|
Home > Archive > Macromedia Flash Server > July 2006 > Protecting SWF
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
| FTOUCH-YDxpq3io04c@public.gmane.org 2006-07-07, 7:11 am |
| Hi list
I run a search looking for encryption program for protecting SWF files, and
found many such apps.
Can you recommend an encryption that protects well while not affecting the
proper execution of the file?
David Evgey
________________________________________
_______
FlashComm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
| |
| Alexander U. 2006-07-07, 1:12 pm |
| Amayeta Software.
>From: FTOUCH-YDxpq3io04c@public.gmane.org
>Reply-To: FlashComm Mailing List <flashcomm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org>
>To: flashcomm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
>Subject: [FlashComm] Protecting SWF
>Date: Fri, 7 Jul 2006 07:46:10 EDT
>MIME-Version: 1.0
>Received: from chattyfig.figleaf.com ([146.145.88.77]) by
>bay0-mc12-f16.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444); Fri,
>7 Jul 2006 04:46:38 -0700
>Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])by
>chattyfig.figleaf.com (Postfix) with ESMTP id 7B0E117F023;Fri, 7 Jul 2006
>07:48:46 -0400 (EDT)
>Received: from imo-m17.mx.aol.com (imo-m17.mx.aol.com [64.12.138.207])by
>chattyfig.figleaf.com (Postfix) with ESMTP id 8B5F817F015for
><flashcomm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org>;Fri, 7 Jul 2006 07:48:42 -0400 (EDT)
>Received: from FTOUCH-eRD4NtI07WnHCqZ3qdFy9g@public.gmane.org imo-m17.mx.aol.com (mail_out_v38_r7.5.) id
>f.490.5059aca (48552)for <flashcomm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org>;Fri, 7 Jul 2006
>07:46:10 -0400 (EDT)
>X-Message-Info: LsUYwwHHNt38ylrX2ICASn+NhwnjENCxie4/luw+EME=
>X-Original-To: flashcomm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
>Delivered-To: flashcomm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
>X-Mailer: 6.0 sub 10578
>X-Spam-Flag: NO
>X-Content-Filtered-By: Mailman/MimeDel 2.1.5
>X-BeenThere: flashcomm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
>X-Mailman-Version: 2.1.5
>Precedence: list
>List-Id: FlashComm Mailing List <flashcomm.chattyfig.figleaf.com>
>List-Unsubscribe:
><http://chattyfig.figleaf.com/mailman/listinfo/flashcomm>,<mailto:flashcomm-request-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org?subject=unsubscribe>
>List-Archive: <http://chattyfig.figleaf.com/mailman/private/flashcomm>
>List-Post: <mailto:flashcomm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org>
>List-Help: <mailto:flashcomm-request-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org?subject=help>
>List-Subscribe:
><http://chattyfig.figleaf.com/mailman/listinfo/flashcomm>,<mailto:flashcomm-request-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org?subject=subscribe>
>Errors-To: flashcomm-bounces-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
>Return-Path: flashcomm-bounces-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
>X-OriginalArrivalTime: 07 Jul 2006 11:46:39.0356 (UTC)
>FILETIME=[0224CBC0:01C6A1BB]
>
>Hi list
>
>I run a search looking for encryption program for protecting SWF files, and
>found many such apps.
>
>Can you recommend an encryption that protects well while not affecting the
>proper execution of the file?
>
>David Evgey
>
> ________________________________________
_______
>FlashComm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
>To change your subscription options or search the archive:
>http://chattyfig.figleaf.com/mailman/listinfo/flashcomm
>
>Brought to you by Fig Leaf Software
>Premier Authorized Adobe Consulting and Training
>http://www.figleaf.com
>http://training.figleaf.com
________________________________________
_________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE!
http://messenger.msn.click-url.com/...1ave/direct/01/
________________________________________
_______
FlashComm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
| |
|
|
| FTOUCH-YDxpq3io04c@public.gmane.org 2006-07-07, 7:11 pm |
| In a message dated 7/7/2006 2:40:21 PM Eastern Daylight Time,
stefan-fMeCE+ULXElEfu+5ix1nRw@public.gmane.org writes:
>
>
> Pro: Obfuscates nicely (not secure of course but a nice deterrent)
> Con: doubles swf filesize in a lot of cases
>
> Stefan
>
Stefan
1. are you taking about Amayeta or other solution.
2. If Amayeta, what do you mean by " not secure", is there a way to crack it?
David Evgey
________________________________________
_______
FlashComm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
| |
| Xiaolei Shi 2006-07-08, 1:11 am |
| Given enough time anything can be cracked. Modern encryption is dependent on
very fundamental problems of finding discrete logarithms or factoring large
prime numbers.
What makes me suspicious about Amayeta is that they try to equate obfuscate
with encryption, where perhaps steganography would be the more appropriate
description. Moreover, their site seems mostly vanilla, like the phrase
"1000x safer".
Also, this whole decompiler/obfuscation seems like a useless arms race. My
rule of thumb is that if I write anything that is worth stealing in flash,
chances are it will be stolen.
________________________________________
_______
FlashComm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
| |
| Stefan Richter 2006-07-08, 7:11 am |
| Spot on. But obfuscation does help to deter some script kiddies who think
they are oh so clever...
Stefan
> -----Original Message-----
> From: flashcomm-bounces-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
> [mailto:flashcomm-bounces-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org] On Behalf Of
> Xiaolei Shi
> Sent: 08 July 2006 05:12
> To: FlashComm Mailing List
> Subject: Re: [FlashComm] Protecting SWF
>
> Given enough time anything can be cracked. Modern encryption
> is dependent on very fundamental problems of finding discrete
> logarithms or factoring large prime numbers.
>
> What makes me suspicious about Amayeta is that they try to
> equate obfuscate with encryption, where perhaps steganography
> would be the more appropriate description. Moreover, their
> site seems mostly vanilla, like the phrase "1000x safer".
>
> Also, this whole decompiler/obfuscation seems like a useless
> arms race. My rule of thumb is that if I write anything that
> is worth stealing in flash, chances are it will be stolen.
________________________________________
_______
FlashComm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
| |
| Stefan Richter 2006-07-08, 7:11 am |
| Yes Amayeta and yes it can most likely be cracked. Don't rely on obfuscation
for security. I see it as a deterrent, nothing more.
Stefan
> -----Original Message-----
> From: flashcomm-bounces-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
> [mailto:flashcomm-bounces-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org] On Behalf Of
> FTOUCH-YDxpq3io04c@public.gmane.org
> Sent: 07 July 2006 23:38
> To: flashcomm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
> Subject: Re: [FlashComm] Protecting SWF
>
> In a message dated 7/7/2006 2:40:21 PM Eastern Daylight Time,
> stefan-fMeCE+ULXElEfu+5ix1nRw@public.gmane.org writes:
>
>
>
> Stefan
> 1. are you taking about Amayeta or other solution.
> 2. If Amayeta, what do you mean by " not secure", is there a
> way to crack it?
>
> David Evgey
> ________________________________________
_______
> FlashComm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
> To change your subscription options or search the archive:
> http://chattyfig.figleaf.com/mailman/listinfo/flashcomm
>
> Brought to you by Fig Leaf Software
> Premier Authorized Adobe Consulting and Training
> http://www.figleaf.com
> http://training.figleaf.com
>
________________________________________
_______
FlashComm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
| |
| Bill Sanders 2006-07-08, 7:11 am |
| Hi,
You know, I had a bet with a hacker that he couldn't bust a SWF I had
created with the help of FMS. He wasn't an ace hacker, but he was
confident that he could bust any SWF. All I had to do was a server-
side call and sucker punch him with an red-herring variable named
"password." I won the bet, and I don't count security as one of my
strong points.
Cheers,
Bill
On Jul 8, 2006, at 4:37 AM, Stefan Richter wrote:
> Spot on. But obfuscation does help to deter some script kiddies who
> think
> they are oh so clever...
>
> Stefan
>
>
>
>
>
> ________________________________________
_______
> FlashComm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
> To change your subscription options or search the archive:
> http://chattyfig.figleaf.com/mailman/listinfo/flashcomm
>
> Brought to you by Fig Leaf Software
> Premier Authorized Adobe Consulting and Training
> http://www.figleaf.com
> http://training.figleaf.com
bill sanders | www.sandlight.com | bloomfield, ct | 860-242-2260
________________________________________
_______
FlashComm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
| |
| Naicu Octavian 2006-07-10, 1:11 am |
| I consider obfuscation just another security layer. Of course this will not make my swf's totally secure, but as someone mentioned below, it will discourage those script kiddies even further.
----- Original Message ----
From: Bill Sanders <wdsanders-Wuw85uim5zDR7s880joybQ@public.gmane.org>
To: FlashComm Mailing List <flashcomm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org>
Sent: Saturday, July 8, 2006 11:49:49 AM
Subject: Re: [FlashComm] Protecting SWF
Hi,
You know, I had a bet with a hacker that he couldn't bust a SWF I had
created with the help of FMS. He wasn't an ace hacker, but he was
confident that he could bust any SWF. All I had to do was a server-
side call and sucker punch him with an red-herring variable named
"password." I won the bet, and I don't count security as one of my
strong points.
Cheers,
Bill
On Jul 8, 2006, at 4:37 AM, Stefan Richter wrote:
> Spot on. But obfuscation does help to deter some script kiddies who
> think
> they are oh so clever...
>
> Stefan
>
>
>
>
>
> ________________________________________
_______
> FlashComm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
> To change your subscription options or search the archive:
> http://chattyfig.figleaf.com/mailman/listinfo/flashcomm
>
> Brought to you by Fig Leaf Software
> Premier Authorized Adobe Consulting and Training
> http://www.figleaf.com
> http://training.figleaf.com
bill sanders | www.sandlight.com | bloomfield, ct | 860-242-2260
________________________________________
_______
FlashComm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
________________________________________
_______
FlashComm-1Ss2GqJETD3yZ38Mhd3e/9ZfFG6BLHNm@public.gmane.org
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcomm
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
|
|
|
|
|