A security flaw in Adobe Systems software has left Amazon’s video streaming service wide open to freeloaders. The hole allows users to record and copy direct from Amazon’s video feed.

Studios have always been skittish about having their films distributed electronically, and this new hole might give them another excuse to support the RIAA’s heavy-handed copyright measures.

The best quote of the day goes to Bruce Schneier, a security expert who obviously doesn’t believe in mincing words, who told Reuters: “It’s a fundamental flaw in the Adobe design. This was designed stupidly.”

The ‘stupid’ flaw is located perilously on the Flash video servers connected to the Flash players installed on most PCs.

Adobe has not placed stringent enough security measures on the connection between the players and the servers. Supposedly a security feature designed to do so was dropped – to boost download speeds.

Latest word from Adobe? The software company issued a statement, saying: “Adobe is committed to the security of all of our products, from our players to our server software. Adobe invests a considerable amount of ongoing effort to help protect users from potential vulnerabilities.”

An Amazon spokesman insisted the company’s Video On Demand service, could not be pirated. Reuters’s tests showed that isn’t true.

The Replay Media Catcher from Applian Technologies proved fully capable of downloading movies from Amazon and other sites that also use Adobe’s encryption technology and video player verification.

In truth, video capture from streams has been around for quite some time and it’s a little late for Adobe to notice. The challenge will be to find a way that protects Adobe-streamed content without affecting download times or viewing experience, while at the same time providing security.

Related:

Entry was posted on Sunday, September 28th, 2008 at 3:08 pm under Online video, Software.

Read more entries by Erna Mahyuni.
Stumble It!