Warning email from Amazon

[Sebastian001]

It looks like the leak was a bunch of certificates published to GitHub:

"A few weeks ago, an account named ‘Widevineleak’ published a list of both SL2000 and SL3000 certificates on GitHub. The SL2000 variant is commonly referred to as software DRM while the higher SL3000 provides more advanced hardware-based security."

I'm guessing the these certificates are also used by Widevine... or perhaps StreamFab is using PlayReady now? The TorrentFreak article states: "Amazon Prime, which uses PlayReady DRM among other protections, takes action against accounts that use these leaked certificates."

In any case, if StreamFab is using any of these leaked certificates, then it might be responsible for the warning letters. If StreamFab can't use a certificate that hasn't been leaked, then that's going to be a problem until it's possible to get a new version of Widevine and/or PlayReady, which I understand can take months (as it did in the first 3-4 months of 2024 when downloading from Amazon Prime as well as other VIP services wasn't possible with StreamFab).

For now, I would suggest COMPLETELY UNINSTALLING StreamFab and doing a re-install of the latest version. Uninstalling through control panel doesn't remove everything. Follow these steps:

(Please note that I only use StreamFab... if you have other DVDFab software installed, carefully check your DVDFab folders and registry keys for other products, as you may only want to remove the StreamFab folders and keys. Personally, I would probably re-install the other DVDFab products as well, unless I had many of them installed and didn't want to spend the time.)

1) Control Panel -> Programs and Features -> Uninstall StreamFab including user settings. (Check and record if needed any custom settings you are using so you can set them back after the re-install.)

2) Check for and delete the following folders after the uninstall (replace "Admin" with your user name if it isn't Admin): C:\Program Files\DVDFab\, C:\Users\Admin\AppData\Roaming\DVDFab, C:\Users\Admin\AppData\Local\CEF, C:\Users\Admin\Documents\DVDFab\StreamFab, and any custom folders if you specified them for Logs, Output, and Temp.

3) Check for and delete the registry keys: HKEY_CURRENT_USER\SOFTWARE\DVDFab, HKEY_LOCAL_MACHINE\SOFTWARE\DVDFab, and HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\DVDFab.

4) Download the offline version and run the installer.

5) Re-enter any custom settings.

I uninstall each version cleanly and reinstall... However, I don't understand what that has to do with the topic!

[AllNight]

We have Widevine and no Playready? As far as I know, but I could be wrong!

It looks like the leak was a bunch of certificates published to GitHub:

"A few weeks ago, an account named ‘Widevineleak’ published a list of both SL2000 and SL3000 certificates on GitHub. The SL2000 variant is commonly referred to as software DRM while the higher SL3000 provides more advanced hardware-based security."

I'm guessing the these certificates are also used by Widevine... or perhaps StreamFab is using PlayReady now? The TorrentFreak article states: "Amazon Prime, which uses PlayReady DRM among other protections, takes action against accounts that use these leaked certificates."

In any case, if StreamFab is using any of these leaked certificates, then it might be responsible for the warning letters. If StreamFab can't use a certificate that hasn't been leaked, then that's going to be a problem until it's possible to get a new version of Widevine and/or PlayReady, which I understand can take months (as it did in the first 3-4 months of 2024 when downloading from Amazon Prime as well as other VIP services wasn't possible with StreamFab).

For now, I would suggest COMPLETELY UNINSTALLING StreamFab and doing a re-install of the latest version. Uninstalling through control panel doesn't remove everything. Follow these steps:

(Please note that I only use StreamFab... if you have other DVDFab software installed, carefully check your DVDFab folders and registry keys for other products, as you may only want to remove the StreamFab folders and keys. Personally, I would probably re-install the other DVDFab products as well, unless I had many of them installed and didn't want to spend the time.)

1) Control Panel -> Programs and Features -> Uninstall StreamFab including user settings. (Check and record if needed any custom settings you are using so you can set them back after the re-install.)

2) Check for and delete the following folders after the uninstall (replace "Admin" with your user name if it isn't Admin): C:\Program Files\DVDFab\, C:\Users\Admin\AppData\Roaming\DVDFab, C:\Users\Admin\AppData\Local\CEF, C:\Users\Admin\Documents\DVDFab\StreamFab, and any custom folders if you specified them for Logs, Output, and Temp.

3) Check for and delete the registry keys: HKEY_CURRENT_USER\SOFTWARE\DVDFab, HKEY_LOCAL_MACHINE\SOFTWARE\DVDFab, and HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\DVDFab.

4) Download the offline version and run the installer.

5) Re-enter any custom settings.

[Nexus-3]

october262 Wilson.Wang -> thanks for the reply.

I'm not in a country with a Walmart.
I guess I could look into the Amazon Gift thing, but it would be rather obvious when the account you have gifted to is suddenly busted. Seems like a one shot deal.



Anyone else notice the huge amount of crap being put on Prime lately? Nothing of real quality recently (IMO). Sure I'd probably miss Prime - particularly having access to newer content. At the end of the day, I think the risk will have to be taken. I have a extensive library of paid content, and I doubt I could watch it all in the time I have left. So...if I lost Prime...I probably wouldn't cry. I took the attitude is was bound to happen one day. Nothing is ever static! Nothing!

[0xFeedBeef]

https://torrentfreak.com/playready-d...t-suspensions/ so this is the way hot they detect the downloads

there's always a knob who spoils it for everyone... I never get those people- you have all the certs you can eat, literally shut up and go wild... but no... "must make fame for self!"

[Sebastian001]

We have Widevine and no Playready? As far as I know, but I could be wrong!

[Ragnarocek]

https://torrentfreak.com/playready-d...t-suspensions/ so this is the way hot they detect the downloads

[David_L312]

Hi all,

We did some improvements in the new version 6247, at least that the process is same as watching the video from Amazon website when analyzing and downloading videos from Amazon in StreamFab.

Wilson

Thanks for keeping us in the loop.
I understand that nothing is a guarantee.
If you learn more please let us know.

[David_L312]

You're asking for guarantees that simply cannot be given, c'mon, of all people you ought to know that

Agreed. The only way to verify a fix is with testing. And even if this is "fixed" today, doesn't mean that it'll be fixed tomorrow. If Amazon really wants to make trouble for us they certainly can (if nothing else just based on usage patterns). (I always go a little nuts at the end of the month when I see the list of what is being taken down - What? Remo Williams is getting pulled from Amazon in 3 days!!!!). All Amazon needs to do is watch our usage patterns.

My guess is I'll break down and create a disposable Amazon account. Maybe even order a few things here and there on it. Easy enough to create another G-Mail account.

I do appreciate Wilson taking a crack at this.

[Cats4U]

Off-topic. Start a new topic.

[simchris]

Still using both SF and Musicfab with Amazon, and zero issues. Using real verified account with all the upgrades for APrime.

[jpp72]

Jack,

Are you using a different name on the account as well? No doubt a different email address. I also assume they require a physical address that can be verified on Google maps.



Anyone on there that has gotten the warning, what version of the software are you using?
Are you using any sort of mods such as the season only mod?
Are you using movie mode or out of the box behavior?
Are you using Jack's script to analyze the single episode?
Does any of it really matter?

For Canada, totally made up name, gmail account with that made up name, real address but not mine. It's a random address in a completely different part of town. Physical prepaid visa bought with cash at the pharmacy.

For US, same except the card is from statescard.com, usunlocked.com or a physical prepaid card bought in the US whenever i would go there, which was pretty often. I am boycotting US travel until a certain orange fella is out of office.

I got the warning on both my fake US account and real Canadian account. Interestingly, both went to my SPAM folder while other Amazon emails are in my Inbox.

The most shocking tidbit is that the one I got on my Canadian account is NOT in my Messages on Amazon.ca or the app.

[MrGrackle]

Having not installed the latest version yet, does the Season Fix still work? Is the analyze behavior completely reworked so we don't need it?

[Sebastian001]

I haven't heard anything from Musicfab users, but they should be affected too. But I don't know how the download works there compared to Streamfab. I'll ask in the forum.

[MrGrackle]

Sounds like a secondary account is the best bet. If a real CC is needed for the first step I could either set up a virtual one on Chase or get one of those prepaid ones at Walmart. If you buy the gift card prepaids some organizations know they're gift cards. Worth a shot still. Using a digital gift card, any forensic accountant could connect the dots. One of my local grocery stores sell physical Amazon gift cards.
As someone that has not seen the email YET, maybe there is a grading system and I have not crossed the threshold. At this point, is not worth jeopardizing my primary account.

All the hostilities towards the SF team though is probably not merited. Even if this were AS, the issue would probably be happening there as well.

In answer to a previous question, I thought for sure it was a Fengtao product that removed the DRM from itunes mp3 files. It's been awhile.


Jack,

Are you using a different name on the account as well? No doubt a different email address. I also assume they require a physical address that can be verified on Google maps.



Anyone on there that has gotten the warning, what version of the software are you using?
Are you using any sort of mods such as the season only mod?
Are you using movie mode or out of the box behavior?
Are you using Jack's script to analyze the single episode?
Does any of it really matter?

[Cats4U]

C'mon, unless you know what the trigger pattern is, you can't make a guaranteed claim, besides, it might work today, but prime might change the API tomorrow and it'll be detectable again; when playing with fire, you risk getting burned, it's simple as that.

I don't need to know the trigger pattern, they do. They seem to think that they do know it and it "should" be fixed. Time to put their money where their mouth is, if they feel that confident about it. As I said, I have zero intention of risking my Amazon Prime membership by continuing to download from them. I'll let someone else be the guinea pig. I don't know how many users here would be willing to risk their AP membership for nothing. I won't even do it for the hypothetical $500 that I asked them if they'd be willing to give as compensation for the loss of someone's AP membership. I need my Amazon Prime, and the videos are the least important benefit to having it. And I have no urge to play credit/gift card games to try to defeat the system. It's just one other way they can say I'm violating their terms and conditions and I lose my AP membership.