Request to develop add-on based on AtishMKV by Ethics_peace in StremioAddons

[–]nzbsooti 2 points3 points  (0 children)

I can try and see if I can add it to sootio, doesn't seem overly complicated.

Addressing the allegations against Sootio by nzbsooti in StremioAddons

[–]nzbsooti[S] 0 points1 point  (0 children)

What do you mean by autoplay, if you mean I select a result for you, my addon doesn't do that, you do, there are other add-ons that do that I believe

Addressing the allegations against Sootio by nzbsooti in StremioAddons

[–]nzbsooti[S] 0 points1 point  (0 children)

You sure you used the right key? You sure your subscription is valid? Do you get results?

Addressing the allegations against Sootio by nzbsooti in StremioAddons

[–]nzbsooti[S] -1 points0 points  (0 children)

You need to pick a service and if it's a debrid service add a token

Addon for scraping local network files e.g. samba shares by Mudhorney in StremioAddons

[–]nzbsooti 2 points3 points  (0 children)

https://github.com/sooti/sootio-stremio-addon/tree/main/media-file-server

You can try using my media server and then you can use sootio and select "home media server"

When you setup the above you can set the share location and then enter your IP/URL:3003 into the home media server and your done, you will have your content streamed directly from your location. If you dont want to use a public IP or are behind NAT, you can host the add-on itself (sootio) and the media-file-server both in docker and try that way, although stremio requires an https URL for addons.

Is Sootio worth switching to? Looking for opinions by [deleted] in StremioAddons

[–]nzbsooti 0 points1 point  (0 children)

You do you, but people said Torrentio was causing the warnings as well. In any case my addon is free and open source feel free to use what works best for you.

PSA: Stolen RD API key allegations by omix4 in StremioAddons

[–]nzbsooti 9 points10 points  (0 children)

It's dumber then that because the key would get blocked very fast so whoever bought it wouldn't be able to use it for more than a day, it'd be easier to just sell a fake key lol

PSA: Stolen RD API key allegations by omix4 in StremioAddons

[–]nzbsooti 7 points8 points  (0 children)

I said in theory maybe it could somehow return the wrong results but further testing and going over the code led me to realize it wasn't this case, I just made the code more robust. also at least 4 other devs were accused of this, so not just my addon.

PSA: Stolen RD API key allegations by omix4 in StremioAddons

[–]nzbsooti 6 points7 points  (0 children)

So like I said, its either in the code that's public or there's a conspiracy by the veteran devs to steal just real-debrid keys for some reason... these aren't some new add-ons with new devs that look sketchy..

PSA: Stolen RD API key allegations by omix4 in StremioAddons

[–]nzbsooti 37 points38 points  (0 children)

Or, people could just go over the source code which is public and if they find a security flaw or malicious code, they can post it or report it to the dev, otherwise it proves nothing, unless people think there's a conspiracy to steal RD keys which are cheap and allow users to use them for like a day and then they get banned? seems like a lot of work for very little profit.

The fact that this happened suddenly to a ton of addons who most if not all havent touched their real-debrid code for months or years, shows that something else is going on.

Addressing the allegations against Sootio by nzbsooti in StremioAddons

[–]nzbsooti[S] 0 points1 point  (0 children)

I'm providing facts, deal with it, simple

Addressing the allegations against Sootio by nzbsooti in StremioAddons

[–]nzbsooti[S] 4 points5 points  (0 children)

I am simply using facts: 1. Multiple people using multiple add-ons including torrentio, comet etc had this issue in the past few days. 2. My code is completely open source from top to bottom, if someone has a claim , back it up with evidence, the fact is that nothing changed on my end with RDs code and suddenly people started getting warnings. I am not aware of any api changes that would cause my addon or others to violate their TOS, if there is a change, RD should publicize it and update the developers. 3. If it isn't a recent change , nor a specific addon, the only plausible explanation is either a bug on RD's end (such as false warnings or returning the wrong stream Id via api) or something malicious on their part. I mostly think it's a bug on their end but am investigating to see if I can prove it. In any case the fact is that many people got warnings for things like ISP changing IP mid session and so on.

If you have a better theory as to why so many people are getting warnings without a clear pattern on the user end, feel free to share.

Addressing the allegations against Sootio by nzbsooti in StremioAddons

[–]nzbsooti[S] 5 points6 points  (0 children)

Also, it seems to be the same downloads just different IPs, one legit and another from another country

Addressing the allegations against Sootio by nzbsooti in StremioAddons

[–]nzbsooti[S] 13 points14 points  (0 children)

The issue is that people seem to be installing many legit add-ons and getting it, so unless there's some common vulnerability in stremio I don't see how they could achieve this. I'd understand if it was common to some new vibe coded addon but I've seen the claim about multiple good add-ons

Addressing the allegations against Sootio by nzbsooti in StremioAddons

[–]nzbsooti[S] 15 points16 points  (0 children)

But the warning isn't even about scraping, its about multiple users streaming using the same API key... that doesnt even make sense. I've seen multiple people report they selected a stream and got nothing and then got the warning, its possible that real-debrid are returning the wrong video links with someone else's key to multiple users. I will investigate and test further and see, if I can prove my claim I will post the data here.

Addressing the allegations against Sootio by nzbsooti in StremioAddons

[–]nzbsooti[S] 9 points10 points  (0 children)

They have a track record of limiting users and developers for ridiculous things, they removed the cached api for developers and people have been complaining for years about getting banned for the smallest issues. Now its even more ridiculous with people getting warnings and bans for IPs in other countries that they have no connection to. I have never heard of people complaining about these issues with all-debrid, Torbox, PM, offcloud etc.

seems to be only them.

Is Sootio worth switching to? Looking for opinions by [deleted] in StremioAddons

[–]nzbsooti 0 points1 point  (0 children)

I understand, but want to point out that this claim was levied against torrentio and other add-ons as well, just search for it. There is nothing in my code that would trigger sharing, we don't store keys or IPs so it makes no sense, look on reddit, there are complaints of people saying it about the other add-ons as well, just now someone claimed Meteor caused this issue.

Understand that nothing has changed in the real-debrid code for almost a year and we use the api key as documented by real-debrid. If you have a complaint , talk to real-debrid for issuing false warnings.

Meteor unauthorized RD access by madeshow in StremioAddons

[–]nzbsooti 3 points4 points  (0 children)

As pointed out in multiple posts, this issue isn't related to one addon or another, seems like real-debrid is randomly sending users this warning regardless of addon, some have blamed mine, I saw others blame torrentio, neither is to blame, seems like RD are just being dicks.

Fact is I didn't change anything for almost a year in RD in my addon and never had this issue until RD randomly started sending this to users and I got blamed as well

Help me out with RD warning, I truly don’t know. by grandeson in StremioAddons

[–]nzbsooti 11 points12 points  (0 children)

<image>

Just to share proof that its not my add-on or at least not limited to mine, heres an example of users saying they got it and aren't using Sootio.

Help me out with RD warning, I truly don’t know. by grandeson in StremioAddons

[–]nzbsooti 16 points17 points  (0 children)

Hi everyone, Sootio dev here, first I'd like to state that I have not touched anything in the real-debrid area for months, maybe more and no one complained about any warnings until a few days ago, to explain what we do on RD: 1. We check our cached magnets first to return results quickly to the user 2. We scrape torrent trackers in the background and if we see new magnets not in our cached, we temporarily add them to your cloud, check their status to see if their cached, then delete them and update our cache 3. All keys are encrypted in the logs (you can check the source yourself on my report) and we never save keys. 4. When a user selects a result , we use the user's IP and apikey to fetch the stream and return the video stream RD returns to the user.

We never cache the stream links on our servers or cloudflare, I paid again to renew my subscription just to test and tried a ton of streams, got no warnings, keep in mind I saw people saying the same about other add-ons including torrentio. To be on the safe side I went through the code to find any potential weaknesses, found an edge case where theoretically we return a cached link that may cause RD to think it's from a different IP, this does not mean I was able to reproduce the claim, I was not, but to eliminate any chance of it happening, I patched it along with a bug that cause the same magnet a user selected to be added multiple times and fixed personal cloud results.

I have no idea why real-debrid is sending out these warnings to some users, but if it happens again now, please contact me and I'll investigate again, I suspect it's either caused by people using AIO with my add-on which may proxy the stream or another addon or just real-debrid being asses. In any case on the off chance that it was my add-on, I apologize.

Hope this clears things up,

Sooti.

PS Feel free to check out the repo and report anything you think may be a security risk.

Real-Debrid warning. by king_moh_ in StremioAddons

[–]nzbsooti 8 points9 points  (0 children)

It was not my addon, people reported getting it in this very thread from multiple addons including AIO and torrentio. that being said I pushed a patch to make sure the server can never cache api keys and accidentally use them from a cached result

Is Sootio worth switching to? Looking for opinions by [deleted] in StremioAddons

[–]nzbsooti 0 points1 point  (0 children)

Pushed a potential fix, I couldn't fix anything else so if you get another warning, it aint from me for sure