Hi John,

I wouldn't say SWF Encrypt is absolute crap - though it took just minutes for us to bypass their initial 3.0 version.

As per requests from our customers, we have been deliberately not bypassing it (but we gave no promises).

Recently, it turned out it broke some of our applications (namely UAE and ASR) because our software does not preserve the tag order when saving a SWF file and the obfuscation moves real actionscript bytecode to other tags. We had to move the scripts back and though we didn't add even a single line of code to bypass the obfuscation, it turned out some of the scripts can now be decompiled. I'm sure SWF Encrypt guys can fix this quickly (or they already may have) because we are not actively trying to bypass the obfuscation.

Current release version of ASR can show the script in fish_secure.swf, with the right options selected. We will have the same option with the ASV update (as it also uses the same decompiler engine), which will be released in 10 days (We hope to have it released by ASVs 6th anniversary - May 16).

I'd agree that SWF Encrypt is currently a good choice.. But, one must not depend on it too much.

Also, I'd suggest identifier renaming ( like http://www.genable.com/asolite.html ) in addition to any other obfuscation, as it will be non-reversible even in theory. It may require more work and care but I think it's worth it.

Best regards,
Burak
www.asvguy.com

Burak KALAYCI, Manitu Group
http://www.buraks.com
http://www.manitugroup.com


----- Original Message ----- From: "John Hattan" <[EMAIL PROTECTED]>
To: "'Flashcoders mailing list'" <[email protected]>
Sent: Monday, May 08, 2006 18:36 PM
Subject: RE: [Flashcoders] obfuscation swf !


I wrote up a review here.

http://www.gamedev.net/features/reviews/productreview.asp?categoryid=35&prod
uctid=565

A couple of the commentors talked about how it's absolute crap, but I
haven't yet found a SWF-decryptor that can bring the encrypted SWF back to
something resembling its original form.

I probably should've embedded some hidden source-code and challenged the
naysayers to present it to me :)


_______________________________________________
[email protected]
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com

Reply via email to