Warning email from Amazon

[Nexus-3]

october262 Wilson.Wang -> thanks for the reply.

I'm not in a country with a Walmart.
I guess I could look into the Amazon Gift thing, but it would be rather obvious when the account you have gifted to is suddenly busted. Seems like a one shot deal.



Anyone else notice the huge amount of crap being put on Prime lately? Nothing of real quality recently (IMO). Sure I'd probably miss Prime - particularly having access to newer content. At the end of the day, I think the risk will have to be taken. I have a extensive library of paid content, and I doubt I could watch it all in the time I have left. So...if I lost Prime...I probably wouldn't cry. I took the attitude is was bound to happen one day. Nothing is ever static! Nothing!

[AllNight]

We have Widevine and no Playready? As far as I know, but I could be wrong!

It looks like the leak was a bunch of certificates published to GitHub:

"A few weeks ago, an account named ‘Widevineleak’ published a list of both SL2000 and SL3000 certificates on GitHub. The SL2000 variant is commonly referred to as software DRM while the higher SL3000 provides more advanced hardware-based security."

I'm guessing the these certificates are also used by Widevine... or perhaps StreamFab is using PlayReady now? The TorrentFreak article states: "Amazon Prime, which uses PlayReady DRM among other protections, takes action against accounts that use these leaked certificates."

In any case, if StreamFab is using any of these leaked certificates, then it might be responsible for the warning letters. If StreamFab can't use a certificate that hasn't been leaked, then that's going to be a problem until it's possible to get a new version of Widevine and/or PlayReady, which I understand can take months (as it did in the first 3-4 months of 2024 when downloading from Amazon Prime as well as other VIP services wasn't possible with StreamFab).

For now, I would suggest COMPLETELY UNINSTALLING StreamFab and doing a re-install of the latest version. Uninstalling through control panel doesn't remove everything. Follow these steps:

(Please note that I only use StreamFab... if you have other DVDFab software installed, carefully check your DVDFab folders and registry keys for other products, as you may only want to remove the StreamFab folders and keys. Personally, I would probably re-install the other DVDFab products as well, unless I had many of them installed and didn't want to spend the time.)

1) Control Panel -> Programs and Features -> Uninstall StreamFab including user settings. (Check and record if needed any custom settings you are using so you can set them back after the re-install.)

2) Check for and delete the following folders after the uninstall (replace "Admin" with your user name if it isn't Admin): C:\Program Files\DVDFab\, C:\Users\Admin\AppData\Roaming\DVDFab, C:\Users\Admin\AppData\Local\CEF, C:\Users\Admin\Documents\DVDFab\StreamFab, and any custom folders if you specified them for Logs, Output, and Temp.

3) Check for and delete the registry keys: HKEY_CURRENT_USER\SOFTWARE\DVDFab, HKEY_LOCAL_MACHINE\SOFTWARE\DVDFab, and HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\DVDFab.

4) Download the offline version and run the installer.

5) Re-enter any custom settings.

[Sebastian001]

It looks like the leak was a bunch of certificates published to GitHub:

"A few weeks ago, an account named ‘Widevineleak’ published a list of both SL2000 and SL3000 certificates on GitHub. The SL2000 variant is commonly referred to as software DRM while the higher SL3000 provides more advanced hardware-based security."

I'm guessing the these certificates are also used by Widevine... or perhaps StreamFab is using PlayReady now? The TorrentFreak article states: "Amazon Prime, which uses PlayReady DRM among other protections, takes action against accounts that use these leaked certificates."

In any case, if StreamFab is using any of these leaked certificates, then it might be responsible for the warning letters. If StreamFab can't use a certificate that hasn't been leaked, then that's going to be a problem until it's possible to get a new version of Widevine and/or PlayReady, which I understand can take months (as it did in the first 3-4 months of 2024 when downloading from Amazon Prime as well as other VIP services wasn't possible with StreamFab).

For now, I would suggest COMPLETELY UNINSTALLING StreamFab and doing a re-install of the latest version. Uninstalling through control panel doesn't remove everything. Follow these steps:

(Please note that I only use StreamFab... if you have other DVDFab software installed, carefully check your DVDFab folders and registry keys for other products, as you may only want to remove the StreamFab folders and keys. Personally, I would probably re-install the other DVDFab products as well, unless I had many of them installed and didn't want to spend the time.)

1) Control Panel -> Programs and Features -> Uninstall StreamFab including user settings. (Check and record if needed any custom settings you are using so you can set them back after the re-install.)

2) Check for and delete the following folders after the uninstall (replace "Admin" with your user name if it isn't Admin): C:\Program Files\DVDFab\, C:\Users\Admin\AppData\Roaming\DVDFab, C:\Users\Admin\AppData\Local\CEF, C:\Users\Admin\Documents\DVDFab\StreamFab, and any custom folders if you specified them for Logs, Output, and Temp.

3) Check for and delete the registry keys: HKEY_CURRENT_USER\SOFTWARE\DVDFab, HKEY_LOCAL_MACHINE\SOFTWARE\DVDFab, and HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\DVDFab.

4) Download the offline version and run the installer.

5) Re-enter any custom settings.

I uninstall each version cleanly and reinstall... However, I don't understand what that has to do with the topic!

[AllNight]

Just more an assurance that you have 6.2.4.7 installed with no traces of any previous version or any previous Widevine still present. I've done updates before where the CEF folder remained untouched, but when I did a complete re-install, the installed CEF folder had a newer version of Widevine. (Doesn't always happen.)

[0xFeedBeef]

I just install each version in its own folder, that way I can flip between versions if a version is "playing up"

[simchris]

Did a delete on my temp/cache custom folder; did full uninstall via Windows PRO apps; did new install as admin of the offline installer.
All working; and funnily enough Amazon threw up a "your browser needs to be updated" message which is first time seeing that from Amazon for video. Usually that has appeared for Musicfab in past, but then goes away next day after system shut down, reboot, wait time.

Just anecdotal notes for those following with antici......pation. Keeping eye on my mailbox and message folder on amazon.

Went back to download another movie, and the 'update browser' warning message now gone as expected. Hopefully will continue to be okay.

[David_L312]

https://torrentfreak.com/playready-d...t-suspensions/ so this is the way hot they detect the downloads

This is interesting. Thanks for the link.

I didn't see any mention of PlayReady in Wilson's message or the 6.2.4.7 update notes.
Is there a belief that StreamFab was using one of the hacked certificates, and that it's not anymore?

We've paid for the content we are viewing. I would hope Streamfab could stick with using the certificates that we are authorized to use (for watching in a web browser). But perhaps that puts a limit on resolution.

[Wilson.Wang]

This is interesting. Thanks for the link.

I didn't see any mention of PlayReady in Wilson's message or the 6.2.4.7 update notes.
Is there a belief that StreamFab was using one of the hacked certificates, and that it's not anymore?

We've paid for the content we are viewing. I would hope Streamfab could stick with using the certificates that we are authorized to use (for watching in a web browser). But perhaps that puts a limit on resolution.

Widevine is used for Amazon in StreamFab.

We do not use any public shared certificates and also never used before, they are not secure and cannot provide the stable download services.


Wilson

[David_L312]

Widevine is used for Amazon in StreamFab.

We do not use any public shared certificates and also never used before, they are not secure and cannot provide the stable download services.


Wilson

Thanks for the information.
So, it's not clear to me that the issue mentioned by Ragnarocek is what got us into trouble.

[David_L312]

Thanks for the information.
So, it's not clear to me that the issue mentioned by Ragnarocek is what got us into trouble.

Another thought... In a similar vein maybe Amazon flagged the certificate(s) that Streamfab is using.

[AllNight]

Widevine is used for Amazon in StreamFab.

We do not use any public shared certificates and also never used before, they are not secure and cannot provide the stable download services.


Wilson

The TorrentFreak article seems to be talking about certificates that were not public. They were private certificates that got leaked recently. Have you checked this leak and are you able to determine that StreamFab is not using any of the leaked certificates?

[jpp72]

The TorrentFreak article seems to be talking about certificates that were not public. They were private certificates that got leaked recently. Have you checked this leak and are you able to determine that StreamFab is not using any of the leaked certificates?

He literally said they use Widevine for Amazon. As a matter of fact, they use Widevine for all the modules that deal with DRM AFAIK

[Mollenoh]

This clearly shows that you'll need to download your purchased movies to protect your investment in case your account will be closed. On the other hand, downloading your purchased movies may result in your account being closed. Talk about "catch 22"!

[AllNight]

He literally said they use Widevine for Amazon. As a matter of fact, they use Widevine for all the modules that deal with DRM AFAIK

I know. It is still unclear if the leaked certificates were used by both Widevine and Playready. 1) The account name posting to Github was called "Widevineleak", and 2) The timing of this aligns with people starting to receive letters from Amazon.

[simchris]

This clearly shows that you'll need to download your purchased movies to protect your investment in case your account will be closed. On the other hand, downloading your purchased movies may result in your account being closed. Talk about "catch 22"!

Ironically, that was my main purpose for getting SF; as I found I could get many of my AppleTV and Amazon purchases for download, but also in some cases replace ancient DVD discs with updated versions (e.g., Twilight Zone Classic in 1080p vs 720p). I wanted permanent safe copies for posterity since services come and go. Priceless for this purpose. Still working for me today, so hopefully my behavior is not on the target list.