From:                   ml user <[EMAIL PROTECTED]>

> First you can't make any program uncrackable ! If somebody cracks my

Right!

> Now to security. I'm using a very big algorithem to calc. my registration
> codes (the algorithm is splitted and randomly placed in the program file).
> The registration code is very big (40 bytes). The registration code gets
> checked several times while the program is running (I don't have to say
> that on every startup the registration code gets checked ;-] ).

A 40 byte code that can be entered quickly is easier to crack than a 
5 byte code with a 5 minute delay between trys.  Computers have all 
the time in the world.

Take POSE for instance.  Source is available.  Something like this 
can be reprogrammed to enter any data into a program and look for 
results.  

Remember a high tech 40 byte code use by Netscape or IE (don't 
remember which), was cracked.  That's why they have gone to 128 bytes 
for secure transactions.

Lastly, most Palm III apps are small (relative to Windows type 
programs).  It's no big trick to disassemble these.  Even if the 
author used code obfsucating s/w, it just takes time for someone to 
disassemble a 30 or 40K app.

There are two things at work here.  

1) You the author is trying to make a few bucks for your effort.
2) The cracker who has all the time in the world.

Who do you think will win?  The cracker will always win.  There is NO 
s/w that cannot be cracked.  You just have to make it NOT WORTH the 
effort to the cracker.

There is no gratification to cracking a piece of s/w that costs $10 
and uses a very unsophisticated code (say 5 digits with 5 minute 
delay between trys).  On the other hand a $100 piece of software that 
advertizes an unbreakable code that uses NSA code technology, is 
GUARANTEED to be cracked.
--
-----------------------------------------------------------------
Discussion Group:        http://www.halcyon.com/ipscone/wwwboard/

Protect your constitutional rights. Your favorite one may be next!
-----------------------------------------------------------------

Reply via email to