> Give them demo mode initially. Then when they
> run it display the unique ROM ID of their Palm and
> send them off to a webpage that calls a small
> encryption routine which encrypts these device
> ID with a key known only to you and produces a
> unique code that they must enter on their device.
> 
> Built into your Palm app is a decrypt routine that
> works the encryption backwards (using the same
> key you used to encypt) - if the answer matches
> the Palm's unique ID its registered.
> 
> This is not foolproof but it will beat most users.

  wrong.. it wont beat anyone :)) the code is there.
  it is possible to get a memory dump using a tool
  like "debuffer" without actually having to patch
  the PRC file :))

  your best bet is to simply not have the code in the
  demo version. you can put the "registered" code in
  a seperate PDB file and dynamically load this data
  chunk and treat it like a function.

  to add *some* level of protection, you can encrypt
  this data chunk using the hotsync id, or any other
  'key' :)

  but.. that wont stop them either.. they will just
  get a working PDB file and user id (key) and then
  bypass all your checking/decryption and distribute
  the un-encrypted files :))

  the "dreadling" application did this, and they
  had a warez version available for download in a 
  matter of days (most of the wait was to get a 
  PDB file from an existing registered user).

  unless you like playing around with 'hacks' and
  'tricks' of low level m68k programming - dont bother
  :)) [i enjoy it - and have played games with the
  hackers for the last 5 months]

  i have performed all the research i need for my
  "cracking" paper - and i will outline the best way
  you can protect your applications.. however, it
  is not the best in regards to 'distribution' :))

  if you are interested in the paper.. be sure to 
  send me a note to:

    [EMAIL PROTECTED]

  the goal is to get the paper accepted at palmsource
  2000 :)

  cheers.

az. 
--
Aaron Ardiri 
Java Certified Programmer      http://www.hig.se/~ardiri/
University-College i G�vle     mailto:[EMAIL PROTECTED]
SE 801 76 G�vle SWEDEN       
Tel: +46 26 64 87 38           Fax: +46 26 64 87 88
Mob: +46 70 656 1143           A/H: +46 8 668 78 72

if you enjoy it, then it aint work :) - rule #106 of life


--
For information on using the Palm Developer Forums, or to unsubscribe, please see 
http://www.palmos.com/dev/tech/support/forums/

Reply via email to