> From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf > Of Burak KALAYCI > Sent: Monday, May 08, 2006 11:57 AM > To: Flashcoders mailing list > Subject: Re: [Flashcoders] obfuscation swf ! > > Hi John, > > I wouldn't say SWF Encrypt is absolute crap - though it took > just minutes for us to bypass their initial 3.0 version. > > As per requests from our customers, we have been deliberately > not bypassing it (but we gave no promises). > > Recently, it turned out it broke some of our applications > (namely UAE and > ASR) because our software does not preserve the tag order > when saving a SWF file and the obfuscation moves real > actionscript bytecode to other tags. We had to move the > scripts back and though we didn't add even a single line of > code to bypass the obfuscation, it turned out some of the > scripts can now be decompiled. I'm sure SWF Encrypt guys can > fix this quickly (or they already may have) because we are > not actively trying to bypass the obfuscation. > > Current release version of ASR can show the script in > fish_secure.swf, with the right options selected. We will > have the same option with the ASV update (as it also uses the > same decompiler engine), which will be released in 10 days > (We hope to have it released by ASVs 6th anniversary - May 16). > > I'd agree that SWF Encrypt is currently a good choice.. But, > one must not depend on it too much. > > Also, I'd suggest identifier renaming ( like > http://www.genable.com/asolite.html ) in addition to any > other obfuscation, as it will be non-reversible even in > theory. It may require more work and care but I think it's worth it.
Big thanks for the info. I've heard loads of FUD about flash encryption versus decompilers, but very little real information. --- John Hattan [EMAIL PROTECTED] Gamedev.net - more 1's and 0's than you can shake a stick at _______________________________________________ [email protected] To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
