[Flash 8] Hide the password

This example checks for the password:
http://img358.imageshack.us/my.php?i...assword9ev.swf

You know how hard it is to hide passwords and other strings in swf. This one hides the password in image.

Post the password if you can find it :)

Futurama-Quote: "The combination is .. "three" "

Nice Idea .. hot it works? o_O ..

It uses getPixels method to read values from image :)
You could make it better by dynamically loading image so its not even in the swf.

I will post the fla if someone is interested or password is cracked.

not to give it away.... 9 numbers, starts with 40 ends with 48 and in between that it has a 98 a 28 and a 2

(i cheated)

Yup, what token said :)
Cheated aswell...

Password depends on how movie is scaled. It has 1 password for 100% scale and another for fullscreen. And of course it changes if you change the picture.

Here is the fla.

The password is: 409828248 :)

I got this. :angel:

Quote:

---

var v7 = 300;
var v3 = 300;
var v4 = 10;
var v5 = new flash.display.BitmapData(v7, v3);
v5.draw(flash.display.BitmapData.loadBitmap('pic') );
var v6 = 0;
var v2 = v7;
while (v2 > v7 - v4) {
var v1 = v3;
while (v1 > v3 - v4) {
v6 += v5.getPixel(v2, v1);
--v1;
}
--v2;
}
v5.dispose();
trace(v6);

---

But I have no tool to get the picture 'pic'...

Quote:

---

Originally Posted by tonypa

It uses getPixels method to read values from image :)
You could make it better by dynamically loading image so its not even in the swf.

---

And this loaded image does stay in cache?
If is not loaded dynamically but its in the flas's library, it is possible to see this image when you use a decompiler?

Quote:

---

Originally Posted by Incrue

And this loaded image does stay in cache?
If is not loaded dynamically but its in the flas's library, it is possible to see this image when you use a decompiler?

---

Yes, if its in the library then it can be viewed and saved.

As about loaded image question, what exactly do you mean by staying in cache?

Quote:

---

Originally Posted by tonypa

Yes, if its in the library then it can be viewed and saved.
As about loaded image question, what exactly do you mean by staying in cache?

---

The case If it is loaded images, how about to find where it loaded from (source url)? Whatever there should be static images somewhere.
Staying in cache means if I want to find your image loaded, I could first (cut some words here not to disclose how to do it easily)... thus I can get your images' url from cache, no hide definitely.

Yes, sure you can find the image eventually. It just adds another step, possible hacker would first need to figure out that image is used to save some data (you can use image that is in your movie anyway), then find the image, then find a method to read data from the image.

I am not saying this is 100% safe, but it might be better then saving strings in swf.