this post was submitted on 25 May 2025
16 points (100.0% liked)

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

62519 readers
329 users here now

⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don't request invites, trade, sell, or self-promote

3. Don't request or link to specific pirated titles, including DMs

4. Don't submit low-quality posts, be entitled, or harass others



Loot, Pillage, & Plunder

📜 c/Piracy Wiki (Community Edition):

🏴‍☠️ Other communities

FUCK ADOBE!

Torrenting/P2P:

Gaming:


💰 Please help cover server costs.

Ko-Fi Liberapay
Ko-fi Liberapay

founded 2 years ago
MODERATORS
 

Tried to support the industry by buying a movie a watch a lot. Well, no more. If I need a pihole just to watch a movie I own, that's ridiculous.

top 50 comments
sorted by: hot top controversial new old
[–] Pogogunner@sopuli.xyz 11 points 1 month ago (3 children)

"It also enables the delivery of advertising content"

They already paid for the product! Double-dipping assholes

[–] Gsus4@mander.xyz 4 points 1 month ago

triple-dipping, they also get your data.

[–] TachyonTele@lemm.ee 1 points 1 month ago (2 children)

I wonder if these people think everyone wants to be advertised to.

[–] catloaf@lemm.ee 4 points 1 month ago

I don't think they care

[–] natecox@programming.dev 2 points 1 month ago (1 children)

No, I am 100% certain they know that the vast majority of people don’t care and some people really really hate it, but nobody actually enjoys it.

[–] baguettefish@discuss.tchncs.de 3 points 1 month ago (5 children)

Someone I know who is currently on a pseudoscience and conspiracy theory arc genuinely believes that personalized ads are good because then you can easily buy things you know you'll like

[–] WarmApplePieShrek@lemmy.dbzer0.com 2 points 1 month ago (1 children)

I've bought things from personalized ads before. But mostly they're annoying. And creepy.

[–] baguettefish@discuss.tchncs.de 4 points 1 month ago

the idea of "just browse the web normally with someone looking over your shoulder taking notes on what you like to then sell you shit - or even better, it infers what you like using magic and can even tell when you're pregnant before you know it yourself" can be nice in some ways I guess, but yeah I agree. no thanks.

[–] natecox@programming.dev 1 points 1 month ago

Guess there’s no accounting for stupid.

[–] merde@sh.itjust.works 1 points 1 month ago

sadly, i too heard that from somebody 🤷

[–] entropicdrift@lemmy.sdf.org 1 points 1 month ago

Some people are allergic to researching their purchases

[–] ddash@lemmy.dbzer0.com 1 points 1 month ago

No no, you see. You didn't pay for the product but the license for the product. Now it makes sense, right?

[–] lka1988@lemmy.dbzer0.com 7 points 1 month ago (2 children)

Yeah I just straight up pirate movies now, I don't even try to hide it from people anynore. It's clear to me at this point that all these companies care about is getting richer by the minute off the backs of the common man, and their excuses for doing so are getting more and more pathetic.

[–] moody@lemmings.world 2 points 1 month ago

I have friends who work in the film industry and they pirate movies and TV shows all the time.

[–] baguettefish@discuss.tchncs.de 1 points 1 month ago

What capitalists are doing is intentionally sharpening the contradiction, probably with the goal of a revolution or reform in their favor (as can be seen in the USA right now). The neat thing about sharpened contradictions is that it will inevitably lead to change, the bad thing is that this is a massively organized effort with tons of planning and coordination, and The People:tm: are not ready for it.

Pirating movies is pretty good though. Mainstream media always manages to exploit labor incredibly harshly, to the point of suicide, and that behavior should not be rewarded IMO. Of course there is no ethical consumption under capitalism, but one can dream. As an aside, pirated media is also incredibly convenient. There is a great community spirit in the piracy community.

[–] madjo@feddit.nl 2 points 1 month ago (1 children)

I’m still getting justified in my boycott of anything Sony that started in 2005, when they bricked my PC for daring to put a Sony CD in my computer’s CD player! Fucking rootkit.

Yes I’m still holding that grudge and I will not relent, for as long as I live.

Any movie I watch I make sure it’s not a Sony product, any music I listen to, I make doubly sure it’s not from a Sony studio. Any electronics I buy, I make triply sure it doesn’t contain any Sony product. Sony is not getting a dime from me ever again!

Fuck Sony!

[–] DFX4509B_2@lemmy.org 1 points 1 month ago (1 children)

That rootkit thing failed miserably, thankfully, and audio CDs have been DRM-free ever since.

[–] madjo@feddit.nl 0 points 1 month ago (1 children)

Sure, but I'm not touching anything Sony with a 10 foot pole.

[–] DFX4509B_2@lemmy.org 2 points 1 month ago (1 children)

Sure, but I’m not touching anything Sony with a 10 foot pole.

That's going to discount most of the camera market if not the entire camera market then because Sony makes basically everyone's imaging sensors, plus a large portion of the anime genre given that company bought out Funimation.

[–] WarmApplePieShrek@lemmy.dbzer0.com 1 points 1 month ago (1 children)

The problem is every company is a Sony now.

So you have to buy from your least hated Sony. You can't just boycott Sony.

[–] DFX4509B_2@lemmy.org 1 points 1 month ago* (last edited 1 month ago)

And even if you do boycott Sony, that'll discount entire market segments and almost entire content niches as I just mentioned.

[–] prole@lemmy.blahaj.zone 1 points 1 month ago* (last edited 1 month ago)

This isn't a EULA in that it still allows you to use the product even if you decline...

This option is available with most modern games these days. They often ask you to click "approve" twice, knowing you won't read either and knowing that you believe that you need to accept both to proceed. When in reality, the second one is almost always optional (perhaps even by law because of laws in the EU).

Still gross. And definitely a major dark pattern, but if people just took an extra 3 seconds to double check, they'd stop sending all of their data to these companies.

[–] Scrollone@feddit.it 1 points 1 month ago

Piracy is now better and safer than using "real" discs. Well done, Sony.

[–] Cassa@lemmy.blahaj.zone 0 points 1 month ago (1 children)

Welp, blu ray playyæer sure don't need no internet - gimme dumb technology plz

[–] EndlessNightmare@reddthat.com 1 points 1 month ago

blu ray playyæer

Did a cat jump on your keyboard?

[–] gravitas_deficiency@sh.itjust.works 0 points 1 month ago (1 children)

Haha no it doesn’t.

unplugs NIC

rips blu-ray with blu-ray drive running old firmware

[–] VitoRobles@lemmy.today 0 points 1 month ago (2 children)

Or... Here me out, don't do that.

By giving them money, from their perspective, you've accepted their t&c. If they get data or not, that's just icing on the cake.

borrows blu-ray instead of buying it

[–] Twitches@lemm.ee 0 points 1 month ago (1 children)

What happens of you hit skip. Does it not let you play the disk?

[–] Ulrich@feddit.org 0 points 1 month ago (1 children)

Why is your Blu-ray player connected to the internet?

[–] tkw8@lemm.ee 0 points 1 month ago (5 children)

VLC on a Linux laptop. You think my Blu-ray player has the ability to take screenshots?

[–] Ulrich@feddit.org 0 points 1 month ago* (last edited 1 month ago) (1 children)

You never heard of a capture card?

Can I introduce you to my friend MakeMKV?

[–] Appoxo@lemmy.dbzer0.com 0 points 1 month ago (1 children)
[–] Draconic_NEO@lemmy.dbzer0.com 0 points 1 month ago (1 children)

HDCP is easy to bypass. Almost laughable really, there are tons of "Splitters" and Strippers on the market. I've also seem a few totally legal capture cards that can read it directly.

[–] Appoxo@lemmy.dbzer0.com 0 points 1 month ago (5 children)

You can crack anything if you are remotely motivated.

load more comments (5 replies)
load more comments (4 replies)
[–] Saik0Shinigami@lemmy.saik0.com 0 points 1 month ago (2 children)

LMFAO. And when I tell people to take care about leaving Jellyfin public with their open API endpoint issues... Yeah Sony WILL abuse your shit... They already do it.

[–] ProgrammingSocks@pawb.social 0 points 1 month ago (4 children)

I run a pivpn setup so that nothing is exposed to the internet at all. It's just too dangerous now. It was bad back in the day, but now I literally have bots trying to join any public facing Minecraft server. It's so many times worse now than it was a decade ago.

load more comments (4 replies)
[–] FeelzGoodMan420@eviltoast.org 0 points 1 month ago (1 children)

Can you explain the issues with Jellyfin? Idk about any of this. What are the issues?

[–] Saik0Shinigami@lemmy.saik0.com 0 points 1 month ago

https://github.com/jellyfin/jellyfin/issues/5415

The biggest issue is that the video stream endpoint is not auth'd. Meaning that if someone guesses the MD5 hash for a file in your library it will play. Sounds at first glance like it's unlikely to matter. Except that MD5 is generated based on the file's filepath. So if you use standard naming conventions on paths that are common (/movies/Big Bucks Bunny(2008)/Big Bucks Bunny.mkv for example being simple and easy), eg defaults for a docker container using *arr suites. Then it's possible for a precompiled hash list to check for file against your server.

So now add a company like Sony, they can generate all their library as a hash list, hit your server with millions of requests over the course of a couple of hours and map out how much of their content you have on your server. If any of it has never had a physical release (since you're allowed to backup your own content) you're completely fucked, and now will have to prove in court that you own ALL the content. And possibly... since it's open endpoint, it could be argued that you're even distributing openly (though unlikely argument... but do you really want to chance that?).

Ultimately if your setup is "Standard" you're asking for a lawsuit.

Answers to "fix" this:

Map your paths in weird folders. instead of /movies/ add in a folder like a GUID, so /eH4i67ZwByjLao3z7nHWKdS5ogysm68x/movies/. Make sure this occurs INSIDE your docker container if you're using docker. Will break any precompiled hashes... though possible to hit a collision and still be "found".

Setup fail2ban or other brute force blocking technology on your reverse proxy.

Use a private network setup... whether VPN, SDN, whatever... tailscale, zerotier, etc... (This will break TVs that don't have vpn capabilities)

Add another auth in front of Jellyfin. (This breaks ALL Jellyfin apps)

The real answer would be the developers closing the unauth endpoints... But it's been an issue for over 4 years now... They're not going to fix it anytime soon as they don't want to "break compatibility", which is a pretty dumb excuse IMO.

There's another issue where you shouldn't give accounts to people you don't trust as one user can attack another user AFTER login. So make sure you trust everyone you let have access... they can screw with your profile and do stuff you might not expect.

load more comments
view more: next ›