question about streaming video - GoFuckYourself.com

mikesouth · 06-11-2009, 01:02 PM

OK I have streaming video working, now I have tried to secure it for members only

Im using Wowza if that matters

The members area uses html authorization with strong box

I have put the player behind the members areas as well as the streams

I have set wowza to only accept calls from www.mysite.com

Is this secure?

what about spoofing the URL? is that possible with strongbox installed? If so I can go to secure tokens I think to make that impossible

anyone see any holes in this?

Thanks In advance

AAB · 06-11-2009, 10:08 PM

Good questions. BUMP for answers.

SGS · 06-12-2009, 12:23 AM

I would like to know more about this too as we are just setting up Wowza as well.

Robbie · 06-12-2009, 12:31 AM

I'm pretty sure that your stuff can be stolen right now with Replay Media. I worked on securing my content with streaming for a long while. And the final piece of the puzzle was provided to me by Stickyfingers

He definitely knows how to help you get that secured Mike. I would suggest you talk with him and pay him to take care of it for you. It requires multiple layers of security scripted in to stop all the different ways to sniff out your vids and steal them.

Mutt · 06-12-2009, 12:36 AM

I believe implementing the secure tokens thing with Wowza can secure your streams.

Robbie · 06-12-2009, 12:39 AM

Quote:

Originally Posted by Mutt

I believe implementing the secure tokens thing with Wowza can secure your streams.

It won't stop the members from downloading that stream. ReplayMedia will steal that every time

mikesouth · 06-12-2009, 05:23 PM

see thats the problem I am having, the guys at wowza give me coding examples from a version of wowza that is over a year old. There is no application front end to do stuff that should be simple and the guys at the hosting company dont appear to knmow any more about it than Ido

I coulda got Red5 for free and learned it myself instead of paying to do the same with wowza

Im prolly gonna cancel the wowza license and revert to html streaming until someone gets a mature product out

mikesouth · 06-12-2009, 05:25 PM

i can live with members downloading the stream but not non members

Mutt · 06-12-2009, 05:27 PM

Quote:

Originally Posted by mikesouth

Im prolly gonna cancel the wowza license and revert to html streaming until someone gets a mature product out

Robbie says stickyfingerz has a solution that works

wowza license if i recall is very reasonably priced

AdultSoftwareSolutions · 06-12-2009, 05:35 PM

The flash player will be connecting over RTMP. There is no referrer tag sent so you can't just accept traffic from that site. Usually people do something like setting a shared object based off some proprietary hash (IP + time) and then check to see if it is valid before serving content.

mikesouth · 06-12-2009, 05:47 PM

Quote:

Originally Posted by AdultSoftwareSolutions

The flash player will be connecting over RTMP. There is no referrer tag sent so you can't just accept traffic from that site. Usually people do something like setting a shared object based off some proprietary hash (IP + time) and then check to see if it is valid before serving content.

thats what secure tokens is supposed to do but I cant find a resource to tell me how to do it.

Im not big on wowza right now bwcause of lack of support, plain and simple...this stuff should be built in not coded in by me

06-11-2009, 01:02 PM	#1
mikesouth Confirmed User Industry Role: Join Date: Jun 2003 Location: My High Horse Posts: 6,334	question about streaming video OK I have streaming video working, now I have tried to secure it for members only Im using Wowza if that matters The members area uses html authorization with strong box I have put the player behind the members areas as well as the streams I have set wowza to only accept calls from www.mysite.com Is this secure? what about spoofing the URL? is that possible with strongbox installed? If so I can go to secure tokens I think to make that impossible anyone see any holes in this? Thanks In advance __________________ Mike South It's No wonder I took up drugs and alcohol, it's the only way I could dumb myself down enough to cope with the morons in this biz.

06-12-2009, 12:23 AM	#3
SGS Confirmed User Industry Role: Join Date: Dec 2002 Location: Mallorca - Nottingham Posts: 5,176	I would like to know more about this too as we are just setting up Wowza as well. __________________ See sig...

06-12-2009, 12:31 AM	#4
Robbie Leaner, Meaner, Faster Industry Role: Join Date: Aug 2002 Location: Vegas Posts: 20,959	I'm pretty sure that your stuff can be stolen right now with Replay Media. I worked on securing my content with streaming for a long while. And the final piece of the puzzle was provided to me by Stickyfingers He definitely knows how to help you get that secured Mike. I would suggest you talk with him and pay him to take care of it for you. It requires multiple layers of security scripted in to stop all the different ways to sniff out your vids and steal them. __________________ -Robbie ClaudiaMarie.Com

06-12-2009, 12:36 AM	#5
Mutt Too lazy to set a custom title Industry Role: Join Date: Sep 2002 Posts: 34,431	I believe implementing the secure tokens thing with Wowza can secure your streams. __________________ I moved my sites to Vacares Hosting. I've saved money, my hair is thicker, lost some weight too! Thanks Sly!

06-12-2009, 05:23 PM	#7
mikesouth Confirmed User Industry Role: Join Date: Jun 2003 Location: My High Horse Posts: 6,334	see thats the problem I am having, the guys at wowza give me coding examples from a version of wowza that is over a year old. There is no application front end to do stuff that should be simple and the guys at the hosting company dont appear to knmow any more about it than Ido I coulda got Red5 for free and learned it myself instead of paying to do the same with wowza Im prolly gonna cancel the wowza license and revert to html streaming until someone gets a mature product out __________________ Mike South It's No wonder I took up drugs and alcohol, it's the only way I could dumb myself down enough to cope with the morons in this biz.

06-11-2009, 10:08 PM	#2
AAB Confirmed User Join Date: Apr 2009 Location: Alberta Posts: 874	Good questions. BUMP for answers.

06-12-2009, 05:25 PM	#8
mikesouth Confirmed User Industry Role: Join Date: Jun 2003 Location: My High Horse Posts: 6,334	i can live with members downloading the stream but not non members __________________ Mike South It's No wonder I took up drugs and alcohol, it's the only way I could dumb myself down enough to cope with the morons in this biz.

06-12-2009, 05:35 PM	#10
AdultSoftwareSolutions Confirmed User Join Date: Mar 2009 Posts: 193	The flash player will be connecting over RTMP. There is no referrer tag sent so you can't just accept traffic from that site. Usually people do something like setting a shared object based off some proprietary hash (IP + time) and then check to see if it is valid before serving content. __________________ Adult Software Solutions (ICQ 559884738) PHP, MySQL, Flash, Actionscript, Java, Wowza, CMS, Tube, VOD, CRM, Dating, Social Networks, Paysites, TGPs, Directories and more. If you can think it I can build it.