We're just throwing straight up piracy on HN now? We're vibing piracy now? Felonies via API?
inigyou•Jul 19, 2026
Yes. Unironically yes. Except that it's a misdemeanor. It's a felony for the author of this code and for dang if he doesn't remove this post (distributing piracy tools), but it's a misdemeanor for the ones watching the streams.
Razengan•Jul 19, 2026
FAAS
rideontime•Jul 19, 2026
Seems to be missing some context. What is this used for? Piracy?
pogue•Jul 19, 2026
It's an alternative way to cast media to your TV by way of somehow ripping the streaming video off said website or service.
xonery•Jul 19, 2026
It's a CLI that lets you select a movie, finds a matching stream from streaming websites, transcodes it, burns in subtitles in real time, and tells your TV to play it.
2gremlin181•Jul 19, 2026
Do I need to bring my own sources or is there a maintained list?
xonery•Jul 19, 2026
You mean the streaming website source ? You can use the one present in the config.yaml of the project, it works fine.
inigyou•Jul 19, 2026
it comes preconfigured with three different illegal pirate sites.
Lol. I wonder how that will hold up in court. "Your Honor, Castor is not designed for piracy" "Then why did the last version automatically access three pirate sites?"
rideontime•Jul 19, 2026
What kind of streaming websites? Like, Netflix? Amazon Prime?
mikeweiss•Jul 19, 2026
I agree, is the use case any video stream other than big established ( which already support casting)... So... bootleg sports streams?
xonery•Jul 19, 2026
It casts whatever stream's on the page, same as VLC plays whatever file you open.
cortesoft•Jul 19, 2026
I am not sure how this would help with piracy? It can only play a stream you already have access to, it doesn’t break encryption or anything.
You already have access to pirated streams. This app plays them for you. Check the source addresses in config.yaml.
krackers•Jul 19, 2026
I thought the whole point of turnstile was that it detects headless browsers and it's supposed to be "difficult" to bypass. Apparently this just simulates clicking on the checkmark. Is it really that easy?
xonery•Jul 19, 2026
Yes, kindof…
KomoD•Jul 19, 2026
> was that it detects headless browsers
> Apparently this just simulates clicking on the checkmark
Not just that. It also spoofs a bunch of browser stuff.
A standard headless browser will probably get flagged.
Saris•Jul 19, 2026
If you can make the browser pass all the other checks going on in the background, clicking the checkmark is all that's left.
bob1029•Jul 19, 2026
People have been automating WoW for a generation using things like peripherals duct taped to oscillating fans despite multi-million dollar budgets designed to defeat things far more sophisticated than this.
I would think of headless browser automation in exactly the same way you would about cheating in FPS video games. The red team always has the initiative and can win if they want to spend enough time and money.
jeroenhd•Jul 19, 2026
With the right simulated events, a headless browser becomes indistinguishable from a real browser without platform detection. It's not hard to figure out that these headless browsers are running a software renderer on Linux. In time, they're just going to have to detect Linux users and force them to fill out one or multiple challenges if workarounds like these keep getting used.
The checkbox is just a small part of what the checks are doing. It's monitoring everything the browser is doing and how the browser is responding to certain events up until you tick the checkbox, at which point it determines if you need one of those "are you human" challenges or if you can pass without interruption, based on how bot-like you are.
inigyou•Jul 19, 2026
The point of Turnstile is to sell a warm fuzzy feeling of security to website owners, block Tor users who don't enable JavaScript, and convince website owners to give a copy of all their traffic to the NSA for free.
Actual security is barely relevant except to the extent that if it doesn't add any security, the NSA might get worried that people will stop using Cloudflare.
Fake security - number of blocked users, which Cloudflare calls "bots" regardless of whether they're people or bots - is used in Cloudflare marketing.
xonery•Jul 19, 2026
Docker version on MacOS might not find your TV.
monksy•Jul 19, 2026
You probably have to expose it to do Upnp through the VM that is needed for docker on Macos.
j45•Jul 19, 2026
This is interesting, instead of a command line interface it made me wonder what an interface right on the tv could look like.
Comparisons to watching tv, are usually a TV interface, with a TV device/app, be it an Android TV/Apple TV, etc.
Maybe I'm missing it, I couldn't see a tv interface.
The part where it can send video to any kind of tv is a pretty remarkable piece.
defrost•Jul 19, 2026
It's also remarkably "old" in a digital sense:
Digital Living Network Alliance (DLNA) is a set of interoperability standards for sharing home digital media among multimedia devices. Introduced 2004; 22 years ago.
Google Cast is a proprietary protocol developed by Google for playing locally stored or Internet-streamed audiovisual content on a compatible consumer device. The protocol is used to initiate and control playback of content on digital media players, high-definition televisions, and home audio systems using a mobile device, personal computer, or smart speaker. The protocol was first launched on July 24, 2013; 12 years ago.
Usually piracy software tries to maintain a little plausible deniability, but here this is suggesting it will help you stream this weekend's newly released $250m blockbuster.
I’m not against piracy but the initial pitch made it seem like it’s more purely for trying to cast streams embedded in websites that you already are visiting and/or have access to, of which do not “allow” you to cast, or for whatever reason only work on a laptop and not on something like AirPlay. But the LLM-slop description of “random websites” in addition to the option for a TVDB API key confuse me as to what the actual focus is here.
quantummagic•Jul 19, 2026
It could just be streaming the trailer.
xonery•Jul 19, 2026
Main use case
slg•Jul 19, 2026
I mean I get it, but also it's funny that you commented this 5 minutes after you edited the readme[1] to add in the exact type of plausible deniability I remarked was absent.
I suppose it searches your configured sources for that movie and comes back "not found"
Stremio does this. Stremio is a legal application that finds media from any configured plugin. You're supposed to add the illegal Torrentio plugin to automatically pirate media. By doing it this way, most development can take place in public.
A similar situation exists with the emulator Azahar and the illegal fork Azahar Plus which can automatically decrypt games.
Edit: lolno this project just has pirate sites built into it
ranger_danger•Jul 19, 2026
Can you cast to a Roku device with this?
kls0e•Jul 19, 2026
I tried with v1.4.1, TVs running Roku TV do not seem to be supported at this point of time, at least "castor scan" does not yield any results. Roku TV does support Apple AirPlay as an add-on as you probably know.
dtagames•Jul 19, 2026
For a no hacks alternative, I built TV Explorer. It puts the channel's published HLS stream into your browser with no interim steps. Uses the public GitHub list of more than 10,000 free channels.
That is an unbelievably slick thing that you've got there.
It feels very light-weight, it's approximately instantly-responsive. Back button works. I don't understand the stats (or my contribution to them), but whatever.
(the closed-captioning pop-up causes some overlay issues for me, though)
moar edit: Upon further review with my very not-special desktop box, I'm reasonably confident that this is the quickest, most-responsive "TV-watching" experience I've had since analog NTSC left the scene ~eons ago. It's fast like switching from channel 11 to channel 13 used to be with the very quickest and most well-behaved of tuners.
What aren't you doing that everyone else is doing?
mschuster91•Jul 19, 2026
> What aren't you doing that everyone else is doing?
Seems to be the fact that there's no advertising, tracking or other SDKs and the entire JS is contained in two files.
dtagames•Jul 19, 2026
Thank you for noticing!
ninkendo•Jul 19, 2026
> Back button works
Maybe a little too well... I tried a whole bunch of channels to get an idea of which ones work, and my history was too full to get out of the site. Maybe every channel change doesn't need to push to your history list.
michaelmrose•Jul 19, 2026
Generally filling up the buffer is fine. It's perfectly normal that after viewing a certain number of documents one has to manually decide where to go.
You know what you need. A button that goes back but instead of going to the prior document goes to the first document with a different domain than the current one.
ninkendo•Jul 19, 2026
Yeah, I'm not convinced it's really the site's fault... I can understand the logic of wanting the back button to go back a channel, but also I generally want to go "out" of a page when I hit the back button, so there's no real one-size-fits-all answer.
But speaking only for myself, if history.pushState was removed from my browser I would probably be happier in the end. JavaScript SPA's abuse it 10x more often than they use it appropriately, I'd rather that if you're an SPA anyway, you implement your own in-app navigation and let my browser's mean "get me out of this app". Lord knows SPA's already reinvent every other web standard, why not one more...
michaelmrose•Jul 20, 2026
I want a back button and a button to the left with a double arrow back like Rewind and for the browser to maintain both a buffer of prior pages and one at least as long of prior root sites with right-click showing this list
dtagames•Jul 19, 2026
Very good point. Thank you, and I'll put a limit on it. 10?
rendaw•Jul 20, 2026
Tangentially, I wonder why browsers can't store more than N history items... even from the same session.
dtagames•Jul 19, 2026
Thank you so much! What a nice thing to hear.
The short version is that it uses my own engine, called Watson. I used to work for a small game studio inside a big company and my specialty was tooling. I had built my own before I started there and when they shutdown, it evolved into Watson[0].
It's lightweight because it's a static site with no server, it has no spying code or SDKs, and it puts the broadcasters HLS stream URL directly into a <video> element in your browser with minimal intervention.
Looks potentially very nice but the majority of the channels I tried were "blocked in my area or not broadcasting"
dtagames•Jul 19, 2026
Thanks for the feedback and I'm sorry that happened. Because the data comes from a public GitHub list of channels, the app has no way to know what will be geoblocked for you (or not) or actually online at the moment (or not) until you try to tune it -- very much like an old analog TV.
But... TV Explorer does keep track of what's tunable (with status lights down the left column) and also lets you scan in the background to find the ones that are live for you right now.
Magnificent thing you made, and the scanning is awesome. My problem is that it seems that I can't put more than one filter of the same type on i.e. (Spanish AND English), and if I switch between languages within the filter, the scan is reset.
dtagames•Jul 20, 2026
Thank you so much for that!
It does only allow filtering by one language at a time, but you can build your hotbar of the stations you like that you find across any filters.
The scan works on the displayed results. If you change the filter, it starts with the new list -- but all the results are saved regardless.
Hope that makes it a bit bitter!
squigz•Jul 19, 2026
In case anyone else runs into this: the Stats section was not shown for me by default and I had to enable it in Settings.
Really great site though!
Quick suggestion: let us resize the channel browser when it's horizontal, and perhaps allow collapsing it altogether
dtagames•Jul 20, 2026
Thanks so much for the compliment!
When your window is wide enough (on desktop), you should be able to drag the split point between the TV display and the channel list.
jusonchan81•Jul 19, 2026
This is incredible! It loaded so fast on my mobile and I’m able to watch channels from all over. Amazing stuff man. It requires a thread of its own
I think https://tv.garden/ has more channels than your especially if i look at Japan
asimpletune•Jul 19, 2026
Both of these are amazing
maxweylandt•Jul 19, 2026
Seems to depend on the country, tv.garden has nothing in Namibia, for example
drewrbaker•Jul 19, 2026
This as a Jellyfin plugin would be awesome!
normie3000•Jul 19, 2026
Just stays on the loading screen for me (Safari, iOS 26).
b112•Jul 19, 2026
Same here. I wonder if it's hugged to death?
jarym•Jul 19, 2026
Love it
dtagames•Jul 19, 2026
Thank you, kindly!
supersparrow•Jul 19, 2026
This is amazing! Can this be self hosted?
dtagames•Jul 19, 2026
It is a static site that doesn't require a server and can be hosted anywhere.
nickzelei•Jul 19, 2026
This is probably the nicest IPTV site I’ve ever seen, nice work!!
dtagames•Jul 19, 2026
I'm so honored that you feel that way, and thank you for saying so!
sharts•Jul 19, 2026
dis sum good stuff
dtagames•Jul 19, 2026
Thanks bro!
mcmoebius•Jul 19, 2026
that's INCREDIBLE! thanks so much for creating and sharing this!
dtagames•Jul 19, 2026
The pleasure is mine, and thank you for saying so!
hperrin•Jul 19, 2026
> I built it because I couldn't cast web video from my laptop to my TV: no Chromecast, no AirPlay.
Looks like Claude built it.
yard2010•Jul 19, 2026
You're absolutely right and let me be honest about the honest load-bearing smoking-gun you point at.
dimator•Jul 19, 2026
That's the core tension — and you're right to call it out! Let me walk back my claims.
Razengan•Jul 19, 2026
Yearly Quota Exceeded. Click here to buy the $69/minute plan.
simondotau•Jul 19, 2026
I'm pretty sure it was built by a compiler, using libraries provided by Google and others. Until Claude can directly output machine code packaged for distribution, it's just another middleman between the source of intent (the human) and the final deliverable.
</sarcasm, mostly>
xonery•Jul 19, 2026
Claude helped me out for sure, i'm not a DLNA or FFMPEG beast, but i solved a problem I had and that's what matters. If it solved a problem you have, even better.
haaz•Jul 19, 2026
Yeah don't listen to HN dorks. Unless youve handwritten the code using Mayan virgin blood on papyrus scrolls they will complain.
goodmythical•Jul 19, 2026
Dude didn't even harvest the quill himself. Back in my day you had to track a bird for hours just praying they'd drop a feather so you didn't have to actually catch the thing. Of course, the Smith family had a bow, so you'd maybe borrow a bow but then you were praying you didn't lose or break the arrow because then you're out the labor for the quill you didn't get AND the arrow!
sgt•Jul 19, 2026
"Helped me build" usually means it was vibe coded AI slop.
fortyseven•Jul 19, 2026
Did the app work?
goda90•Jul 19, 2026
While I think responsible use of AI coding tools is possible, "working" is a low bar for software. Does it accomplish the intended function securely, performantly, with reasonable error handling?
vivzkestrel•Jul 19, 2026
- very stupid comment: i still have no idea what this project does even after reading the README
- can someone kindly explain what is the actual problem statement and what the author is trying to solve here?
inigyou•Jul 19, 2026
You type in the ID of a movie and it pirates it for you
aussieguy1234•Jul 19, 2026
Can this be used without a TV, lets say if I just want to play the streams with VLC?
dizhn•Jul 19, 2026
I would hope it would do the "find and extract stream source" on the web page bit well. (This is quite hard on some sites). From there VLC can handle it.
I use "Web Video Caster" on Android to stream videos from websites to my TV. Free version is fine.
stef25•Jul 19, 2026
Immediately worked for me on a simple Samsung bought 15+ years ago.
>Castor launches headless Chrome with a randomized fingerprint and stealth scripts to hide automation.
you lost me in there.
m00dy•Jul 19, 2026
I work with browser fingerprinting, so I took a look at the repo to see what it actually does. From what I can tell, it only patches navigator, the Audio API, and the Canvas API. That is pretty basic, so it will likely get flagged easily.
inigyou•Jul 19, 2026
Depends what you're trying to bypass. Cloudflare isn't as strict as Google.
m00dy•Jul 19, 2026
depends on what you're trying to bypass in Cloudflare, turnstile or interstitial ?
inigyou•Jul 19, 2026
This situation where bots have to run a headless browser in a new profile is just stupid. Can we have the old internet back? Please? Cloudflare you're not stopping bots, you're just wasting effort on both sides while siphoning access logs and passwords to the NSA.
paxys•Jul 19, 2026
It's about as much effort as a torrent, so I don't see the point.
15 Comments
sources: - proxies: - "https://vidsrc-embed.ru" templates: movie: "/embed/movie/{itemID}" episode: "/embed/tv/{itemID}/{season}-{episode}"
> Apparently this just simulates clicking on the checkmark
Not just that. It also spoofs a bunch of browser stuff.
A standard headless browser will probably get flagged.
I would think of headless browser automation in exactly the same way you would about cheating in FPS video games. The red team always has the initiative and can win if they want to spend enough time and money.
The checkbox is just a small part of what the checks are doing. It's monitoring everything the browser is doing and how the browser is responding to certain events up until you tick the checkbox, at which point it determines if you need one of those "are you human" challenges or if you can pass without interruption, based on how bot-like you are.
Actual security is barely relevant except to the extent that if it doesn't add any security, the NSA might get worried that people will stop using Cloudflare.
Fake security - number of blocked users, which Cloudflare calls "bots" regardless of whether they're people or bots - is used in Cloudflare marketing.
Comparisons to watching tv, are usually a TV interface, with a TV device/app, be it an Android TV/Apple TV, etc.
Maybe I'm missing it, I couldn't see a tv interface.
The part where it can send video to any kind of tv is a pretty remarkable piece.
[1] - https://github.com/stupside/castor/commit/847abd1ad0dbe893fc...
Stremio does this. Stremio is a legal application that finds media from any configured plugin. You're supposed to add the illegal Torrentio plugin to automatically pirate media. By doing it this way, most development can take place in public.
A similar situation exists with the emulator Azahar and the illegal fork Azahar Plus which can automatically decrypt games.
Edit: lolno this project just has pirate sites built into it
https://tvexplorer.live
It feels very light-weight, it's approximately instantly-responsive. Back button works. I don't understand the stats (or my contribution to them), but whatever.
(the closed-captioning pop-up causes some overlay issues for me, though)
moar edit: Upon further review with my very not-special desktop box, I'm reasonably confident that this is the quickest, most-responsive "TV-watching" experience I've had since analog NTSC left the scene ~eons ago. It's fast like switching from channel 11 to channel 13 used to be with the very quickest and most well-behaved of tuners.
What aren't you doing that everyone else is doing?
Seems to be the fact that there's no advertising, tracking or other SDKs and the entire JS is contained in two files.
Maybe a little too well... I tried a whole bunch of channels to get an idea of which ones work, and my history was too full to get out of the site. Maybe every channel change doesn't need to push to your history list.
You know what you need. A button that goes back but instead of going to the prior document goes to the first document with a different domain than the current one.
But speaking only for myself, if history.pushState was removed from my browser I would probably be happier in the end. JavaScript SPA's abuse it 10x more often than they use it appropriately, I'd rather that if you're an SPA anyway, you implement your own in-app navigation and let my browser's mean "get me out of this app". Lord knows SPA's already reinvent every other web standard, why not one more...
The short version is that it uses my own engine, called Watson. I used to work for a small game studio inside a big company and my specialty was tooling. I had built my own before I started there and when they shutdown, it evolved into Watson[0].
It's lightweight because it's a static site with no server, it has no spying code or SDKs, and it puts the broadcasters HLS stream URL directly into a <video> element in your browser with minimal intervention.
[0] https://watsonengine.io
But... TV Explorer does keep track of what's tunable (with status lights down the left column) and also lets you scan in the background to find the ones that are live for you right now.
https://tvexplorer.live/help/25-things-18
It does only allow filtering by one language at a time, but you can build your hotbar of the stations you like that you find across any filters.
The scan works on the displayed results. If you change the filter, it starts with the new list -- but all the results are saved regardless.
Hope that makes it a bit bitter!
Really great site though!
Quick suggestion: let us resize the channel browser when it's horizontal, and perhaps allow collapsing it altogether
When your window is wide enough (on desktop), you should be able to drag the split point between the TV display and the channel list.
https://news.ycombinator.com/item?id=48969373
https://tvexplorer.live/help/ways-to-watch
and...
https://tvexplorer.live/help/25-things-07
Looks like Claude built it.
</sarcasm, mostly>
- can someone kindly explain what is the actual problem statement and what the author is trying to solve here?
I use "Web Video Caster" on Android to stream videos from websites to my TV. Free version is fine.
What's the best way to use it, write your own search to parse all the json pages https://vsembed.ru/movies/latest/page-1.json ?
you lost me in there.