View Single Post
  #3  
Old 04-21-2017, 12:41 AM
designatedroot designatedroot is offline
Junior Member
 
Join Date: Apr 2017
Posts: 2
designatedroot is on a distinguished road
Default

Re: Bypass ABC "Verify to watch" / Stream without signing in


Hi there,

could somebody please take care of @antrandn1989 and his post?

I also received a mail that @JonDough has posted a reply, but I cant find it on the forums...

So I just quote what he wrote (hope that's ok):

Quote:
---Quote (Originally by designatedroot)---
is there any way to stream/download "verify to watch" videos without signing in?
---End Quote---
Don't think so. US abc uses adobe services to verify provider auth. When the auth with adobe ("adobePassData") is successful, it passes data that is later used as a very long additional data parameter with the post request to the authorize.json url. It is a couple of hundred bytes long and contains various signatures and other data.

If the post request to authorize.json doesn't contain the correct adobePassData as a data parameter, it won't return a sessionKey at all.

Since the ts pieces and m3u8 aren't secured, if you independently obtain the 16 byte aes key (specific for each quality k, j, and so on) then you can probably edit the m3u8 and download the video. Some re-streaming sites used to host the keys but otherwise someone with provider auth would have to obtain them.
So a big thanks to @JonDough! Those re-streaming sites - could you link one?
Reply With Quote