free milk, don't buy the cow

**5TonsOfFlax** · 03-23-2009, 04:09 PM

The site which shall not be named, which has a product which makes our lives more difficult is having a giveaway of that product today. Since I believe the actual url is censored, here's the link I found it on:

Hint: Decompiler.

**Mavrisa** · 03-23-2009, 08:42 PM

**5TonsOfFlax** · 03-23-2009, 09:02 PM

At me? I'm just the messenger. Know your enemy and all that bs.

I'm currently in the planning phase of a (free) online swf encryption tool, but there are a few other projects which I want to complete first.

**Mavrisa** · 03-23-2009, 09:43 PM

Oh no not at you. At *othink and that site. People should at least have to pay to do horrible things to honest people :P

**Schfifty Five** · 03-23-2009, 11:24 PM

Why are they giving it away for free?

I don't think it's that much of an issue anyway... anyone who's willing to steal someone's swf probably wouldn't be too concerned about just torrenting the decompiler too. At least this way, it gives honest flash developers a chance to look at what their code is decompiled so they can try to encrypt/obfuscate it more.

**5TonsOfFlax** · 03-23-2009, 11:26 PM

Exactly my thought process when I decided to post this.

**neznein9** · 03-24-2009, 08:10 PM

I just checked out the (free) "security" offering from HP - the things they think are insecure are hilarious (naming a variable "uid" is a big no no...?) but apart from that it's actually the best decompiler/viewer I've seen for AS3 so far.

Of course it's windows only so...yeah.

**Schfifty Five** · 03-24-2009, 09:17 PM

Originally Posted by neznein9

I just checked out the "security" offering from HP - the things they think are insecure are hilarious (naming a variable "uid" is a big no no...?) but apart from that it's actually the best decompiler/viewer I've seen for AS3 so far.

Of course it's windows only so...yeah.

Thanks for the link, I had never seen that before.
How new is it?

**5TonsOfFlax** · 03-24-2009, 09:50 PM

I saw the slashdot article on that HP thing too. Figured someone else would comment on it.

I just tried the HP one out (I actually only downloaded and haven't installed the one I originally linked).

2 of 4 swfs I tried it with it said "the file contains no Actionscript". It was wrong. Those were Flash10 specific projects compiled with mxmlc through flashdevelop. It successfully decompiled a non-flash-10 as3 flashdevelop project and a non-flash-10 swf built by cs4.

It is pretty good.

**cancerinform** · 03-25-2009, 12:48 PM

I deleted all urls in this thread, since as 5TonsOfFlax correctly said, it is not allowed on Flashkit to show or advertise or worship any software for malpractice.

**Schfifty Five** · 03-25-2009, 07:37 PM

Originally Posted by cancerinform

I deleted all urls in this thread, since as 5TonsOfFlax correctly said, it is not allowed on Flashkit to show or advertise or worship any software for malpractice.

I don't see anything wrong with the HP one. It's purpose is to find security vulnerabilities only, and it's not meant for stealing swfs at all.

**cancerinform** · 03-25-2009, 09:10 PM

Please read under Do not post about Warez. This thread should not have been here in the first place. I did not delete it, because it was not a positive advertisement for that tool. If I let somebody know about some tool or whatever as you did, I usually say "Google for..." in this case Flash HP security.

http://board.flashkit.com/board/showthread.php?t=698433

Here is also something some of you may be interested. Here you can submit links for Flash-related stuff/tools (but no decompilers of course

).

http://www.flashkit.com/submissions/

**5TonsOfFlax** · 09-26-2009, 12:41 PM

For one, because Warez is bad m'kay?

And for two, because discussing it inevitably leads to flame wars, and possibly liability for flashkit.

Thread: free milk, don't buy the cow

Thread Tools

Display

free milk, don't buy the cow

Posting Permissions