Research Joyn scripts obfuscation

Alexey Berezin
3 min readMay 4, 2020
UI for TV series in Chrome

Joyn (previously 7TV) is German “Netflix” which has films, TV series and live TV.

Did you hear anything about code obfuscation? Let’s have a look at Joyn video player and how they use that in production.

Scripts and modules

Let’s open any TV series and see what scripts are in Network panel of DevTools. There are scripts which are loaded from static.t1p-vod-playout-prod.aws.route71.net

DevTools > Network with filter by static.t1p-vod-playout-prod.aws.route71.net

ad-tracker.min.js

The module name is @vod/ad-tracker

It tracks ad events based on your advertising playback.

playback-source-fetcher.min.js

The module name is @vod/playback-source-fetcher

It requests https://static.t1p-vod-playout-prod.aws.route71.net/playback-source-fetcher/config/psf.json with server config.

Result of /psf.json with API gateway, entitlement, provider and other specific metadata for playback

player-heartbeat-producer.min.js

--

--