On 16 May 2006, at 18:27, Ronald Vogelaar wrote:
Whichever might best describe it, RS still has not issued a fix,
nor sent out a statement to its customers. There are still websites
offering encrypted classes for sale and download.
This issue must surely hurt their sales.
Without stretching this thread out to longer than it
should, I thought I would just update people on
what's going on considering this is on everyone's
lips.
Myself and Norman have contacted RS with our test
results and Dave Grogono replied to confirm that
they are very much aware of the problem and I'm
sure will be on the case with regards to fixing the
issue.
I'm sure that someone at RS has received a severe
bollocking (to say the least) for that slip-up.
Ironically, this whole thing came to light because I was
trying out encryption for some classes that I'm about to
release - my first release in RB. I had never used encryption
before - both as imported classes or otherwise, so I was
trying to "break" the encryption to see how safe it actually
was. The encryption apparently broke, but I wasn't sure if
it was just that I wasn't encrypting my classes correctly - hence
the original question.
I have put it forward to Dave that r3 should not only
fix the issue, but should change the algorithm such
that classes encrypted from r3 should not be importable
into r1 or r2. Extreme, perhaps, but desperate times
call for desperate measures.
For the here and now however, as far as class developers
go I would imagine that the best way forward is to provide
compiled demos of their classes, and only hand over the
actual classes once payment has been received. That way
they don't need to rely on the security (or not, as it seems) of
someone else's encryption.
As many of you have already pointed out, security through
obscurity is never a safe option in the long run.
All the best,
Mark.
_______________________________________________
Unsubscribe or switch delivery mode:
<http://www.realsoftware.com/support/listmanager/>
Search the archives of this list here:
<http://support.realsoftware.com/listarchives/lists.html>
