-protecting your games-

Printable View

Show 40 post(s) from this thread on one page

07-07-2006, 09:23 PM
SilverVenom

View the source of the HTML/php page? That would be normal, like bob.swf, but I meant inside, you would use actionscript to call other movies, which make up the main content which have random names and extentions, eg: y73he.tmp or yahoo53.xhml which makes it seem legit. The links to all of them would be found in bob.swf...but they would be encoded by SwfEncrypt. Which even if they cracked(which does take time), would still have trouble finding them, then putting it all back together, ect. More trouble than 99% will go to. And I also agree with free distrobution, I don't want people outright stealing my code for something I labored 3 weeks on, but I usually just SwfEncrypt it and put out. Keeps most script kiddies out, not that many are even looking into cracking my movies to begin with.
07-13-2006, 11:14 AM
tomsamson

get hotlinking urls: http://board.flashkit.com/board/showthread.php?t=692998
07-13-2006, 10:28 PM
mclelun

I try ASO Lite, it mess up some of my attachMovie function because of the naming thing. Guess I have to carefully use it. :/

Plus, free version cant change to the name you want it to be, any free flash obfuscator?
09-20-2006, 11:10 AM
Mattattattattat

Been reading through the thread - very useful indeed.

The only idea that I've had to add to this expands The Helmsman's techniques a little... apologies if this has been covered already.

People have been talking about renaming file loaded in a swf to stuff like .tmp...

You could try and load, into the main game swf, a swf containing the core actionscript (not just variables) from a database file... basically take the bits of a swf and sticking it in a database file - instead of loading "script.swf", you load "script.php"...

All depends on wether Flash would read this file... not tried it though :)

Then you have the full array of PHP's cookie, server and referrer functions plus htaccess to protect it, as The Helmsman's example does. All it means is that all your functions are taken totally out of the swf and hidden in PHP.
10-23-2006, 07:02 AM
The Helmsman

Just want to point on some very interseting post of Darron Schall on security features of AS 3.0. Here is a quick cut of the most interesting part:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
"...I also touched on combining Socket and Loader to deliver .swfs in a secure manner. When you view a .swf file, it ends up in your browser's cache and can usually be decompiled rather effortlessly with tools like ASV. I talked about the use case where you can use Loader to download an entire .swf file over a Socket connection (receiving the data as a ByteArray), then place the .swf on the stage via Loader.loadBytes. This route prevents the .swf from being cached by the browser and makes it much harder to decompile. It's not 100% secure yet, but imagine public/private key encryption to deliver the .swf contents over a secure Socket instead. The days of easily-decompiled .swf files may be coming to an end..?"
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
The rest can be found here: Darron Schall - My FITC 2006 ActionScript 3 Slides
07-03-2007, 08:56 PM
nick616

An old but very useful thread...
Three simple questions:

1. In the code (posted by Skribble_Style) verifying the website a game is being played on, it says:
code:
```
...

if (webSite.indexOf("www.website.com") != -1) {

		//load the game

	} else {

		stop();

		myMessage = "Copyright Infringement! ...
```
Does '//load the game' mean that AS should go there, or that the 'else' will be skipped and thus the game will be loaded?

2. So the javascript breaking frames should be placed right in the main timeline Actions of the FLA?

3. Running it through the obfuscator as the last thing I do won't clash with the other methods, right?
07-04-2007, 03:27 AM
tonypa

1. load the game usually means you place there a gotoAndPlay command to send main timeline to keyframe where actual game code is.
07-04-2007, 05:09 AM
nick616

simple enough - thanks.
07-17-2007, 03:02 AM
Skribble_Style

Thanks for fielding that one Tony :) And sorry about not replying Nick, I haven't had access to the net for quite some time.

I'd like to bring everyones attention to http://www.flashrights.com/

A new site opened by John Cooney , filled with information regarding the legal rights of Flash artists as well as tips and help on avoiding fraud. His grammar and spelling are a little off but I recommend everybody read this. In addition, he's also released a wiki for Flash - http://www.flashwiki.net/index.php?title=Main_Page

Hope this can help a few people!
07-17-2007, 03:29 AM
mr_malee

that is a great resource. Thanks for sharing
07-17-2007, 03:44 AM
BlinkOk

just fyi. prolly been posted a THOUSAND times;
http://www.stampoutpiracy.com
07-17-2007, 08:37 AM
Eager Beaver

A more than two years old thread is alive and kicking!
If nothing is secure then how the secure websites (https://www.xxxxx.com/) are not being hacked. If you put all your FLASH games in a secure website are they safe?
07-17-2007, 02:57 PM
tonypa

Quote:

Originally Posted by Eager Beaver

If you put all your FLASH games in a secure website are they safe?

No. Secure connection only secures the connection between the server and computer, since the swf file is still downloaded into browser cache it can still be hacked same way.
08-06-2007, 08:26 AM
ased07

Licence Key Software for SWF?

Does anyone know of license key software that can be used to protect swf files against copying? - Nothing fancy - just simple, like most Pocket PC software, which runs for a month and then needs the key to be purchased and entered.
Thanx.
08-12-2007, 09:59 PM
mwarren77

what about htaccess

To prevent the theft of files on websites I set up the .htaccess rules in a specific folder. I have not tried this using flash files as I am new to the flash community. If your files are to be played on a web browser there is no way to block people from viewing the source code. So I use this.

Options -Indexes

RewriteEngine On
RewriteCond %{HTTP_REFERER} ^$
RewriteCond %{HTTP_REFERER} !^http://website.com/path/index.php?file=.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://website.com/path/index.php?file=.*$ [NC]
RewriteRule .*\.*$ http://www.website.com/ [R]
11-10-2007, 01:18 AM
AlexBirch

There are amazing obfuscators out there

The best obfuscators turn regular variables into keywords. That way when you decompile the swf, someone can't recompile it as easily.

----
Thus spake Alex Birch
11-10-2007, 01:54 PM
Eager Beaver

Quote:

Originally Posted by AlexBirch

The best obfuscators turn regular variables into keywords. That way when you decompile the swf, someone can't recompile it as easily.
Thus spake Alex Birch

Is it a sofware. How to get it-obfuscators:xbones:
11-10-2007, 02:30 PM
AlexBirch

http://www.kindisoft.com/secureSWF_Lite/
11-13-2007, 01:19 PM
Cimmerian

Quote:

Originally Posted by tonypa

No. Secure connection only secures the connection between the server and computer, since the swf file is still downloaded into browser cache it can still be hacked same way.

And what if over that connection you dont send the swf but the ByteArray of the swf?
11-13-2007, 10:02 PM
dnalogic

hacking forum?

is there somewhere, like a website or anything, where you can post your flash game and get people to try and hack it? just to kind of test out the protection that youve done. i mean ultimately it will hackable 100% of the time as its flash, but just to see how difficult it is.?

anything like that exist?

ive had a little racing game on my portfolio site for a couple of years, and i havent seen it elsewhere on the net (ie it hasnt been stolen yet), so i guess the protection is good enough to get people to move on to other things instead of spend too much time on mine. but it would be nice to have someone give it a dedicated attack just to see how difficult / easy it actually is... 2 mins to hack? 20 minutes??

anyone?
www.neuroid.co.uk
then theres a link to a racing game down the bottom in 'samples' called 'overdrive'

dean

Show 40 post(s) from this thread on one page