Skip to main content
Z
ZzionN
Inspiring
January 22, 2009
Answered

I've done SSAS,Disable RTMP, swf verification hash timeout..

  • January 22, 2009
  • 4 replies
  • 1059 views
I have followed the protection white paper to..
1.Disable RTMP access by SSAS
2.Use that challenge response to send and recieve a random number by SSAS
3.enable swf verification with hash timeout

I still can download the videos using replay media catcher.
I am wondering the RTC is being updated to pass throught all checking.
What's more can I do?

Flash Interactive Media Server 3.0
Microsoft Server enterprise 2008
    This topic has been closed for replies.
    Correct answer
    Did you try changing the method name of nc.verifyClient? I'm just guessing here, but since the purpose of Replay is to steal content, it wouldn't surprise me if the developers of replay added a verifyClient method to their code assuming that many people would just copy and past code from the article you linked to.

    4 replies

    A
    Anonymous
    January 22, 2009
    Wow... that's really sad. I was sort of hoping I was wrong. I guess when you're in the business of building content stealing software, you gotta do what you gotta do.

    I've blogged about it so the aggregators that read my blog will pick it up.
    Z
    ZzionNAuthor
    Inspiring
    January 22, 2009
    Thanks JayCharles
    You are correct!
    They really hard coded that method!
    I think this post could help many people to solve their problems.
    A
    Anonymous
    Correct answer
    January 22, 2009
    Did you try changing the method name of nc.verifyClient? I'm just guessing here, but since the purpose of Replay is to steal content, it wouldn't surprise me if the developers of replay added a verifyClient method to their code assuming that many people would just copy and past code from the article you linked to.
    A
    Anonymous
    January 22, 2009
    The fact that replay is getting past your challenge/response suggests that there might be a hole in your code somewhere, as I don't think replay would be capable of handling a custom method (the method and it's response handler would need to be present in Replay to to that).

    Can you post the code you're using? That would help to identify the issue.
    Z
    ZzionNAuthor
    Inspiring
    January 22, 2009
    I am using the client and server sid script in page 23
    http://www.adobe.com/devnet/flashmediaserver/articles/protecting_video_fms.pdf
    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices