Ripping Media off of the Wire

Architecture and Background

HONEY - Ripping Media Off Of the Wire The proprietary protocol developed by Adobe Systems for streaming audio, video and data over the Internet, the ëReal Time Messaging Protocol- (RTMP) and the proprietary protocol created by Macromedia used for streaming video and DRM, -Encrypted Real Time Messaging Protocol- (RTMPE) implementations for MySpace use security through obscurity and actually provide zero security. This talk will describe methods and demonstrate how to download media from MySpace directly and convert the media into MP3s, breaking the DRM by manipulating the RTMP/RTMPE protocol implementation.

Vulnerability Analysis

Additionally, the talk will describe methods and demonstrate how to download media from YouTube directly and convert the media into MP3s, without using online third parties for conversions, by manipulating parameters in URLs. HONEY works three jobs.

Exploitation and Demonstrations

Firstly, as a Network Administrator for the past four years, secondly as a Research Assistant for a Ballistic research grant by the NIST, and thirdly she just completed teaching a Networking class as an Adjunct Professor at John Jay College of Criminal Justice, located in NYC. Honey will be returning to her graduate studies in the Fall 2010 semester to gain her Master's degree in Forensic Computing.

Remediation and Defensive Strategies

Honey has worked in the IT industry for the past 9 years. She is self taught as well as holds a Computer of Information Systems B.S., dual A.A.S. degrees in Industrial Electronic Engineering and Computer Networking, she holds a General Amateur Ham Radio Operator license, and an A+, N+, Security+. She is currently preparing to take her CISSP. For copies of the slides and additional materials please see the DEF CON 18 Archive here: