Mouser,
Latest sophos is reporting that ScreenShot Captor Setup is 'exhibiting suspicious behaviour pattern HIPS/ProcMod-003'

Our place is currently under a big attack so I don't want to turn off my AV to send a sample (You can't upload the file while the AV is running as it thinks it is a virus and won't let you select, catch 22) so I thought you might want to.

(This is the setup file and not the program itself)

Graham

---
Edit - http://www.sophos.com/security/analyses/suspicious-behavior-and-files/hipsprocmod003.html

Isn't that a bit of a harsh pro-active alert? Anything that Internet Explorer downloads and runs! Isn't that everything?

If anyone is wondering whether Plants Vs Zombies is any good the answer is yes.

If anyone has any work to do over the next week however, then this game isn't for you.

Tower defence PopCap style  ;D


(Image from macworld)

http://www.popcap.com/games/pvz


_{Edit: added link to game site.}

Hi there. I'm stumped on something and would like some ideas passed around even if you don't know how to technically achieve what I'm asking for.

Before I start with the problem I'm using
Wowza - Flash streaming server
Flash CS4
JW Media Player (Longtail media player) - Under licence editing the source code.

I have videos on a streaming server that require authentication. Users log in with their university username and password and a $_SESSION variable is logged to show the user is logged in.

In the past I have totally hacked at the source code of JW Media Player to ensure that the video doesn't play without checking the session is logged in. A written application in Flash Media Server 2 also checked this information.

For this new version I would like both Wowza and JW Media player to be as 'vanilla' as possible. The reason for this is Wowza and JW Media Player both have built in authentication.

Wowza uses a secure token before an application (a whole folder of videos) can be played. The trouble is the token doesn't change and if I hard code the token into the flash player someone would only have to download the movie player to be able to play all moves.

What I would prefer to do is to pass some code to the flash player that makes it create the key, however I want it to be useless after it is used.

Before I would use the (sudo) code of

Decrypt (jr;;p, 13/3/09)

Function decrypt(input, date) {
 if (date < today) {
  exit("password can only be decrypted on the date it is created");
 } else {
  return decryptcode(input); // return token to the flash code and not to the user
 }
}

However if I'm doing the decryption inside the flash player it is using the client for its information. The client clock might be incorrect or they might just change it.

What would be best is if the web server were to pass the token at the beginning, but that would just involve the user right clicking and viewing source, which is even worse.

Any ideas or was that a really bad explanation?