, wait there ah and remember, ovcast_live_streaming token was dumb for a reason!

[spacechild]

Originally Posted by drbmn

http://atresdownloader.com/teadecrypt.php

if you look the flash within you'll see that the token is computed so:

private var _typeOfServerAccepted:String = "937a417fd8b8aaa672743035cd18f1d9b31c82f628c1600f" ;

_typeOfServer = TEA.decrypt(_typeOfServerAccepted,"0x0000");

"937a417fd8b8aaa672743035cd18f1d9b31c82f628c16 00f" as securetoken

"0x0000" as key.

not 100% sure how denobis found the 937a417xxx part.

Thanks for your help and suggestions!

[drbmn]

Originally Posted by mybeststream

Ok time to fix this, and seal the player, wait there ah and remember, ovcast_live_streaming token was dumb for a reason!

You failed the first time, you will fail again.

[mybeststream]

Ok, since TEA encryption is a pretty old standard, and if i start using AES with a dynamic key based on UTC on server and on player, are you sure that you can find it?

Originally Posted by drbmn

Are you stupid? i'm pretty sure if i can rip from Amazon i can rip your shitty SD Streams.

No my friend, im not stupid, and believe im better than you. Wait for it.

[drbmn]

Originally Posted by mybeststream

Ok, since TEA encryption is a pretty old standard, and if i start using AES with a dynamic key based on UTC on server and on player, are you sure that you can find it?



No my friend, im not stupid, and believe im better than you. Wait for it.

Will give it my damn best to crack your crap!

[troller12]

Hi,

datas you can find in AS part of the file.

      private var _typeOfServer:String;
      
      private var _typeOfServerAccepted:String = "937a417fd8b8aaa672743035cd18f1d9b31c82f628c1600f";
      
      private var _video:Video;
      
      private var _loading:Boolean = false;
      
      private var _afterLoading:Function = null;
      
      private var _typeOfSmoothStream:String = "165269f7b36c725e8f4a34008a7d1ffd2cd01ba60fab039323f3de76da42d305";
      
      public function RTMPMediaProvider(param1:Boolean = true)

---------
trait Qname(PrivateNamespace("com.longtailvideo.jwplayer.media:RTMPMediaProvider"),"_typeOfServerAccepted") slot slotid 0 type Qname(PackageNamespace(""),"String") value Utf8("937a417fd8b8aaa672743035cd18f1d9b31c82f628c1600f")
---------

            if(param1.info.secureToken != undefined)
            {
               _typeOfServer = TEA.decrypt(_typeOfServerAccepted,"0x0000");
               _loc6_ = TEA.decrypt(param1.info.secureToken,_typeOfServer);
               _connection.call("secureTokenResponse",null,_loc6_);
               ExternalInterface.call("console.log","Anti-Theft Player v.1.1 (info@rte.pm)");
---------
937a417fd8b8aaa672743035cd18f1d9b31c82f628c1600f
0x0000
= ovcast_live_streaming
---------

               _application = TEA.decrypt(_typeOfSmoothStream,"0x0020");
---------
165269f7b36c725e8f4a34008a7d1ffd2cd01ba60fab039323f3de76da42d305
0x0020
= rtmpe://l.mybeststream.xyz/r/
---------

greetz

[mybeststream]

Hmm hmm, yeah yeah...

Try now.

PS: Next time if someone crack it, the code will be obfuscated, and i'll put some entropy among the generation process.

[troller12]

Hi,

your streams are no more working now and player in browser loads endless. Other streams of deltatv are working.I get this... (can't post all values correctly and in one line in code tags below)

?‹e	w?g3G“?§™s;
f
€™Ä?¨

Nice is also that...so I think you wanted to send drbmn a message with that or was it a invitation to drbmn to come in private now? Just joking a little of course.

PLEASE, **** MY BIG HEAD ****, I TOLD YOU I'M BETTER THAN YOU!

Anyway so I can't test it if your streams are no more working.

greetz

[mybeststream]

Originally Posted by troller12

Hi,

your streams are no more working now and player in browser loads endless. Other streams of deltatv are working.I get this... (can't post all values correctly and in one line in code tags below)

?‹e	w?g3G“?§™s;
f
€™Ä?¨

Nice is also that...so I think you wanted to send drbmn a message with that or was it a invitation to drbmn to come in private now? Just joking a little of course.

PLEASE, **** MY BIG HEAD ****, I TOLD YOU I'M BETTER THAN YOU!

Anyway so I can't test it if your streams are no more working.

greetz

Yes they are working 100% now, I was finishing something, and yes that's a message for all who try to steal whats on my servers.