Hello @nilaoda and @DevLARLEY,
I am a developer responsible for the Nowe Horyzonty VOD platform, and I recently came across pull request #752 and the related commit:
#752
b604b72
Nowe Horyzonty is a Polish non-profit organisation. Our VOD platform is dedicated to arthouse cinema, primarily independent and non-commercial films.
I am asking you to remove the Nowe Horyzonty-specific URL processor from the current codebase and remove all references to “nowehoryzonty” from the project.
The apparent purpose of this functionality is to enable users to retrieve video segments from our platform and combine them into a downloadable video file. I understand that the software itself does not bypass DRM protection. Nevertheless, this platform-specific implementation was clearly intended to facilitate part of an unauthorised downloading process, which we consider unethical and potentially unlawful.
It is also important to point out that the implementation does not work with the current version of our platform. The method implemented here reproduces an older mechanism that generated signed segment URLs in the browser. We no longer use that signing method, and the current mechanism is different.
Despite this, the explicit use of the “nowehoryzonty” name has caused companies responsible for monitoring security threats on behalf of film distributors and VOD platforms to identify this project and raise an alert. This happened even though, as explained above, the implementation is no longer effective.
The presence of this functionality and the use of our name affect our reputation and require us to spend considerable time and effort explaining the situation to our partners and rights holders.
We therefore strongly urge you to act responsibly and:
- Remove the Nowe Horyzonty-specific URL processor from the current codebase.
- Remove all current references to “nowehoryzonty”
- Avoid adding platform-specific functionality targeting the Nowe Horyzonty VOD service in the future.
Thank you for taking this matter seriously.
Hello @nilaoda and @DevLARLEY,
I am a developer responsible for the Nowe Horyzonty VOD platform, and I recently came across pull request #752 and the related commit:
#752
b604b72
Nowe Horyzonty is a Polish non-profit organisation. Our VOD platform is dedicated to arthouse cinema, primarily independent and non-commercial films.
I am asking you to remove the Nowe Horyzonty-specific URL processor from the current codebase and remove all references to “nowehoryzonty” from the project.
The apparent purpose of this functionality is to enable users to retrieve video segments from our platform and combine them into a downloadable video file. I understand that the software itself does not bypass DRM protection. Nevertheless, this platform-specific implementation was clearly intended to facilitate part of an unauthorised downloading process, which we consider unethical and potentially unlawful.
It is also important to point out that the implementation does not work with the current version of our platform. The method implemented here reproduces an older mechanism that generated signed segment URLs in the browser. We no longer use that signing method, and the current mechanism is different.
Despite this, the explicit use of the “nowehoryzonty” name has caused companies responsible for monitoring security threats on behalf of film distributors and VOD platforms to identify this project and raise an alert. This happened even though, as explained above, the implementation is no longer effective.
The presence of this functionality and the use of our name affect our reputation and require us to spend considerable time and effort explaining the situation to our partners and rights holders.
We therefore strongly urge you to act responsibly and:
Thank you for taking this matter seriously.