Video Security

[Evvie]

I upload my videos with AES-256 encryption through 7zip to my personal website, only-evvie.com. When people get videos I send them the link to download as well as the password.

While I know no video is secure as soon as someone gets their hands on it, my goal is to stop people from stealing the video directly from my site, since otherwise someone could just pop in to the video folder and take everything.

Do you all feel that this is adequate security? I am not a super popular model so I don't feel like I'll be getting a lot of people trying to pull it off my own servers.

Is there another, better way I can easily encrypt or secure my video and photo sets?

 

[schlmoe]

I upload my videos with AES-256 encryption through 7zip to my personal website, only-evvie.com. When people get videos I send them the link to download as well as the password.

While I know no video is secure as soon as someone gets their hands on it, my goal is to stop people from stealing the video directly from my site, since otherwise someone could just pop in to the video folder and take everything.

Do you all feel that this is adequate security? I am not a super popular model so I don't feel like I'll be getting a lot of people trying to pull it off my own servers.

Is there another, better way I can easily encrypt or secure my video and photo sets?

I appreciate your paranoia, but most leeches don't bother with password protected zips.

But since you asked, AES-256 is approved for US Federal Government documents up to "TOP SECRET". While there is no encryption that is "unbreakable", if it is secure enough for NSA/Military/State Dept. Top Secret, it should be secure enough for your videos. According to research, it would take 2^254 (2 to the 254th power) operations to break this.

So yeah, I'm pretty confident your files won't be compromised. I would generate a new zip file for each customer (generating a new encryption hash and a different password). If you re-use the zip files, then you run the risk of password sharing which would directly bypass all of your efforts to keep you information secure.

 

[bawksy]

Like schlmoe said, the encryption is just fine. But no encryption is going to keep your videos very secure. All it takes is ONE person to share a video after they've gotten the password, and it can spread around the internet like wild fire.

There's really not much you can do about it except try to sell as many copies of a video as you can before it leaks.

 

[Pete]

Make sure your web host doesn't have virtual directory listings enabled -- if someone where to try to browse the folder just above your video link and this option were enabled, they could potentially download all of the videos (although if they are encrypted with different passwords, then it wouldn't do them much good).