Skip to main content
  1. Home
  2. Computing
  3. Legacy Archives

Flash Flaw Exposes Amazon Video to Piracy

Add as a preferred source on Google
Flash Flaw Exposes Amazon Video to Piracy
Image used with permission by copyright holder

This is exactly the reason record labels and movie studios tried to avoid offering their material online for years: a security issue in Adobe’s Flash media servers potentially enables users of Flash-based video services like Amazon’s Video on Demand service to download and copy as much video as they like.

The issue impacts sites that use Adobe’s media encryption technology and video player verification: cases exist where Adobe’s Flash video stream is not truly encrypted on the way from the video server to a user’s Flash-based player, potentially enabling users to capture video streams. The vulnerability in Amazon’s Video on Demand service comes from the free two-minute previews of material that it offers users before they buy: the two minute previews stop playback in a user’s Web browser, but the entire video stream is still accessible to stream-catching software.

Recommended Videos

Popular stream catchers include Replay Media Capture from Applian Technologies.

Adobe has said in a statement that its committed to both protected Flash users from vulnerabilities, as well as protecting the rights of content providers and producers. Last month, the company published a security note outlining techniques content providers can use to validate video is being viewed by a “real” Flash player rather than a stream catcher.

Although industry watchers expect Adobe will integrate more robust security technology soon in order to discourage casual piracy, many note that pirated videos, movies, and television shows are readily available via file-sharing services and other venues, and that using a stream catcher is more trouble and complication than most computer users will tolerate. However, stream catching technology is not, in and of itself, necessarily a bad thing, and can certainly be used within generally-accepted realms of fair use under existing copyright law.

Geoff Duncan
Former Contributor
Geoff Duncan writes, programs, edits, plays music, and delights in making software misbehave. He's probably the only member…
Arc browser is shutting down in December. Long live, ya trailblazer!
The browser that revolutionizes tab management is finally riding into the sunset.
Arc browser farewell note.

Arc browser is shutting down on December 22, following a long spell of maintenance-only work as the company behind it moves forward with its successor, Dia. Earlier today, The Browser Company announced that the beloved web browser will ride into the sunset in two months, but will continue development of the Dia browser.

"That's not an easy sentence to write. We spent years building Arc and celebrating each and every release along the way: we have so much pride and love for what we made alongside the Arc community," says the company.

Read more
1Password wants AI agents to handle logins without ever taking a peek at your passwords
1Password is expanding its secure login system to Muse, Claude Duet, Dots, ChatGPT Work, and more.
1Password for AI Agents launched

The next chapter of AI is knocking on our doors, as AI agents like Meta Muse, OpenAI Dots, Gemini Spark, among others, are becoming mainstream, and they are genuinely quite useful for a lot of things, ranging from being your personal assistant all the way to helping you manage a small business. However, many are still quite hesitant about giving these agents access to your accounts and their sensitive credentials.

1Password thinks it has a fix for that trust problem. Its new 1Password for Agents platform lets AI agents sign in to your accounts without ever seeing or storing the passwords, sensitive information, or other credentials they need.

Read more
AI chatbots are falling prey to manipulative prompts that could help stalkers spy on victims
Confident answers, dangerous gaps: why survivors need humans first.
Logo, Text

Chatbots have one talent I can't stop noticing: they sound sure, even when they're wrong. Usually, that's merely annoying. When someone's safety is on the line, it's dangerous.

A new NYU Tandon study tested four AI chatbots on real questions about being stalked or controlled through devices, and experts rated 86% of replies inaccurate, incomplete, or unsafe (via NYU Tandon).

Read more