For a Flash Player embedded in a site (think MySpace, for instance), how are the files concealed from the user so that he is not able to just download them?
I am assuming that given the flash player, running client-side, is able to access the files, they are in fact also downloadable if you know how. But how do sites like MySpace or YouTube prevent (or at least try to) files from being readily available?
I know that YouTube uses sessions which will run out after a while, are they creating a sort of temporary symlink from the file (outside public www dir) to the public www dir?