StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PO
text
Body
copied!<p>Rule 1:</p> <blockquote> <p>Anyone with intelligence and determination will always obtain your code/keys/source/files/data<br> Anything you do simply increases the potential time/effort required to compromise</p> </blockquote> <p><strong>With or without SecureSWF, will people go to the trouble?</strong></p> <p>A quick Google suggest that not many attempts have been made to decompile SWF files created with secureSWF ... but they must still meet the specification of compiled bytecode ... so it just amounts to obfuscation. The lack of testing suggests:</p> <ol> <li>No one really has independently tested it, and therefore no value in its security can be made </li> <li>People have tested it, it is very effective and people didn't post the results</li> </ol> <p>I think the former is more likely. If you said what the Flash app does, then these points might be more specific.</p> <p>I would look for sources of data relating to how long after release these things have been reversed <em>rather</em> than the security of the system itself (which is irrelevant). </p> <p>Also ensure that making your source secure-ish (rather than cooperating with the community) is the best strategy considering that at some point, a determined mind will be able to access your logic. </p> <p>From a business point of view, your strategic position should not be in keeping your logic scrambled ... as this is futile. You can be as proprietary as you want ... but people will get around it (just ask the games industry). And heavy-handed security causes backlash (see DRM). </p> <p>If you are convinced your application is <strong>so amazing</strong> that people will go to the effort of reversing it, look for another value proposition.</p> <p>Flash is one of those things, like JavaScript, where there is <strong>only so much you can do</strong> and does it really matter? What good is the apps logic without the other links in the chain?</p> <p>Anyway, look for the <strong>required effort to reverse</strong> the encoding <em>rather</em> than the perceived strength of the software's clients.</p> <p>Anyway, Good Luck!</p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload