On 12/29/2009, at 05:27 PM, Gleb Dolgich wrote: > Not if you use an asymmetric encryption algorithm (based on public/private > key pairs). This makes creation of key generators practically impossible, as > key generation code is different from key verification code and is not part > of your shipping application.
Right, but this can also be easily circumvented. > AquaticPrime (RSA-based, file-based keys): http://www.aquaticmac.com/ Aquatic Prime proof-of-concept crack: http://zathras.de/angelweb/blog-aquatic-prime-crack.htm > CocoaFob (my own, DSA-based, textual keys): http://github.com/gbd/cocoafob/ > CodexFab (a sample implementation using CocoaFob): > http://github.com/machinecodex/CodexFab I believe this falls in the same category as Aquatic Prime. It’s true that in this case key generators are almost impossible, but this doesn’t matter at all. Uli said that cracks tend to instability, but this isn’t the common case. Furthermore, for people who use cracked software it doesn’t matter if they enter a self-generated key or apply a crack. In most cases a crack is only a “jmp” away (in a lot of cases in the registration window) and I don’t see how this could affect overall application performance or stability. While I agree that software developers should make sure that “script kiddies” can’t put their assets in danger, I also agree that it’s non-sense to do more in this case. It’s all about competition—a competition you can’t win. Rafael Chief Sucker at Juicy Cocktail http://www.juicycocktail.com/ ------------------------------------ MacSB email guidelines: http://tinyurl.com/2g55d6 Use MacSB-Talk for off topic messages: http://groups.google.com/group/macsb-talk Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/macsb/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/macsb/join (Yahoo! ID required) <*> To change settings via email: [email protected] [email protected] <*> To unsubscribe from this group, send an email to: [email protected] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
