Mr. "Account Store online" just doesn't stop;

https://bitcointalk.org/index.php?topic=5248228.0

Couldn't add reply to the above post to warn others. Hopefully people check this sub-forum before losing more money to Mr. Account Store.

He is transparently clueless. Especially stupid: "so any script would have to run in the browser using Javascript".

Did he provide decryption keys for content that you specifically requested the keys for, not content that he selected? That is usually a pretty good method of proof, there isn't much more you can do.

There probably aren't that many non-private L1 private keys in circulation right now. That environment, combined with all of the recent revocations, also awakens the scammers.

What's the hilarious part? I could use a good laugh. Does he require that you send him a video of yourself while you're doing the macarena?

You're right, he's back;
https://bitcointalk.org/index.php?topic=5246539.0

He pays for a domain name for his scam site, and reusing it in his posts here makes it easily traceable to all of his prior scam attempts.

So, hopefully he won't he won't collect more victims here.

Is the best solution to delete the threads, rather than marking them and allowing initial victims to reply to the thread with details of the fraud?

When a scammer creates a new account, they still seem to repeat the offer in the same manner, often with the same e-email address as contained in the deleted post under the prior account.

Flagging the posts and allowing replies seems like it might be a better way to get the most information to potential future victims.

Deleting the scam posts almost helps the scammer "start fresh" under a new account.

In addition to what sandy-is-fine said, the most widely leaked device private key was entirely killed off this past week. For all services and platforms. It doesn't work for anything as of a few days ago.

It is unlikely that less widely leaked L1 private keys have trickled down to the sellers on this forum.

The same goes for the L3 cdm keys. It is unlikely that anyone who has extracted the rsa key from the browser cdm and also provisioned a device private key from it, would be selling on this forum.

It is not impossible, just unlikely. Require proof only in the form of content keys for content that was released 04/24 or later. Do not consider any video demo of some software in action as any kind of proof.

Thx!

Can you explain which 1080p profiles need to be deleted?

Is it encrypted with widevine?  Should be possible.  But the site seems to have no public content.

I understand.  So you never had a working and matching cdm dll and private key.

But that still leaves the question of what is the source of the private key in the first instance.

Compared to pywidevine sources, which contain a client_id blob and rsa private_key.  Not the same for amz.

But weren't the older cdm versions disabled around September 5th?

I was still able to use old cdm version on September 5th, it only stopped working (on all sites) on September 6th.

You were having key problems before September 5th.

Just out of curiosity, in normal operation (the web player), what is the source of these amz keys and how long do they last?

Are they sent as an eme api function, or is it more like a ssl certificate?  Are they ever exposed to the browser?

I got one from a guy on videohelp forum, but he couldn't guarantee how long it would last.  It didn't last.

He called it the "pssh protobuf header" and said that "it works with the pssh box init default kid" to setup the decryption.

If these keys are so fickle, it hardly seems worth the trouble unless you know how to get them in the first place.  If that is too hard, only those who know how to get them wlll ever be able to use this software for any length of time.

If someone knows better, correct me if I'm wrong.

That sucks.  Does any other program work for hulu?

It was working until today.

Can you give some idea of what sort of discount one should expect from the russians if proof of the GreenyTools scam is provided?

If the decryption plugin is installed for inputstream on kodi, is there temp output/buffer dumped to disk at all?

It is right there in his post, in exclamatory fashion.  He is only going to let 3 (!) people fall for it this time.
I don't how how to figure the odds of how many will be second timers.  Probably no limit.

Could someone get me up to speed on the current status of this tool?  Is there good and crappy versions, or old and new versions?

How to know how to get the non-crappy and non-old version of the tool?

If someone has reversed the network traffic of the hulu portion, that is all that I would care about.  The crypto stuff seems like too much work with constant encoding of raw files.

How can you tell that they have not been re-encoded from uncompressed form?  Those can look pretty good too.

If there is a new tool or new version of this tool that downloads/decrypts the native amz/nf files without any uncompressed step in between, it probably hasn't leaked yet and if it is closely held, it probably won't leak for awhile.

If I had the (old) leaked tool, I would log the network traffic in order to reverse engineer the native hulu download method. Has anyone who has the tool done that?