Does anyone have any links for reverse engineering Spotify DRM? I didn’t necessarily need it for myself, have plenty of music, and it would be a pretty inefficient means of piracy vs. BitTorrent or like yt-dlp, but I’m curious how it works.
It always seems to me like the analog gap is particularly gaping with audio, and I wonder how far down to the metal it’s protected.
I have found other services like Tidal aren’t as advanced with their DRM it seems, I’m able to download using some command line CLI off github full FLACs and everything.
It seems apps like SpotiFlyer and Spotube both use the Spotify discovery API but actually get the music from YT Music (which is already easy to download using yt-dlp, NewPipe, or another app of your choice). Kinda sad that I can’t find a way to pirate music off of Spotify yet, but YT Music is pretty good for my purposes.
@edsu
it seems like it just uses the API??? idk readme says they have moved on to another project that I can’t find the sources for, the gitlab just has the APKs. but if it’s just as simple as using the API I would be freaking stunned there wasn’t more widespread abuse of it. @piracy
There was actually a project on github that claimed to allow downloading of Spotify straight from the source with drm bypassing called XSpotify but it was taken down by spotify before i got to try it:
https://github.com/meik97/XSpotify
What does it mean in terms of ethics when a song is not on Spotify and is not considered a song (is just a generic video) through YouTube Music? It seems to happen a lot to video game OSTs, especially Touhou music.
Spotify, like most legit streaming services, use Google Widevine DRM, and you don’t reverse engineer it. At least not for the level that is required for this kind of content (L3). When you stream something in browser or device, the decryption module of that device is “talking” to the license server. If the identification goes through, the decryption keys are sent and the media gets played. So what you do is you extract that decryption module from a device, and then use scripts to send requests acting as that device, tricking the license server into sending you the decryption keys.
Once set up, and with the proper script, it can actually be even more efficient than other forms of piracy.
Buy a cheap Xiaomi phone for like 50 bucks from your local semi-sketch phone repair shop and use this: dumper. I had an Android I bought to try modding it and then I found Dumper and it worked well.
Fyi, there’s many scripts out there to make WEB-DLs from many streaming sources, I don’t recall the self-host git site though, perhaps a kind fellow will link it.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !piracy@lemmy.dbzer0.com
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.
I have found other services like Tidal aren’t as advanced with their DRM it seems, I’m able to download using some command line CLI off github full FLACs and everything.
Please dm me how
It seems apps like SpotiFlyer and Spotube both use the Spotify discovery API but actually get the music from YT Music (which is already easy to download using yt-dlp, NewPipe, or another app of your choice). Kinda sad that I can’t find a way to pirate music off of Spotify yet, but YT Music is pretty good for my purposes.
This is how they did the old one. Its a lot more complicated now, but the basics should be the same.
Zotify can download music directly from Spotify. You can bulk download or search individual songs, playlists, artists etc to download.
You need to have an account and a having premium allows you to get full quality downloads.
@jonny @piracy I wonder if https://github.com/Shabinder/SpotiFlyer still works?
Hi there! The links in your response are not clickable for Lemmy users, here are the clickable versions: !piracy@lemmy.dbzer0.com
@edsu
it seems like it just uses the API??? idk readme says they have moved on to another project that I can’t find the sources for, the gitlab just has the APKs. but if it’s just as simple as using the API I would be freaking stunned there wasn’t more widespread abuse of it.
@piracy
Hi there! The links in your response are not clickable for Lemmy users, here are the clickable versions: !piracy@lemmy.dbzer0.com
There was actually a project on github that claimed to allow downloading of Spotify straight from the source with drm bypassing called XSpotify but it was taken down by spotify before i got to try it: https://github.com/meik97/XSpotify
However it was archived on the wayback machine: https://web.archive.org/web/20200303145624/https://github.com/meik97/XSpotify
Obviously take this with a grain of salt, you should probably read the source code before attempting to run it
May I ask their discord or telegram? Maybe they have hosted it as a torrent
What does it mean in terms of ethics when a song is not on Spotify and is not considered a song (is just a generic video) through YouTube Music? It seems to happen a lot to video game OSTs, especially Touhou music.
Check these tools out. I’m pretty sure I did this yesterday.
https://fmhy.pages.dev/storage/#spotify-downloaders
Spotify, like most legit streaming services, use Google Widevine DRM, and you don’t reverse engineer it. At least not for the level that is required for this kind of content (L3). When you stream something in browser or device, the decryption module of that device is “talking” to the license server. If the identification goes through, the decryption keys are sent and the media gets played. So what you do is you extract that decryption module from a device, and then use scripts to send requests acting as that device, tricking the license server into sending you the decryption keys.
Once set up, and with the proper script, it can actually be even more efficient than other forms of piracy.
Buy a cheap Xiaomi phone for like 50 bucks from your local semi-sketch phone repair shop and use this: dumper. I had an Android I bought to try modding it and then I found Dumper and it worked well.
Fyi, there’s many scripts out there to make WEB-DLs from many streaming sources, I don’t recall the self-host git site though, perhaps a kind fellow will link it.
I have no clue how to defeat the DRM/rip the songs. But you can just route the audio to a recording program and record it live.
Not ideal but it’s a workaround if you really need to download something off of Spoti.