Hello everyone I'm new to the forum and have some questions that maybe someone here can help me with.
How to retrieve the audio URL that the pandora client is using.
Not long ago you could query the pandora server and get an xml file which contained the information that the pandora client displayed along with the audio url of the song. Well they got wind of this and modified it slightly. The audio url is now in this form
hxxp: audio-inap10-sjl10. pandora. com/access/?version=4&lid=13984893&token=jwwQndF%2Fa5rxLOy%2Bnc2R2hAuOwLUgo5icI
O3qjj5FbEkoqonR5DOIb%2FbyhHN5%2FPpyQhNEJDsGtOQGg%2B1z9bxseiKTPP2QXOBy38e5sbTpCkRBG27rwz%2F8a7cJ2YU4dwj1ydLfP5gt
D1Xteo%2BYRJprOhjQEGJytj2uh5k%2FLVLflTfxkqvxl21nuM9XiCGjuvcGCqCpon9u%2FMhhfpLb8ebfebb1b2b9b955c28500edf921b14f3a665d09d43a156
Well when the flash player connects for this song it uses this url
hxxp: audio-inap10-sjl10. pandora. com/access/?version=4&lid=13984893&token=jwwQndF%2Fa5rxLOy%2Bnc2R2hAuOwLUgo5icIO3qjj5FbEkoqon
R5DOIb%2FbyhHN5%2FPpyQhNEJDsGtOQGg%2B1z9bxseiKTPP2QXOBy38e5sbTpCkRBG27rwz%2F8a7cJ2YU4dwj1ydLfP5gtD1Xteo%2BYRJprOhjQE
GJytj2uh5k%2FLVLflTfxkqvxl21nuM9XiCGjuvcGCqCpon9u%2FMhhfpL4FORCQDIvOpO882O
note the differences in the end of the url
b8ebfebb1b2b9b955c28500edf921b14f3a665d09d43a156 for the encrypted url
4FORCQDIvOpO882O for the decrypted url
So the flash player is decrypting the last 48 bytes of the url to get the true location of the song.
Here's the problem!
I have decompiled the flash program and discovered the app is using blowfish to decode the last 48 bytes of the url. I cannot however replicate
this decryption. I am not a actionscript guru so I could use some help figuring out why the code isn't working. If you know anything about blowfish the key arrays are plaintext in the decompiled code but I can find where a password is used for the encryption/decryption. I also have a working implementation of blowfish in flash that I've been playing with. If anyone is interested and is not a representative of Pandora I will send you what Ive got so far. Figuring this out would pretty much give us unlimited downloads of whatever songs we want. Time shifting at hyperspeed.
email travis. taylor@ttu. edu
