yt-dlc VS widevine-l3-decryptor

(Installation instructions are included in the documentation provided by both forks)

I) https://github.com/blackjack4494/yt-dlc

youtube-dlc is a fork of youtube-dl with the intention of getting features tested by the community merged in the tool faster

We love yt-dlp which is a youtube-dl fork based on the now inactive youtube-dlc. The main focus of the project is adding new features and patches while also keeping up to date with the original project.

ERROR: Channel Restricted; please report this issue on https://github.com/blackjack4494/yt-dlc . Make sure you are using the latest version; type youtube-dlc -U to update. Be sure to call youtube-dlc with the --verbose flag and include its complete output.

$ git init # initialize folder as git repo # add remotes to compare $ git remote add youtube-dl https://github.com/ytdl-org/youtube-dl $ git remote add yt-dlc https://github.com/blackjack4494/yt-dlc $ git remote add yt-dlp https://github.com/yt-dlp/yt-dlp $ git remote update # download info from remotes # show number of different commits $ git log youtube-dl/master..yt-dlc/master --oneline | wc -l # in yt-dlc, not in youtube-dl $ git log yt-dlc/master..youtube-dl/master --oneline | wc -l # in youtube-dl, not in yt-dlc $ git log yt-dlc/master..yt-dlp/master --oneline | wc -l $ git log yt-dlp/master..yt-dlc/master --oneline | wc -l $ git log youtube-dl/master..yt-dlp/master --oneline | wc -l $ git log yt-dlp/master..youtube-dl/master --oneline | wc -l # print list of different commits in a file $ git log youtube-dl/master..yt-dlc/master > orig-dlc.txt # in yt-dlc, not in youtube-dl $ git log yt-dlc/master..youtube-dl/master > dlc-orig.txt # in youtube-dl, not in yt-dlc $ git log yt-dlc/master..yt-dlp/master > dlc-dlp.txt $ git log yt-dlp/master..yt-dlc/master > dlp-dlc.txt $ git log youtube-dl/master..yt-dlp/master > orig-dlp.txt $ git log yt-dlp/master..youtube-dl/master > dlp-orig.txt

yt-dlc

Not who you responded to, but I use youtube-dlc. It's a command-line based utility with a ton of options for downloading YouTube videos.

https://github.com/blackjack4494/yt-dlc/commits/master

The previous update was July 25, and the one before that was December 2020.

While the July update dealt with the updater, having 2 days of small changes since December is not very active.

It's a part of the browser. It's not doing it with Javascript if that's what you're asking. Chrome includes a file with the name widevinecdm.dll or something like that on Windows. No one knows exactly what this file does because it is incredibly obfuscated https://github.com/tomer8007/widevine-l3-decryptor/wiki/Reve....

As for what Widevine actually does, it just uses a protobuf based protocol to request a decryption key from a license server. License request messages from the client have to be signed with a valid device private key, which are made difficult to extract but some occasionally leak.

Not just privately either, there have been tools circulating even on GitHub.

For a L3 example there's one repo [1] that's kind of still up but not really. Still enough to show that it happened. L1 bypass has also been on GitHub briefly. However these things get deleted rather fast for obvious reasons.

--

[1] https://github.com/tomer8007/widevine-l3-decryptor

Widevine has been broken at least a few times, including by recovering the private key from its white-box implementation: https://github.com/tomer8007/widevine-l3-decryptor/wiki/Reve.... Note that the write-up says it was the "old" version, but that's relative to the date of the write-up. Google overhauled Widevine after he broke it.

I'm less familiar with shielding data like this, but historically things like VMProtect and Themida were the standard for shielding programs. These offer a degree of resistance to automation, but a determined human will eventually figure them out, and then automation usually follows anyway. Syntia did this for VMProtect and Themida: https://www.usenix.org/system/files/conference/usenixsecurit....

For webrip you'll need an hdmi splitter that doesnt abide by HDCP to bypass protections into a capture card. For webdl theres this older github but it doesn't work anymore, im not sure if there's a currently working script and key online publicly https://github.com/tomer8007/widevine-l3-decryptor

There's code for the L3, but it doesn't work since end of may because the new RSA keys aren't public

https://github.com/tomer8007/widevine-l3-decryptor

Find the code in the forks, since it was DMCA'd

There's none for L1 and L2 though

So if for example I `git clone` ed this project back when it was live with the original files, and then `git pull ` now after the maintainer removed project files and all the relevant commits with it, the `git pull` command would just fail?

You can still bypass DRM if you know how or have to programms to do it (With widevine-l3-decryptor for example (The offical key(s) was/were revoked but some people still post keys))