News for hackers. Stuff that matters.

A comment on Google Cast is now built-in to Chrome. Parent comment

Re:Google Cast is now built-in to Chrome by IanCal on Monday August 29, 2016 @02:24PM (#12383962)
That's not how it's done. That's a complete fallback.

For Netflix what happens is your browser tells the cast device what URL to go to to play the content. Your browser does not need to steam the video to the cast device. It can fall back to that so you can cast anything, however.

[ Parent | on HN ]
Re:Google Cast is now built-in to Chrome by ihsw on Monday August 29, 2016 @02:43PM (#12384147)
This is true but there are a couple caveats, one being the device playing the content has to already be authenticated properly.

You cannot simply go near a Cast-enabled device and start playing your stuff, unless I am mistaken. If that is the functionality then that would be terrifying as I would be handing my credentials to this Cast-enabled device.

[ Parent | on HN ]
Re:Google Cast is now built-in to Chrome by sarnowski on Monday August 29, 2016 @03:05PM (#12384326)
Actually this is how the chromecast works. You never interact with the chromecast directly to configure your Netflix account for example. I assume (hope) they send a URL to the movie it should play with a one-time token to access the movie source.
[ Parent | on HN ]
Re:Google Cast is now built-in to Chrome by ihsw on Monday August 29, 2016 @05:02PM (#12385281)
It is inevitable that plaintext username/password will be used. This is why I am terrified.
[ Parent | on HN ]
Re:Google Cast is now built-in to Chrome by tracker1 on Monday August 29, 2016 @06:07PM (#12385825)
Most likely it isn't a username/password but an authenticated URL... https://foo.bar.netflix.com/(UUID-OR-SIMILAR) where that is resolved to a resource, and the user authentication is valid for X hours from start...

There's no need for a plain username+password to be used... it's just an authentication token as the resource or part of the url.

[ Parent | on HN ]
Re:Google Cast is now built-in to Chrome by w-ll on Monday August 29, 2016 @06:19PM (#12385913)
They really just need to send the Netflix cookie from your browser to the chrome cast. But I don't think they do that, like sarnowski said, i believe they put some data in the url thats like a 1 time key for your account and the video you want to watch.
[ Parent | on HN ]
Re:Google Cast is now built-in to Chrome by corobo on Tuesday August 30, 2016 @04:34AM (#12388361)
Are you really terrified that your Netflix username and password may be revealed? It's a bit much.
[ Parent | on HN ]
Re:Google Cast is now built-in to Chrome by colemickens on Monday August 29, 2016 @03:19PM (#12384469)
Don't people check their assumptions before asserting them as facts?

I don't know why it's a terrifying concept either.

Anyway, Chromecasts can be configured to allow guest access at the device level. Phones that are even on distinct networks can still guest-Chromecast via ultrasonic noises emitted by the Chromecast. It's pretty nifty. It's nice to have a bunch of people over and have a shared YouTube queue. For more details (https://support.google.com/chromecast/answer/6109297?hl=en) expand the section "How do mobile devices connect with a Chromecast in guest mode?".

[ Parent | on HN ]
Re:Google Cast is now built-in to Chrome by Frank2312 on Monday August 29, 2016 @03:03PM (#12384305)
Not sure if it works with desktops/laptops, but there is a guest mode (disabled by default) in the settings (on the Android app) that allows anyone to add thing sto the player queue.

Only app I know for sure it works is Youtube. I'm not sure what other app handles it, maybe GPM and Spotify.

[ Parent | on HN ]