8 {{ upvoteCount | shortNum }}
8 {{ upvoteCount | shortNum }}

How to protect your Amazon S3 links from being hijacked and used on other sites?

by magentawave
8 replies
  • WEB DESIGN
    • |
I'm using Optimizepress 2 and was wondering how to prevent people from viewing the source code of my pages and hijacking my Amazon S3 links. Is there an effective way to protect your S3 links that won't cost $100 to $200 like everything I'm seeing out there?

I understand that DAP can protect the pages with those links (because the code is hidden from non-members) but I suppose a member could log in and rip them off even when using DAP.

I was about to try this method https://optimizepress.zendesk.com/hc...player-element that apparently prevents the links from working on any sites but my own, but someone at OP said it might make the videos not work on all platforms / browsers.

So before I try that I thought I'd check here first...

Thanks!
#amazon #amazon s3 #dap #hijacked #links #protect #protect s3 links #sites
  • Profile picture of the author ravijayagopal
    [DELETED]
    {{ DiscussionBoard.errors[10547145].message }}
    • Profile picture of the author magentawave
      Ravi, the primary domain for my cpanel is MySite.com and there are two folders in the same cpanel named "xx" for MySite.com/xx and the other folder is named "xxxx" for MySite.com/xxxx. Will the 1 site license work for S3 Media Vault work for MySite.com, MySite.com/xx and MySite.com/xxxx? Again, they are all the same domain.

      By the way, MySite.com/xxxx is protected by DAP.
      {{ DiscussionBoard.errors[10547690].message }}
      • Profile picture of the author ravijayagopal
        Yes. As long as the main domain is the same, a http://S3MediaVault.com 1-site license will work in sub-folder installations of WordPress.

        Originally Posted by magentawave View Post

        Ravi, the primary domain for my cpanel is MySite.com and there are two folders in the same cpanel named "xx" for MySite.com/xx and the other folder is named "xxxx" for MySite.com/xxxx. Will the 1 site license work for S3 Media Vault work for MySite.com, MySite.com/xx and MySite.com/xxxx? Again, they are all the same domain.

        By the way, MySite.com/xxxx is protected by DAP.
        - Ravi Jayagopal
        Signature
        Secure Video & Audio Player for S3 & CloudFront
        S3MediaVault.com
        {{ DiscussionBoard.errors[10547874].message }}
  • Profile picture of the author totalprocessing.net
    [DELETED]
    {{ DiscussionBoard.errors[10547727].message }}
    • Profile picture of the author magentawave
      Thanks but I'm not using woo commerce. I think that plugin is for applying expiration times to downloadable products that are stored on S3.
      {{ DiscussionBoard.errors[10547832].message }}
  • Profile picture of the author waynmeyer
    Hi Warriors, i have had extensive testing on membership websites with amazon s3 integration. Its completely not advised to host your videos and stream them with rtmp via amazon s3 and cloudfrount, i found that the loading time is unacceptable even after propagation to all CDN's. Use third party providers to setup your videos for streaming and protecting your copyright content from praying eyes.

    Best ways to protect video is to use wistia, vimeo and dailymotion to mention a few.

    Regarding the hotlinking concern you have for people hi jacking your links. I too had this problem and found the best solution is to not use plugins that bloat your code or reduce page load speeds. In fact its probably the worst way to protect your files from hot linking. If you look at about 80% of digital products online, they not well thought out and free access is easily obtainable.

    My suggestion that works best is to simply add a bucket policy that allows users to online download the content from your domain, this way you have more control, less bloat ware and easy configuration not to mention FREE!!

    Hope this helps, if not let me know and i will assist you.
    {{ DiscussionBoard.errors[10548320].message }}
    • Profile picture of the author magentawave
      Thanks but how does downloading my stuff via a bucket policy or permissions give me "more control" when I don't want anyone downloading my stuff?

      Originally Posted by waynmeyer View Post

      My suggestion that works best is to simply add a bucket policy that allows users to online download the content from your domain, this way you have more control, less bloat ware and easy configuration not to mention FREE!!
      {{ DiscussionBoard.errors[10548456].message }}
  • Profile picture of the author ravijayagopal
    [DELETED]
    {{ DiscussionBoard.errors[10548536].message }}
    • Profile picture of the author magentawave
      Yes, that helps a lot, Ravi. Thank you.

      1) Do all the features of S3 Media Vault work the same way if I use Cloudfront?

      2) Does the timed "Order" button element that would appear at a specific time during the video work on the iPhone too? (I'm asking because that element does not work on iPhones using EasyVideoSuite.)

      Thanks.
      {{ DiscussionBoard.errors[10549418].message }}
  • Profile picture of the author ravijayagopal
    Hi Stephen,

    >>1) Do all the features of S3 Media Vault work the same way if I use Cloudfront?<<
    Sorry, S3MV does not work with CloudFront. S3 only.

    >>2) Does the timed "Order" button element that would appear at a specific time during the video work on the iPhone too?<<
    No. iOS opens video in its own separate window. You can't do overlay on the video itself. In fact, iOS actually prevents auto-play as well.

    - Ravi Jayagopal
    Signature
    Secure Video & Audio Player for S3 & CloudFront
    S3MediaVault.com
    {{ DiscussionBoard.errors[10553146].message }}
    • Profile picture of the author magentawave
      Ravi, I have tried a lot of different permissions and bucket policies and still can't get the protection that I need, and when I do then the video won't play on iOS and Android. (You'd think Amazon would have figured out a way for us to flip a switch and add protection which leads me to assume they don't want to because they make more money when our videos play on other sites.)

      I'm at an impasse here because as much as I would like to use Cloudfront, I might have to go with S3 Media Vault, but I still need a couple more things cleared up, please.

      1) Is it possible to update the program so it will protect content that uses Cloudfront?

      2) If S3 Media Vault can prevent my videos from being played on other websites and it can protect my files from being downloaded, then what is the point of having expiring links? Also, if I have to do expiring links, then how can I do expiring links that won't greatly inconvenience visitors to my own site? For example: At your site you say to set the plugin so the link expires at 16 minutes. Does that mean if someone starts watching my video from my site and has to stop for whatever reason (their phone rings, whatever) and they come back 16 minutes later to resume watching the video that it will no longer play on my site because the link has expired? Or do the expiring links only work if the video is being played from another website?

      Thank you.
      {{ DiscussionBoard.errors[10562436].message }}

Trending Topics