Page 1 of 1

Picture Security

Posted: Tue Jul 18, 2006 11:41 pm
by tecktalkcm0391
I was thinking about a way to make pictures "secure" in the fact that they won't be allowed to be downloaded. If you used a combination of socket_get_status() and headers() with the included pictures, you could make a file that gets the URL of the request. If its on the site allow it if not don't include it (disable hotlinking). Store all of the files in a non-internet folder. Use socket_get_status() to see if a download is going thought and if so stop it.

Would that all work or no?

Posted: Tue Jul 18, 2006 11:49 pm
by Burrito
the problem is when someone visits the site, they download the image...then it's on their machine and they can do whatever they want with it.

Posted: Tue Jul 18, 2006 11:49 pm
by tecktalkcm0391
how do they download the image if you set it the image to no-cache.

Posted: Tue Jul 18, 2006 11:52 pm
by Benjamin
If they can view it in a browser, they can copy it. Even if you disable right click or put a clear gif over it they can just take a screen shot. Best you can do is disable hotlinking and watermark the image.

Posted: Tue Jul 18, 2006 11:57 pm
by tecktalkcm0391
I think I found a way to disable a screenshot also.... I'll work on something and let you guys know. ANY HELP OR IDEAS WOULD BE GREATLY APRECIATED.

Posted: Tue Jul 18, 2006 11:57 pm
by Burrito
tecktalkcm0391 wrote:how do they download the image if you set it the image to no-cache.
sorry I wasn't more clear...

let's say I go to a site and see a picture that I like, I can either:

1) use snagit or some similar program and just save it to my machine or
2) take a screenshot and save it to my machine

in either case, once I hit the site, and am viewing the image, it's on my machine

edit: wow! two posts while I went to go and brush my teeth :P

you get the idea though.

Posted: Tue Jul 18, 2006 11:58 pm
by Benjamin
tecktalkcm0391 wrote:I think I found a way to disable a screenshot also....
I am sure that is not possible.

Posted: Wed Jul 19, 2006 12:02 am
by Burrito
I can guarantee it's not possible with programs like snagit...

Posted: Wed Jul 19, 2006 12:38 am
by tecktalkcm0391
Well right now I am looking at: http://www.htmlblock.co.uk/ and there program that works with blocking screenshots, but I haven't tried it against other programs, I am going to go try snagit now... bbl

Posted: Wed Jul 19, 2006 12:45 am
by Benjamin
Getting around all of their *Security Features* is trivial..
Disabling the print screen key stops the user from taking a quick screen shot of your site for their personal use.
Q. What if the browser doesn't have focus?
A. The print screen key event isn't blocked.

Posted: Wed Jul 19, 2006 1:07 am
by tecktalkcm0391
http://www.artistscope.com/copysafe/demos.html <--- You have to download a plugin, but it will block everything that trys to take a screenshot.

Posted: Wed Jul 19, 2006 1:29 am
by Weirdan
Plugin? Why would I download and install something that deliberately limits what I can do to a data on my computer?

Posted: Wed Jul 19, 2006 1:32 am
by Benjamin
Weirdan wrote:Plugin? Why would I download and install something that deliberately limits what I can do to a data on my computer?
I think you can't even see the image without the plugin, but even then, asking your visitors to install a plugin to view pictures is crazy (imo)..

Pushing that aside though, I'm pretty confident I could still get a screen shot.

Posted: Wed Jul 19, 2006 2:30 am
by Chris Corbyn
At the end of the day if you don't want to run the risk of having images downloaded then don't make them available (publically) over HTTP. You can deter people from downloading by watermarking them.