dmca/2022-01-07-mpa.md в fb29a370d0fd6f32a70a1d9441a7d40092dac45b

17 KiB

Исходник Ответственный История

Before disabling any content in relation to this takedown notice, GitHub

contacted the owners of the affected repositories to give them an opportunity to make changes.
provided information on how to submit a DMCA Counter Notice.
offered to connect the owners of the affected repositories with legal resources as part of our commitment to standing up for developers.

To learn about when and why GitHub may process some notices this way, please visit our README.

Note: Because some of the reported networks that contained the allegedly infringing content were larger than one hundred (100) repositories, and the submitter alleged that all or most of those forks were infringing to the same extent as the parent repositories, GitHub processed the takedown notice against the entire network of 934 repositories, inclusive of the parent repositories.

Dear GitHub,

We’re writing to call your attention to, and ask your assistance with, exploits of the Digital Rights Management software Widevine that are being hosted on and distributed from repositories on your platform. In short, the poster has written scripts to circumvent DRM on multiple streaming platforms, including Disney+, Amazon Prime, Netflix, and others. These scripts allow users to rip (download) streams directly to their devices, and, then, distribute them on the internet. This is as clear a violation of the DMCA’s anti-circumvention provisions as we’ve seen (17 USC 1201 et seq.), and the result is infringement of our Member Studios’ (and others’) copyrights, by unauthorized reproduction, distribution, and/or public performance. Accordingly, we’ve alerted the owner of Widevine (Google) to this issue, and also requested GitHub remove the repositories containing the following scripts which were removed:

Netflix: [invalid]/NETFLIX-DL-6.1.0, [invalid]/Netflix-4K-Script, [invalid]/Netflix-videos-downloader
Paramount+: [invalid]/Paramount-Plus-4k-Downloader
Disney+: [invalid]/DISNEY-4K-SCRIPT
Google Play: [invalid]/Gplay-4k-Downloader

Widevine is proprietary software that prevents stream ripping, and the scripts circumvented that by exploiting a vulnerability to allow stream ripping including as specifically listed as follows and as evidenced by the poster’s statements of the scripts’ purpose and operation:

DISNEY-4K-SCRIPT
disneyplus.py is the script that calls the decryption module
pywidevine/decrypt/wvdecrypt.py is the script used to circumvent the DRM
pywidevine/cdm/cdm.py and pywidevine/cdm/deviceconfig.py are used to configure the device and key information needed to decrypt the content

Gplay-4k-Downloader
movie.py is the script that calls the decryption module
pywidevine/decrypt/wvdecrypt.py is the script used to circumvent the DRM
pywidevine/cdm/cdm.py and pywidevine/cdm/deviceconfig.py are used to configure the device and key information needed to decrypt the content

Netflix-4K-Script
netflix.py is the main script
pywidevine/clients/netflix/client.py, pywidevine/clients/netflix/config.py, and pywidevine/clients/netflix/profiles.py are used to configure the device and key information needed to decrypt the content
Note that pywidevine/clients/netflix/config.py lists 3 actual Netflix accounts with their usernames and passwords
pywidevine/downloader/wvdownloader.py is the script that calls the decryption module
pywidevine/decrypt/wvdecrypt.py is the script used to circumvent the DRM

NETFLIX-DL-6.1.0
netflix.py is the main script
services/netflix.py is the script that calls the decryption module
pywidevine/decrypt/wvdecryptcustom.py is the script used to circumvent the DRM
pywidevine/cdm/cdm.py and pywidevine/cdm/deviceconfig.py are used to configure the device and key information needed to decrypt the content

Netflix-videos-downloader
NFripper.py is the main script
services/netflix.py is the script that calls the decryption module
pywidevine/decrypt/wvdecryptcustom.py is the script used to circumvent the DRM
pywidevine/cdm/cdm.py and pywidevine/cdm/deviceconfig.py are used to configure the device and key information needed to decrypt the content

Paramount-Plus-4k
paramountplus.py is the main script
pywidevine/clients/paramountplus/config.py and pywidevine/clients/paramountplus/downloader.py are used to configure the device and key information needed to decrypt the content and circumvent the DRM

The scripts have been removed and we have also reviewed the fork network to determine those that contain the content we reported as a violation of the DMCA in the parent repository. Based on the representative number of forks listed below that I have reviewed, I believe that all or most of the forks are infringing to the same extent as the parent repository.

LIST OF FORK NETWORKS

NETFLIX-DL-6.1.0: 111 forks
Representative sample:
https://github.com/Bl00mstar/NETFLIX-DL-6.1.0
https://github.com/weapon121/NETFLIX-DL-6.1.0
https://github.com/alexanteur/NETFLIX-DL-6.1.0
https://github.com/judgeu/NETFLIX-DL-6.1.0
https://github.com/Nabrizzy/NETFLIX-DL-6.1.0
https://github.com/bk3a12/NETFLIX-DL-6.1.0
https://github.com/EnthusiastAnon/NETFLIX-DL-6.1.0

Netflix-4K-Script: 294 forks
Representative sample:
https://github.com/blacknoize404/Netflix-4K-Script
https://github.com/fabutrash/Netflix-4K-Script
https://github.com/AjmalShajahan/Netflix-4K-Script
https://github.com/weapon121/Netflix-4K-Script
https://github.com/78Alpha/Netflix-4K-Script
https://github.com/alexanteur/Netflix-4K-Script
https://github.com/judgeu/Netflix-4K-Script

DISNEY-4K-SCRIPT: 176 forks
Representative sample:
https://github.com/tellyto/DISNEY-4K-SCRIPT
https://github.com/Bl00mstar/DISNEY-4K-SCRIPT
https://github.com/blacknoize404/DISNEY-4K-SCRIPT
https://github.com/fabutrash/DISNEY-4K-SCRIPT
https://github.com/alexanteur/DISNEY-4K-SCRIPT
https://github.com/78Alpha/DISNEY-4K-SCRIPT
https://github.com/judgeu/DISNEY-4K-SCRIPT

Netflix-videos-downloader: 216 forks
The original from the [invalid] repo was not actually the original, and the [invalid] forked it from a previously existing repository, so the fork network includes forks from before the [invalid]’s activities. To make sure the older versions were equally infringing, we checked all 216 by comparing the hashes of the various files included in each repo. Although these forks include a handful of different versions of the main script and the secondary script that calls the decryption modules, the Widevine decryption scripts are identical across all forks. Some of the forks (and forks of those forks) were renamed to netflix-subtitles-downloader but they contain in fact the same code. Representative sample:
https://github.com/Gryffindor8/Netflix-videos-downloader
https://github.com/ReclusiveEagle/Netflix-videos-downloader
https://github.com/Odinsan007/Netflix-videos-downloader
https://github.com/Sentivet/Netflix-videos-downloader
https://github.com/tonystarkerror/Netflix-videos-downloader
https://github.com/AdzeB/Netflix-videos-downloader
https://github.com/Quicksilver81/Netflix-videos-downloader

We are providing this notice based on our good faith belief that the use of motion pictures and television programs owned by the MPA Member Studios in the manner occurring via the repositories and fork networks is not authorized by the copyright owners, their agents, or the law. The information in this notification is accurate and, under penalty of perjury, we are authorized to act on behalf of the MPA Member Studios, which own or control exclusive rights under copyright that are being infringed in the manner described herein. This letter is without prejudice to the rights and remedies of the MPA Member Studios and their affiliates, all of which are expressly reserved.

If you have any questions, please contact me by telephone at [private], or via email at [private].

Regards,

[private]

17 KiB Исходник Ответственный История Убрать экранирование Экранировать

17 KiB

Исходник Ответственный История