Yeah I personally do not care that something is 100% secure, it never is.
But if a few lines of basic Actionscript will stop 99% of the kiddies out
there from leeching then that's fine by me.

My apps often use Flashcom and it is therefore important that I don't make
it too easy for folks to simply leech my swf and run a videochat off my
back.
I am doing serverside referrer checks (yes, referrer can be spoofed but up
to this day noone has actually gone through such lengths) so the swf can't
connect from any other domain anyway. However the fact that swfs can be
'hotlinked' like images makes this a bit more of an issue. Any clientside
barrier is one more hurdle to jump. In my experience kiddies give up at the
first hurdle as they do not expect any hurdles at all.

Stefan

 

> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Marcelo de 
> Moraes Serpa
> Sent: 11 February 2006 13:25
> To: Open Source Flash Mailing List
> Subject: Re: [osflash] SWF protection techniques
> 
> I´m using mod_rewrite and it does a great job in "masking" 
> the real url of the SWF, it actually prevents the swf from 
> being called directly on the url. I´m using cakePHP as the 
> framework for my system and cakeAMFPHP for Flash Remoting.
> 
> But in the end, the user could use SWF saving apps to get the 
> local-cached SWF... the question is - is there a way to 
> prevent the browser from caching the SWF?
> 
> Another good point is that, to "fully" protect the SWF from 
> assets stealin (that would be the worst form of stealing) I 
> guess the only way is to obfuscate the code using a tool like 
> SWF Encrypt.
> 
> Cheers,
> 
> - Marcelo.
> 
> WIF wrote:
> 
> >like calling a script that provides some info (url, name, ...) ?
> >maybe even MD5 ... or some other hash ?
> >
> >
> >  
> >
> >>On 2/10/06, Jim Berkey <[EMAIL PROTECTED]> wrote:
> >>    
> >>
> >>>No, the code wouldn't work on that game so I removed it - it's too 
> >>>old (version 4 or 5) - try leeching this:
> >>>http://jimbo.us/Games/Test.swf
> >>>http://jimbo.us/Games/Test.fla
> >>>http://jimbo.us/Games/Test.html
> >>>      
> >>>
> >>http://snafoo.org/tmp/test.swf
> >>
> >>swfmill, about three minutes, admittedly helped by the fact there
> >>wasn't much code. i searched for a frame jump (swfmill swf2xml
> >>Test.swf | grep Goto), and simply put it at the beginning of the
> >><DoAction/>, right after the string constant definitions:
> >>
> >>...
> >>              <String value="Hey Dood! This movie's copyrights are
> >>being infrin$            </strings>
> >>          </Dictionary>
> >><GotoFrame frame="4"/><!-- <<< inserted this here -->
> >>...
> >>
> >>sorry, maybe it helps you to come up with a better solution.
> >>
> >>mark
> >>
> >>--
> >>http://snafoo.org/
> >>jabber: [EMAIL PROTECTED]
> >>
> >>_______________________________________________
> >>osflash mailing list
> >>[email protected]
> >>http://osflash.org/mailman/listinfo/osflash_osflash.org
> >>    
> >>
> >
> >
> >_______________________________________________
> >osflash mailing list
> >[email protected]
> >http://osflash.org/mailman/listinfo/osflash_osflash.org
> >
> >  
> >
> 
> 
>       
> 
>       
>               
> _______________________________________________________ 
> Yahoo! doce lar. Faça do Yahoo! sua homepage. 
> http://br.yahoo.com/homepageset.html 
> 
> 
> 
> _______________________________________________
> osflash mailing list
> [email protected]
> http://osflash.org/mailman/listinfo/osflash_osflash.org
> 


_______________________________________________
osflash mailing list
[email protected]
http://osflash.org/mailman/listinfo/osflash_osflash.org

Reply via email to