Feeds

Amazon plugs video leak flaw

Adobe handkerchief solves streaming snafu

Protecting against web application threats using SSL

Amazon has plugged a potentially revenue-draining flaw in its video streaming service by incorporating content encryption.

Previously, elements of the service - powered by streaming media server technology from Adobe - relied on video player instructions to control how content was delivered.

That left a loophole.

Tests by Reuters showed that by using video caching software, specifically Replay Media Catcher software from Applian Technologies, punters would have been able to get copies of films and TV shows without having to pay.

The problem with the service, from Amazon's point of view, stemmed with the fact that the full content of movies and TV shows was streamed to users before they actually payed as part of an architecture that emphasised usability and convenience for paying punters over security. The idea was paytards would not be faced with interruptions to their viewing once they paid - even though it's hard to imagine how the process of flashing the plastic wouldn't involve some interruption.

Adobe confirmed that Amazon solved the problem with its Video On Demand service by adding encryption, specifically the RTMPE protocol, supported by the latest version of its Flash media server software. Previously Amazon streamed both encrypted and unencrypted video to users but it has now switched over the encrypted feeds, Reuters reports. Amazon declined to speak to the news agency about its security practices.

Tests by Reuters suggests that other online media firms might be vulnerable to much the same class of problem. Adobe said it advised clients about the potential piracy issues posed by weakly controlled unencrypted streams in an advisory it published on 2 September. Its advisory can be found here. ®

Reducing the cost and complexity of web vulnerability management

More from The Register

next story
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
Infosec geniuses hack a Canon PRINTER and install DOOM
Internet of Stuff securo-cockups strike yet again
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.