Better and Cheaper Than IPTV

Original Article ↗ Hacker News Discussion ↗

An open-source tool called Castor, which scrapes and casts web video streams to TVs, is drawing scrutiny for effectively enabling easy access to pirated movies and shows, despite recent attempts by its author to soften that framing. Commenters debate the legal and ethical implications of shipping piracy-oriented defaults, the technical tricks used to bypass protections like Cloudflare Turnstile via headless browsers, and how much of the project may have been AI-assisted. In contrast, others highlight fully legal alternatives such as TV Explorer, a lightweight browser-based IPTV interface built on public HLS streams, praising its speed, simplicity, and lack of tracking or ads.

What Castor Does

  • CLI app that:
    • Lets users search/select a movie or episode (via TMDB/TVDB-style IDs).
    • Uses configured “sources” to find an embedded stream on websites.
    • Launches headless Chrome, extracts the stream, transcodes it with ffmpeg, can burn in subtitles, and casts to TVs via DLNA/Google Cast.
  • Some confusion: several commenters say the README doesn’t clearly explain the problem statement; others summarize it bluntly as “type in an ID and it pirates it for you.”

Piracy, Legality, and Plausible Deniability

  • Strong concern that the project is effectively a piracy tool:
    • Default config.yaml previously contained multiple known pirate streaming sites and torrent-based endpoints.
    • Critics note this undercuts claims that it’s “not designed for piracy,” despite later README edits to soften language.
  • Legal discussion:
    • One view: distributing such tools could be a felony, while simply watching pirated streams may be a misdemeanor (jurisdiction-dependent, not fully resolved).
    • Some compare it to Stremio: legal core app with user-added piracy plugins, but here the pirate sources were baked in.

Technical and Anti-Bot Aspects

  • Castor’s Turnstile bypass:
    • Uses headless Chrome with “randomized fingerprint” and stealth scripts.
    • Some say this only patches a few browser APIs (navigator, audio, canvas), so sophisticated fingerprinting could still detect it.
    • Debate over Cloudflare Turnstile’s real effectiveness; several argue anti-bot systems mostly create friction and data collection rather than true security.

Device Support and UX

  • Works for some older DLNA TVs (e.g., 15+ years old Samsung).
  • Docker on macOS may not see TVs due to networking/UPnP isolation.
  • Roku TV not detected by current scan, though Roku supports AirPlay as a workaround.
  • Some want a native TV UI instead of CLI; others just want the extraction step to feed VLC.

Alternative: TV Explorer

  • Highlighted as a “no hacks” alternative using public HLS streams from a GitHub channel list.
  • Praised for:
    • Very fast, lightweight static-site implementation with minimal JS and no tracking/ads.
    • Clean UX, responsive navigation, and channel scanning with geoblock awareness.
  • Feature requests include better history handling, multi-language filters, and layout tweaks.

AI-Assisted Development

  • The author acknowledges using an LLM for help with DLNA/ffmpeg aspects.
  • Mixed reactions:
    • Some dismiss this as “AI slop.”
    • Others argue outcomes matter more than the tool used, while noting that “it works” is not the same as secure or robust.