Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact us.

Post New Thread Reply

Register GFY Rules Calendar
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >
Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed.

 
Thread Tools
Old 10-01-2010, 11:24 AM   #1
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
GFY EDUCATIONAL SERIES: How to prevent Piracy - A new way.

Call it an educational series section if you want but this is my take on how to prevent piracy and is a little bit technical.

It stems from the base that the vast majority of people being pirated from offer their product in digital format *only* and so the easiest way to prevent your product from spreading as pirated is to prevent your product from getting on the hard drives of the future pirate/seeder.

Technology in this matter has moved enormously in the last few years and I'd say everyone offers streaming as an option in their members area.

If you offer downloads of your movies and don't want to enter into DRMing them, then you will not prevent piracy.

The best solution is to offer your movies *only* as protected streams. I'll get to other problems associated with only offering your movies as streams (ie members want access to the movie always even after membership expiry) at the end.

If you take the stance that your members are signing up to see what they want to see and not to seed it to the masses then this solution will work for you.

If you don't care that your content is pirated and only wish to see a new revenue stream open up by "fighting" the pirates, I don't see why you're in this thread anyway, so stop reading now.

1. Turn off mpg/avi/wmv whatever downloading

Why do you even offer this? It makes storing your content much more costly, your bandwidth increases, and is the sure fire way to get your content pirated.

if you must give downloads, inject the user details into the mpg file - see
https://gfy.com/showpost.php?p=17565717&postcount=76


2. Only stream your content

All your content needs only to be flv or (better) mp4 (h.264 format) - cut your storage needs by > 50% in one fail swoop

3. Protect your streams

This is the technical stuff - stream rippers are two a penny these days, but follow this sequence of events and your streams are 100% secure. The only way to "rip" your stream is to have a screen capture program record full playback of your move. Impossible to prevent that!


a) Stream - don't use progressive downloading

Progressive downloading is where you put a flash player wrapper around your content - the user can only view the content currently downloaded. That means the entire movie can only be viewed once the entire movie has been downloaded. Thus, the movie downloads into the browser cache and can then be transcoded by the end user to any other format and pirated.
You also consume a lot more bandwidth

Stream your content with a streaming application such as the flavours that Adobe and Wowza offer up - this way, if a user watches only 30 seconds of a movie, you pay only for 30 seconds of bandwidth, not what the users internet connection allowed him to download in 30 seconds (which could be the entire movie!). It also allows for scrubbing by clicking ahead/behind in the movies current position.

b) Stream your movies with RTMPE

Adobe launched the encrypted RTMP (RTMPE) streaming protocol a few years back and by using it, you block 90% of stream rippers. Only three that I know of can still rip RTMPE streams, and Adobe is actively pursuing trying to shut down those apps (no chance!).

In any case, at a 1.5% overhead on the server per stream, RTMPE is worth it to kill the majority of stream rippers

c) Protect your streams with a Secure Token

OK, you have a secure stream. This means streams in process by one app cannot be ripped by another. This however leaves a hole in the handshake between client and server - if the client is an app that can convince the server to engage in an encrypted stream, the server will diss it out.

A Secure Token is one only known to your app (eg your flash player) and your streaming server. On request for a stream, the client (your player) will send a SSL-protected Secure Token in the header of the request. If this matches the token stored on your streaming server, the server will release the stream. Only this token is known to your flash player (that is compiled into the player) and your streaming server (in the server config). Impossible for a rogue client (like a stream ripper) to know this.

However, one ripper app can listen to what is being sent during a request and circumvent this (see later)

Secure Token is supported by Adobe and Wowza and most players (JW PLayer included) support secure token.

d) Protect your "Secure Tokenised" flash player

A person can download your flash player which contains your secure token inside the compiled app and either
i) use the player to request streams on their own behalf, fooling your streaming server
ii) reverse engineer the app to find the secure token

A simple way to do this (which is not foolproof, but since it's transparent to the end user it's a good security) is to mod_rewrite all requests for your player that do not have a trusted http_referer set (direct requests do not have http_referer set)

Code:
RewriteEngine on
RewriteBase /
RewriteCond %{HTTP_REFERER} !^http://members\.domain1\.com/ [NC] #main webserver
RewriteCond %{HTTP_REFERER} !^http://members\.domain2\.com/ [NC] #some other trusted server
#we are trying to download the SecureToken player...
##send them a custom player that doesn't provide the SecureToken!
RewriteRule ^FlashPlayer\.swf$ /media/players/FlashPlayer.swf [L]
the [L] is quite important since the redirect will be transparent - it will look like they are getting the same player as is shown in the HTML, but it will be untokenised and always fail on any request to serve up a movie

f) Protect your streaming server from unauthorised requests

For the only available stream ripper (which requires a LOT of knowledge of the command line to operate by the way, so eliminates a lot of pirates), that can see your encrypted secure token in the stream request header and use it to make unauthorised requests for streams, make sure your streaming server *ONLY* listens for requests coming from a valid host - a valid referrer. There is *NO* stream ripper available that can trap the secure token and spoof referrer for the moment.

Adobe and Wowza offer this as a plugin (free for wowza, paid for adobe)


g) Add encrypted user login vars to your stream

This is paranoid, but some circumstances like VoD where the username is important to the streamer, it is important. Don't give out unsecured user vars - encrypt them with a method encryption compatible with your web server (encryption) and streaming server (decryption). I won't go into the details on how to implement this, as it can be avoided if your member area is well protected from intrusive entries. I've done it though for unprotected areas where a logged in member is sent one content and a none-logged in member is sent another... the options are there in any case

This requires a custom compiled streaming server plugin.

Following all the points above in Point 3 will protect your streams in today's market to the hilt.



4. How to deal with members that want the content all the time

OK, in point 1 you shut off all movie downloading, in 2 only offered movies in streaming format, and in 3 you prevented your streams being ripped

For the majority of members, albeit taken from stream/download stats over a 2 month period with 2 clients, streams are what people want - content is fresh, no download wait time to get cock in hand etc I suppose, but the movie requests were mainly for streams.

However, there are a still a lot of members that like to have the movie on their HD so they can watch it forever, even if they cancel membership.

One client didn't want to offer only streams for this reason. The members of this client that were logged as downloading movies were polled via survey monkey to ask them

a - if we didn't offer movie downloads would you consider cancelling your membership (95% said they would consider cancelling)

b - if we didn't permit downloads, but made sure the movies you like were always available, in full, for 1 year even after you cancelled your membership at some point in the future, would you consider cancelling your membership (15% said they would consider cancelling)

That was enough of an answer for the client since within those 15% were the pirates. Maybe all of them were pirates, maybe only 1% but a good enough chance to take the risk.

I implemented a method where, during the lifetime of a member, any movies added to their favourites or watched in their entirety were logged. If the member cancelled, their login would still be valid for 1 year whereupon relogin they would have full streaming access to those movies. Any new movies or old ones they never watched would be removed from full access rights and clicks on them would be used for upsells to get them back.

By implementing this, they lost 3% of their recurring (downloading) member base (remember only those ones that were downloading the movies - not the entire member base), but over the next 6 months got a ~70% upsell success rate turning that expired member back into a full member.


In all, the implementation of all the above means that all your movies are free from pirating and by-and-large your members won't care that there are no downloads since they still have access to the content they liked. Better still, it gives a chance for active upsells to win back lost members.
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202

Last edited by Eric; 10-03-2010 at 09:48 AM..
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 11:25 AM   #2
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
It turned into quite a long post and I haven't proof read it at all, so I'll finish it off with a GFY Education Series style signoff with a disclaimer that all spelling/grammar errors were maid purely by me.

About the author:

Borkedcoder aka Andy is a pain in the arse freelance web programmer and system admin that is over worked, under paid and loves to get his teeth into problems. If it's not problematic, it bores me!


Oh, and if you liked the post, you can rep me - got to beat JDL in this green power pill thing...
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 11:25 AM   #3
CaptainHowdy
Too lazy to set a custom title
 
CaptainHowdy's Avatar
 
Industry Role:
Join Date: Dec 2004
Location: Happy in the dark.
Posts: 91,523
Piss excellence!
__________________
Join the SWAG Affiliate Asian Live Cam Program, which offers non-saturated Asian models and exclusive material. After registration and placing the link on your website, you can receive 2 free backlinks to commemorate our collaboration.
CaptainHowdy is online now   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 11:37 AM   #4
ottopottomouse
She is ugly, bad luck.
 
ottopottomouse's Avatar
 
Industry Role:
Join Date: Jan 2010
Posts: 13,177
My parrot says "nice read"
__________________
↑ see post ↑
13101
ottopottomouse is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 11:39 AM   #5
scouser
marketer.
 
Industry Role:
Join Date: Aug 2006
Location: bcn
Posts: 2,280
Quote:
1. Turn off mpg/avi/wmv whatever downloading

Why do you even offer this? It makes storing your content much more costly, your bandwidth increases, and is the sure fire way to get your content pirated.
if someone wants to download your movie to upload to another site/torrent/etc, they'll work out how to, even if you don't let people download the files easily. all this does is annoy your "regular" members. It also fucks people with slow internet connections, or who want to watch the porn while not online. which is probably quite a large % of cases still. if they only wanted to view it online theres enough free stuff online. i suspect some people join sites cos they know they can watch it offline.

scouser is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 11:43 AM   #6
PXN
Confirmed User
 
PXN's Avatar
 
Join Date: Jun 2008
Posts: 1,548
nice stuff in there. Way better than what the other party is doing.
PXN is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 11:44 AM   #7
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by deadmoon View Post
if someone wants to download your movie to upload to another site/torrent/etc, they'll work out how to, even if you don't let people download the files easily.
You didn't read the post - if you followed that to protect your streams, you will not be able to download the movie. Period.

Quote:
Originally Posted by deadmoon View Post
all this does is annoy your "regular" members. It also fucks people with slow internet connections, or who want to watch the porn while not online. which is probably quite a large % of cases still. if they only wanted to view it online theres enough free stuff online. i suspect some people join sites cos they know they can watch it offline.

Well, this depends on your member base and until you've tried it or surveyed your members, or started tracking % downloads per % streams, you will of course have no idea.

Like I said, I've only implemented this for 2 clients (1 with >500 recurring members) and for them the results are more that satisfactory. Maybe they'll chime in here to give their feedback (though their are not english speaking...)
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202

Last edited by borked; 10-01-2010 at 11:45 AM..
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 11:54 AM   #8
DaddyzHome
Confirmed User
 
Join Date: Aug 2003
Posts: 200
So what are your prices to do this to an existing site?
DaddyzHome is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 11:57 AM   #9
Fetish Gimp
Confirmed User
 
Industry Role:
Join Date: Feb 2005
Posts: 1,699
Good info, nicely presented. Thanks borked.

I especially liked that "streaming movies available for one year after cancellation" solution.

What about letting the returning ex-member read about the new updates since they canceled (but not be able to view them), and then throw in a re-join offer (10% discount or something)?
Fetish Gimp is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:00 PM   #10
Gasper
Guest
 
Posts: n/a
great post!

i'm not sure for existing member areas, but if I were to open a new paysite I'd implement all these methods to protect my content
  Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:04 PM   #11
ottopottomouse
She is ugly, bad luck.
 
ottopottomouse's Avatar
 
Industry Role:
Join Date: Jan 2010
Posts: 13,177
Will the token thing prevent me searching through the packets until I find where the video lives and then collecting it?

I like puzzles.
__________________
↑ see post ↑
13101
ottopottomouse is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:04 PM   #12
Ethersync
Confirmed User
 
Ethersync's Avatar
 
Join Date: Mar 2008
Location: London, Saint-Tropez, Bermuda, Moscow
Posts: 5,289
Great advice.
__________________
The best ePassporte replacement I have found: OKPAY
Ethersync is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:24 PM   #13
BestXXXPorn
Confirmed User
 
BestXXXPorn's Avatar
 
Join Date: Jun 2009
Location: Asheville, NC
Posts: 2,277
Awesome writeup, top fucking notch man but I'm going to have to go with...

I would never sign up for a site that had this much shit locked down. I want porn on my TV... therefor if I can't download it, I'm not interested. I think this is going to be the case for quite a few people and the crowd is growing larger by the day.

UNLESS... You start offering streaming in other ways; Boxee plugin, custom client, etc... My requirement is that it's not on my fucking computer, hahaha.

By the way have I mentioned the industry time bomb yet? It's called Netflix Adult... They could easily sweep up a metric shit ton of market share. Content delivery to your TV is where it's at.

Edit: Bottom line is... People don't choose to consume porn on their computer; they do so because it's the best available option. If the same content was available on their TV using a remote and chilling on their bed/couch... I'm willing to bet a year's salary that far more people would opt for consuming content via their entertainment centers ;)
__________________
ICQ: 258-202-811 | Email: eric{at}bestxxxporn.com

Last edited by BestXXXPorn; 10-01-2010 at 12:29 PM..
BestXXXPorn is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:35 PM   #14
chronig
Registered User
 
Industry Role:
Join Date: Oct 2009
Posts: 2,653
A nice thought - and I am actually looking into this right now - but what about the screen capture programs that you just barely mention? More tedious? Yes. But doable? Yes.

Does screen capturing lose quality in the video? (Enough for surfers to notice?) I'd record my videos in super HD and possibly implement this... if it meant constraining an entire computer (video capturing) vs. downloading out of your cache and barely using any cpu resources PLUS a loss in quality I'd be very interested.
chronig is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:38 PM   #15
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by Fetish Gimp View Post
Good info, nicely presented. Thanks borked.

I especially liked that "streaming movies available for one year after cancellation" solution.

What about letting the returning ex-member read about the new updates since they canceled (but not be able to view them), and then throw in a re-join offer (10% discount or something)?
Yes, that's exactly how it works in what has been implemented - on login with an expired user/pass, they get sent to the holding area with all their movies available listed.

However, the entire member area is still open for them to browse and looks like what every other valid member sees. The difference is, on clicking the "View this movie" they get the modal box with details on how to come back (at discounted price as a bonus etc).

All thumbs are still viewable, but the "good stuff" needs for them to come back into the circle, and a lot do!
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:38 PM   #16
Barefootsies
Choice is an Illusion
 
Barefootsies's Avatar
 
Industry Role:
Join Date: Feb 2005
Location: Land of Obama
Posts: 42,635
:2cents

borked is a smart cookie.
__________________
Should You Email Your Members?

Link1 | Link2 | Link3

Enough Said.

"Would you rather live like a king for a year or like a prince forever?"
Barefootsies is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:40 PM   #17
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by chronig View Post
A nice thought - and I am actually looking into this right now - but what about the screen capture programs that you just barely mention? More tedious? Yes. But doable? Yes.

Does screen capturing lose quality in the video? (Enough for surfers to notice?) I'd record my videos in super HD and possibly implement this... if it meant constraining an entire computer (video capturing) vs. downloading out of your cache and barely using any cpu resources PLUS a loss in quality I'd be very interested.
you can never prevent screen capturing... if it shows on their screen, a screen capture program will grab it of course. Quality will degrade though.

No browser caching in the implementation as above, so that is out the window.
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:43 PM   #18
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by BestXXXPorn View Post
Awesome writeup, top fucking notch man but I'm going to have to go with...

I would never sign up for a site that had this much shit locked down. I want porn on my TV... therefor if I can't download it, I'm not interested. I think this is going to be the case for quite a few people and the crowd is growing larger by the day.

UNLESS... You start offering streaming in other ways; Boxee plugin, custom client, etc... My requirement is that it's not on my fucking computer, hahaha.

By the way have I mentioned the industry time bomb yet? It's called Netflix Adult... They could easily sweep up a metric shit ton of market share. Content delivery to your TV is where it's at.

Edit: Bottom line is... People don't choose to consume porn on their computer; they do so because it's the best available option. If the same content was available on their TV using a remote and chilling on their bed/couch... I'm willing to bet a year's salary that far more people would opt for consuming content via their entertainment centers ;)

Absolutely agree with you - everyone's situation is different though and some backend logging of how their members interact with the different movie types as well as polling those downloading members helps the owner get a better feel for what their member wants.

I fully agree with you though on this streaming stuff - the streaming media servers can handle the TV boxes (not apple cos they are anti-porn and control everything), so there are ways to contain those too.

for offline browsing, well, your hands are tied - if you want to offer this and your customer base is mainly those that want offline browsing you're wide open to piracy
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:43 PM   #19
Ron Bennett
Confirmed User
 
Join Date: Oct 2003
Posts: 1,653
Quote:
Originally Posted by borked View Post
...This is the technical stuff - stream rippers are two a penny these days, but follow this sequence of events and your streams are 100% secure. The only way to "rip" your stream is to have a screen capture program record full playback of your move. Impossible to prevent that!
So basically, the illicit version, even if screen captured, will likely be of higher quality* and of more usability than what paid members will have access to.

* Streaming quality is dependent on sustained throughput, which for many users will be mediocre - pirates are likely to have both a fast connection and a powerful computer for nearly perfect capturing.

Why should one pay for something that's inferior to the free / lower cost version ... seems to me that locking down content, as you described, may be effective in reducing pirating, but will also drive away many paying customers. Paid membership should be a value added, fun experience not a value subtracted, locked down misery.

Ron
__________________
Domagon - Website Management and Domain Name Sales
Ron Bennett is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:44 PM   #20
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by Barefootsies View Post
borked is a smart cookie.
encrypted ones only
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:48 PM   #21
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by Ron Bennett View Post
Why should one pay for something that's inferior to the free / lower cost version ... seems to me that locking down content, as you described, may be effective in reducing pirating, but will also drive away many paying customers. Paid membership should be a value added, fun experience not a value subtracted, locked down misery.

Ron
Why does streaming have to be a poor experience?

I am streaming movies on an active member site from an iphone (3G and none-flash) and it scrubbs perfect, no stuttering etc.

A well set-up streaming server solution with well-encoded mp4 movies is a wonderful experience.

(are people still using 512k modems???)
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:52 PM   #22
MasterM
Confirmed User
 
Join Date: Oct 2002
Location: netherlands
Posts: 248
how about : watermarking the movie with the username on it ? something like that could be made.
MasterM is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:54 PM   #23
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by MasterM View Post
how about : watermarking the movie with the username on it ? something like that could be made.
yeah, username/IP - that's a great deterrent but huge server overhead (and delay before download) to do that as it needs re-encoding for each download. Possible, but practical?
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 12:57 PM   #24
chronig
Registered User
 
Industry Role:
Join Date: Oct 2009
Posts: 2,653
Quote:
Originally Posted by borked View Post
you can never prevent screen capturing... if it shows on their screen, a screen capture program will grab it of course. Quality will degrade though.

No browser caching in the implementation as above, so that is out the window.
Are you positive the quality will degrade??? and by how much? what are the factors? I'm going to do some screen-capturing testing to see how much the quality degrades...
chronig is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:04 PM   #25
chronig
Registered User
 
Industry Role:
Join Date: Oct 2009
Posts: 2,653
Quote:
Originally Posted by borked View Post
Why does streaming have to be a poor experience?

I am streaming movies on an active member site from an iphone (3G and none-flash) and it scrubbs perfect, no stuttering etc.

A well set-up streaming server solution with well-encoded mp4 movies is a wonderful experience.

(are people still using 512k modems???)

are you online icq?
chronig is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:05 PM   #26
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by chronig View Post
Are you positive the quality will degrade??? and by how much? what are the factors? I'm going to do some screen-capturing testing to see how much the quality degrades...
Excellent and a great idea

please put up some screenshots of stream + rip

it has to be said though to rip screens is much more of a pain than downloading, since you have to capture while playing the entire film. No other interaction with the computer while ripping. Impossible to prevent in any situation, but it makes things a shit load harder.

AND like mentioned above, you can overlay username/IP to a stream.... maybe this is what MasterM was touching on - I thought he was saying to add to the downloaded movie, but yes, adding an overlay to the movie can even be done on the embed page, not streaming server side, so no extra server strain.

That way you have the username and IP of the pirate - in that case, you have their CC details via the processor and you can go after them with no problem in the courts
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:07 PM   #27
Ethersync
Confirmed User
 
Ethersync's Avatar
 
Join Date: Mar 2008
Location: London, Saint-Tropez, Bermuda, Moscow
Posts: 5,289
Quote:
Originally Posted by borked View Post
yeah, username/IP - that's a great deterrent but huge server overhead (and delay before download) to do that as it needs re-encoding for each download. Possible, but practical?
This should work for streaming: http://xuggle.com/xuggler/

If you must allow downloads I think you could also embed some kind of user details as a tag in the avi files (or whatever format) without re-encoding. Then when you see your stuff being shared you can see who is doing it. Obviously that could be removed by the downloader, but it would get past a lot of them. Another option is the user requests a download and the link to download it is emailed to him when it is ready. When a request is made you can send it off to an Amazon EC2 Instance you have setup for this and you can stuff the file with all kind of identifiers (tags, user identifiable strings at certain places in the video, username, etc.).
__________________
The best ePassporte replacement I have found: OKPAY
Ethersync is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:07 PM   #28
chronig
Registered User
 
Industry Role:
Join Date: Oct 2009
Posts: 2,653
Quote:
Originally Posted by borked View Post
Excellent and a great idea

please put up some screenshots of stream + rip

it has to be said though to rip screens is much more of a pain than downloading, since you have to capture while playing the entire film. No other interaction with the computer while ripping. Impossible to prevent in any situation, but it makes things a shit load harder.

AND like mentioned above, you can overlay username/IP to a stream.... maybe this is what MasterM was touching on - I thought he was saying to add to the downloaded movie, but yes, adding an overlay to the movie can even be done on the embed page, not streaming server side, so no extra server strain.

That way you have the username and IP of the pirate - in that case, you have their CC details via the processor and you can go after them with no problem in the courts

Can you program the overlay of some sort of serial#/etc on the screen based on what member is watching the vid? -- plz go on icq
chronig is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:10 PM   #29
chronig
Registered User
 
Industry Role:
Join Date: Oct 2009
Posts: 2,653
Quote:
Originally Posted by Ethersync View Post
This should work for streaming: http://xuggle.com/xuggler/

If you must allow downloads I think you could also embed some kind of user details as a tag in the avi files (or whatever format) without re-encoding. Then when you see your stuff being shared you can see who is doing it. Obviously that could be removed by the downloader, but it would get past a lot of them. Another option is the user requests a download and the link to download it is emailed to him when it is ready. When a request is made you can send it off to an Amazon EC2 Instance you have setup for this and you can stuff the file with all kind of identifiers (tags, user identifiable strings at certain places in the video, username, etc.).
I'd think of doing it in a way that the user doesn't realize it's their info. Firstly, it should be a serial #/code that matches a particular user. Then maybe it could be embedded in a way that would only be read by increasing/decreasing the contrast/brightness or something like that.
chronig is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:13 PM   #30
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by chronig View Post
Can you program the overlay of some sort of serial#/etc on the screen based on what member is watching the vid? -- plz go on icq
An overlay can be whatever you want it to be as it's called from the flash player (if that is the app we're talking about here). I've only ever implemented overlays from the embed directly by javascript, but a more robust solution would be to modify the flash player to call an XML file with the parameters to add to the overlay.

I'm on ICQ (as you asked as I rarely fire up ICQ), but won't be free to chat freely for ~1hr or so.

Better to send me an email with your ICQ and I'll hit you up
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:18 PM   #31
AsianDivaGirlsWebDude
Purveyor, Fine Asian Porn
 
AsianDivaGirlsWebDude's Avatar
 
Industry Role:
Join Date: Jul 2004
Location: San Francisco Bay Area
Posts: 38,323


Excellent post - thread subscribed to...

ADG
AsianDivaGirlsWebDude is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:20 PM   #32
Ethersync
Confirmed User
 
Ethersync's Avatar
 
Join Date: Mar 2008
Location: London, Saint-Tropez, Bermuda, Moscow
Posts: 5,289
Quote:
Originally Posted by chronig View Post
I'd think of doing it in a way that the user doesn't realize it's their info. Firstly, it should be a serial #/code that matches a particular user. Then maybe it could be embedded in a way that would only be read by increasing/decreasing the contrast/brightness or something like that.
Oh, I agree. Even just an md5 hash of the username or person's real name would work. It should be hidden as much as possible. Even just a number that flashed on for 1 frame every 60 seconds or so would probably work. You could rotate where it appears in the video too so they can't just blur out one area to hide it. There should be more than one physical tactic used though so if they find one do something to get around it (e.g. rip out the file tags) you have another option to fall back on.
__________________
The best ePassporte replacement I have found: OKPAY
Ethersync is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:30 PM   #33
Pushcube
Registered User
 
Pushcube's Avatar
 
Industry Role:
Join Date: Dec 2007
Location: Ireland
Posts: 54
Quick and simple way would be to issue every member with a unique tansp png file thats called via a flash var in the XML file and and placed at random in the view window of the player.
__________________
Server Optimisation - Pentesting - Secure WP Installs.
Pushcube is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:34 PM   #34
Ethersync
Confirmed User
 
Ethersync's Avatar
 
Join Date: Mar 2008
Location: London, Saint-Tropez, Bermuda, Moscow
Posts: 5,289
Quote:
Originally Posted by Pushcube View Post
Quick and simple way would be to issue every member with a unique tansp png file thats called via a flash var in the XML file and and placed at random in the view window of the player.
That would work as long as the Secure Token works, but if it gets cracked the stream recorders will get the clean video with no identifiers. Using xuggler you could embed the identifiers in the stream itself so even if the Secure Token is cracked the identifiers are still there.
__________________
The best ePassporte replacement I have found: OKPAY
Ethersync is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:36 PM   #35
halfpint
GFY's Halfpint
 
halfpint's Avatar
 
Industry Role:
Join Date: Jun 2007
Location: UK
Posts: 15,223
Quote:
Originally Posted by BestXXXPorn View Post
Awesome writeup, top fucking notch man but I'm going to have to go with...

I would never sign up for a site that had this much shit locked down. I want porn on my TV... therefor if I can't download it, I'm not interested. I think this is going to be the case for quite a few people and the crowd is growing larger by the day.

UNLESS... You start offering streaming in other ways; Boxee plugin, custom client, etc... My requirement is that it's not on my fucking computer, hahaha.

By the way have I mentioned the industry time bomb yet? It's called Netflix Adult... They could easily sweep up a metric shit ton of market share. Content delivery to your TV is where it's at.

Edit: Bottom line is... People don't choose to consume porn on their computer; they do so because it's the best available option. If the same content was available on their TV using a remote and chilling on their bed/couch... I'm willing to bet a year's salary that far more people would opt for consuming content via their entertainment centers ;)
You can allready buy porn on TV over here, They have pay per view channels so you only pay for 1 nights viewing and you dont have to subscribe to it like a paysite. Its been out for years
__________________

Get FREE website listings on Cryptocoinshops.net
halfpint is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:36 PM   #36
ottopottomouse
She is ugly, bad luck.
 
ottopottomouse's Avatar
 
Industry Role:
Join Date: Jan 2010
Posts: 13,177
Quote:
Originally Posted by ottopottomouse View Post
Will the token thing prevent me searching through the packets until I find where the video lives and then collecting it?

I like puzzles.


Never got an answer.
__________________
↑ see post ↑
13101
ottopottomouse is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:39 PM   #37
Ethersync
Confirmed User
 
Ethersync's Avatar
 
Join Date: Mar 2008
Location: London, Saint-Tropez, Bermuda, Moscow
Posts: 5,289
Quote:
Originally Posted by ottopottomouse View Post


Never got an answer.
Yes, it is quite secure.
__________________
The best ePassporte replacement I have found: OKPAY
Ethersync is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:46 PM   #38
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by ottopottomouse View Post


Never got an answer.
fuck sorry!!

nope (they will never guess the location and "grab it") - the secure token is only used during the handshake between client and server. You can not prevent the end user knowing the stream/URL or where the content lies but...

1. You should be checking access levels/permissions before you diss up the page that contains the movie embed URL
2. The movie should *never* be accessible from a web server by a direct call
3. eg rtmpe url:

rtmpe://stream.domain.com/members/big_tits_n_ass/01/movie.mp4

tells the streaming server that the application to use (the one that checks for secure token, referrer, memberlogin credentials if supplied) is called "members"

this calls the application-specific config file which states where to find the files (NTP mounts no problem)....

Lets say, your apache root is /var/www and your streaming server's application "members" says content is stored in /content

stuff in /content is only available to the streaming server, not apache. The streaming server will look for the file:

/content/big_tits_n_ass/01/movie.mp4

and stream it - apache can't even touch it.

No way should the movie content directory be accessible from apache - only the streaming server, which already requires lots of paramters to be filled in (see point 3 of OP) before it will even start streaming....
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202

Last edited by borked; 10-01-2010 at 01:47 PM..
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:48 PM   #39
D Ghost
null
 
D Ghost's Avatar
 
Industry Role:
Join Date: May 2006
Posts: 9,820
New way to prevent piracy: create, build and launch products/ideas that are not-piratable.
D Ghost is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:49 PM   #40
Fbomb - BANNED FOR LIFE
So Fucking Banned
 
Join Date: May 2010
Location: Mexifornia
Posts: 970
Take notes Robbie. This is how you gain respect, by posting something useful and not you personal tales of greatness.
Fbomb - BANNED FOR LIFE is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:50 PM   #41
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by DJ The Kid View Post
New way to prevent piracy: create, build and launch products/ideas that are not-piratable.
and your idea differs from the OP how exactly?
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:53 PM   #42
ottopottomouse
She is ugly, bad luck.
 
ottopottomouse's Avatar
 
Industry Role:
Join Date: Jan 2010
Posts: 13,177
Ta borked

Always interested in learning stuff.
__________________
↑ see post ↑
13101
ottopottomouse is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:56 PM   #43
Ron Bennett
Confirmed User
 
Join Date: Oct 2003
Posts: 1,653
Quote:
Originally Posted by borked View Post
Why does streaming have to be a poor experience?

I am streaming movies on an active member site from an iphone (3G and none-flash) and it scrubbs perfect, no stuttering etc.

A well set-up streaming server solution with well-encoded mp4 movies is a wonderful experience.

(are people still using 512k modems???)
Firstly, what is the screen resolution of the video you're viewing on your iphone? I presume way less than that of most window based computers.

I'm on a 6 megabit cable connection and still run into issues with streaming - it's not just data speed, but also computer load. Progressive download tends to use less CPU and is more forgiving in regards to throughput ... once a stream begins to outrun its buffer, many streaming providers will reduce the playback quality, assuming the stream has that capability (not all do), and/or pause the stream to refresh the buffer resulting in the stream getting jittery or even stop / reset.

Also, with a progressive download, jumping around / replaying is a cinch, and practically instant. While similar is true with streaming, it's often limited to a buffered window of few minutes, if even that much, from the point in the stream one is currently viewing. Anything beyond outside that buffered window will force content to be streamed again from the remote server making the user wait.

Ron
__________________
Domagon - Website Management and Domain Name Sales
Ron Bennett is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 01:57 PM   #44
PR_Glen
Confirmed User
 
PR_Glen's Avatar
 
Industry Role:
Join Date: Oct 2006
Location: Canada
Posts: 9,058
Quote:
Originally Posted by DJ The Kid View Post
New way to prevent piracy: create, build and launch products/ideas that are not-piratable.
Translation: The best way to stop people from stealing your apples is to sell oranges..

thank you..




Some good ideas in there borked for sure.. however majority of customers still want downloads, we get customer complaints big time when they are loading slow or ever go down so until that happens it becomes a necessary option.
__________________
webmaster at pimproll dot com
PR_Glen is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 02:05 PM   #45
ottopottomouse
She is ugly, bad luck.
 
ottopottomouse's Avatar
 
Industry Role:
Join Date: Jan 2010
Posts: 13,177
Quote:
Originally Posted by PR_Glen View Post
Some good ideas in there borked for sure.. however majority of customers still want downloads, we get customer complaints big time when they are loading slow or ever go down so until that happens it becomes a necessary option.
I think the only solution compatible with this method is to offer the worlds gayest tiny file as a download option and something decent as a watch-on-site version.

And I can completely understand the slow internet argument as I was unable to watch a youtube video yesterday that someone had posted until I had finished downloading a BBC program off their catchup site.
__________________
↑ see post ↑
13101
ottopottomouse is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 02:05 PM   #46
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by Ron Bennett View Post
Firstly, what is the screen resolution of the video you're viewing on your iphone? I presume way less than that of most window based computers.

I'm on a 6 megabit cable connection and still run into issues with streaming - it's not just data speed, but also computer load. Progressive download tends to use less CPU and is more forgiving in regards to throughput ... once a stream begins to outrun its buffer, many streaming providers will reduce the playback quality, assuming the stream has that capability (not all do), and/or pause the stream to refresh the buffer resulting in the stream getting jittery or even stop / reset.

Also, with a progressive download, jumping around / replaying is a cinch, and practically instant. While similar is true with streaming, it's often limited to a buffered window of few minutes, if even that much, from the point in the stream one is currently viewing. Anything beyond outside that buffered window will force content to be streamed again from the remote server making the user wait.

Ron
Unless I'm missing something - what does screen resolution have to do with anything? I used that as an example fora a low-bandwidth connection on a full member site not "optimised" for phones... ie same 500MB movie being streamed on iphone as the PC.

For the moment, I haven't come across any server problems *at all* in streaming movies - load is quite low (1 ish) on a server dedicated to streaming movies - 16 cores in total, 32MB RAM) for a heavily accessed members area.

I made a thread a few months back at my love for Wowza and someone came in (maybe you?!) saying he couldn't stand it because of crap server load etc etc. I do not doubt his frustration at all, and maybe under serious load (like for a very successful tube site, millions of request per day etc) Wowza won't cut it, and in which case I would agree.

However, on the server I'm looking after, Wowza is server up ~2000 streams per day (connections, so not counting scrubbing etc) and it isn't breaking a sweat, such so that the iphone on its 3G bandwidth streams quite comfortably, without any stalls. The hardware though dissing up the movies is very very streamlined with a very nice storage server handling the requests (and the system says the disk I/O is no problem at all)
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 02:07 PM   #47
Gasper
Guest
 
Posts: n/a
Quote:
Originally Posted by Fbomb View Post
Take notes Robbie. This is how you gain respect, by posting something useful and not you personal tales of greatness.
are you fucking kiddin' me? Robbie and some other guys discussed these same methods months ago here on gfy

  Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 02:09 PM   #48
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by Ron Bennett View Post
Anything beyond outside that buffered window will force content to be streamed again from the remote server making the user wait.

Ron
Why wait? a scrub yes involves a new connection to teh server, that then seeks and streams, but it's the same connection as the initial one - ie if the streaming server isn't overloaded, there is like what, 0.5-1sec latency between client call to server and server reply to client.
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 02:12 PM   #49
borked
Totally Borked
 
borked's Avatar
 
Industry Role:
Join Date: Feb 2005
Posts: 6,284
Quote:
Originally Posted by PR_Glen View Post
Some good ideas in there borked for sure.. however majority of customers still want downloads, we get customer complaints big time when they are loading slow or ever go down so until that happens it becomes a necessary option.
Thanks - everyone's situation is different for sure and no one-method will kill all.

If your members absolutely must have or else they'll die, downloads, then bleh - sorry bud but you're on your own to find a solution

If you take the plunge on some of your non-mission critical sites though, that would be a good litmus test...
__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)



All models are wrong, but some are useful. George E.P. Box. p202
borked is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 10-01-2010, 02:13 PM   #50
ThumbLord
Confirmed User
 
ThumbLord's Avatar
 
Industry Role:
Join Date: Jan 2009
Location: Aruba
Posts: 1,932
bookmarked and if I knew how to rep you I would do that as well.
I opened another bottle of beer so did that do the trick?
__________________
We Sell Domains | ThumbLords | ICQ 128106905 | TubeLords | Traffic Holder | eRoken
ThumbLord is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Post New Thread Reply
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >

Bookmarks



Advertising inquiries - marketing at gfy dot com

Contact Admin - Advertise - GFY Rules - Top

©2000-, AI Media Network Inc



Powered by vBulletin
Copyright © 2000- Jelsoft Enterprises Limited.