Securing media (.avi, mpg) files in a webpage

[SpagettiProg]

Hi everyone,

Does anyone have any links to tutorials that teach how to secure a media file in a website?

I was asked to create a .aspx page that contains media files (viewable to the user), but that the users cannot view the source page and see where the file is located and download it locally. I'm sure they can save the page locally, and then view it in notepad, but I need to make it difficult for them to get the file.

At this time, all I know is how to embed them with a simple tag.

Any links or comments are appreciated.


Thanks

[Lord_Rat]

You should use streams then. It takes some really dedicated people to download and save streams. Well beyond the capabilities of even the casual hacker.

[SpagettiProg]

Thanks very much for your reply.


I guess, I'm gonna have to reveal my real intent of the question. It's really not that bad.

I want to learn about media embedding security because sometimes I find a video in a website, in which I would like to just download it.
I'm not a hacker or a pirate. I don't even download free music. If I like the song, I'll buy the DVD.

Anyways, I have an app (that I purchased) for recording streamming media.
I was more concerned about media that is not streamed, and just embedded.
I've trying following the javascript code, to see if it will maybe reveal the real
location of the file, but not had luck.

I tried searching for site's about best practices for securing media in your website, and not had luck either. I was hoping that by studying those best practices, It would possibly lead me to look in other places to accomplish my goal.


I know you probably don't like people asking questions about how to steal something from a website. It's not like I'm gonna sell it. Also, those mini videos are sometimes news broadcast, that I would like to keep a copy of.

Thanks, and sorry if this is an innapropriate post.

[Lord_Rat]

There is no response that I can give that would be appropriate other than to tell you to check with the TOS of the Web site.

[mendhak]

I don't get it. Do you want to be able to record media from a website, or are you trying to figure out how to successfully 'hide' it so that it is difficult to get to?

[SpagettiProg]

I don't get it. Do you want to be able to record media from a website, or are you trying to figure out how to successfully 'hide' it so that it is difficult to get to?

Both. Any links to sites, tutorials etc.
I can't seem to find anything with google, and I'm pretty good with google.

[mendhak]

Alright, to record streaming media, I once came across a software called EasyRadio. It hooks into your soundcard and directly records the output from there.

Now, second part... hiding your own media files.

What is going to happen, is that you will be placing the path to your media file somewhere. It may be inside files inside files, but eventually, someone dedicated enough can get to it.

You could attempt to obfuscate and make your code overly complex... for example

PlayMedia(3874);

This javascript function then calls up a bunch of string concatenation routines to create the proper media name, for example DEFAULTMEDIA_3874.wmv and then give that value to the media player.

The other way, if you're willing to shell out money, is to go for an HtmlProtector software which will obfuscate your html (simply by writing it all out as urlencoded javascript)

[Serge]

Sorry....not possible to hide the source in the web page....

There are always ways to get it. On the web, everything is being downloaded to the client anyways....Even with streaming video/audio there are ways to get them saved