Re: [flexcoders] Restrict access to an API to only allowed applications
It is not the case here, we only need a way to securely store a secret key and get it once when the application starts. The important thing here is actually to make sure only approved applications can access the API, if the overhead would fullfill the requirement, then it is OK. I can't think of a solution to this problem unless the OS itself would offer a way to identify an application through its signing certificate. Any idea in this direction? can we use that certificate somehow? Haykel Ben Jemia Allmas Web RIA Development http://www.allmas-tn.com On Mon, Sep 26, 2011 at 8:43 PM, Johannes Nel johannes@gmail.comwrote: ** The problem with making it as hard as possible is the overhead on your client application. decrypting a lot of data is a processer intensive operation and your own UI could suffer, while someone stealing data could decrypt it in C and republish that data unencrypted, giving their UI the edge over yours. On Mon, Sep 26, 2011 at 6:45 PM, Haykel BEN JEMIA hayke...@gmail.comwrote: ** yeah you have just confirmed my 'fear' that for client applications there is actually no secure way to identify them because anything they include (data, algorithms etc.) can be cracked and the identification process can be reproduced. We can only try to make it as hard as possible. Haykel Ben Jemia Allmas Web RIA Development http://www.allmas-tn.com On Mon, Sep 26, 2011 at 1:35 PM, claudiu ursica the_bran...@yahoo.comwrote: ** The thing is that most client side apps implement security by obscurity which pretty much means that you will never be safe 100%, the only thing you do is not putting it in plain sight. So as you continue is add more level of obscurity, but as said that will only make it harder still not impossible to crack. You can double/triple that by server side checks e.g. trusted ips, domains, user etc. Whenever server feels like there is not enough trust should deny the connection. Obviously the topic is large enough to tackle in just a couple of lines, hopes this gives you a start ... C -- *From:* Haykel BEN JEMIA hayke...@gmail.com *To:* flexcoders@yahoogroups.com *Sent:* Monday, September 26, 2011 1:40 PM *Subject:* Re: [flexcoders] Restrict access to an API to only allowed applications Thanks Claudiu, I have found a PDF of the presentation and on page 4 it says the following about protecting sensitive data through embedding: * Most decompilers don’t look at embedded data. * Given that SWF is an open file format, nothing is really stopping them from doing this in the future. * Useful for quick/dirty storage of WebService credentials. So this is definitly better than storing the keys in plain text format, but still easy to crack. Any other suggestions. Thanks, Haykel Ben Jemia Allmas Web RIA Development http://www.allmas-tn.com On Mon, Sep 26, 2011 at 11:33 AM, claudiu ursica the_bran...@yahoo.comwrote: ** You can embed the keys instead of keeping them in plain site. check this session I think you will find some useful stuff: http://tv.adobe.com/watch/360flex-conference/encrypting-flex-protecting-revenue-by-andrew-westberg/ C -- *From:* Haykel BEN JEMIA hayke...@gmail.com *To:* flexcoders flexcoders@yahoogroups.com *Sent:* Monday, September 26, 2011 12:00 PM *Subject:* [flexcoders] Restrict access to an API to only allowed applications Hi, I'm looking for the best and most secure way to restrict access to a web API to only allowed applications. The best option I found is to use 2-Legged OAuth where applications would get a consumer key and a secret key. The problem here is that SWF files can be easily decompiled and the keys extracted. My questions here are: * Does anybody know a way to protect the keys? * Is there another authorization mechanism that is better suited for such client applications in general (Flash, JavaScript ...) Thanks. Haykel Ben Jemia Allmas Web RIA Development http://www.allmas-tn.com -- j:pn \\no comment
[flexcoders] SWFLoader - handling 401 response
I'm working with a SWFLoader to load images. If it tries to load an image from a URL that requires authorization, IE pops up a login dialog. This is particularly annoying when there are many SWFLoaders displayed. I'd like it to quietly fail. I'm calling unloadAndStop() when the 401 response code with a WWW-Authenticate header is returned, which is what causes the popup, but that doesn't work. I'd like to experiment with various request headers, but I can't see any way on the SWFLoader that I can add headers to the request, since it doesn't accept a URLRequest for the URL. Does anyone have any clue about how I might get rid of these popups?
[flexcoders] Reading barcodes
Can anyone recommend a good strategy for reading barcodes on an AIR 3 mobile app? The as3 port of the zxing library does not appear to have been updated since 2009, but may work well, for all I know. But it occurs to me, that this could also be a good opportunity for a native extension. Any experiences or thoughts?
Re: [flexcoders] Reading barcodes
use ready made libraries from Sourceforge and you can get start faster. On Wed, Sep 28, 2011 at 12:37 AM, Richard Rodseth rrods...@gmail.comwrote: ** Can anyone recommend a good strategy for reading barcodes on an AIR 3 mobile app? The as3 port of the zxing library does not appear to have been updated since 2009, but may work well, for all I know. But it occurs to me, that this could also be a good opportunity for a native extension. Any experiences or thoughts?
Re: [flexcoders] Reading barcodes
Yes, I clearly don't want to do this from scratch, hence the question. Any particular library you recommend? Any in AS3? On Tue, Sep 27, 2011 at 9:43 AM, James Ong yanlile...@gmail.com wrote: ** use ready made libraries from Sourceforge and you can get start faster. On Wed, Sep 28, 2011 at 12:37 AM, Richard Rodseth rrods...@gmail.comwrote: ** Can anyone recommend a good strategy for reading barcodes on an AIR 3 mobile app? The as3 port of the zxing library does not appear to have been updated since 2009, but may work well, for all I know. But it occurs to me, that this could also be a good opportunity for a native extension. Any experiences or thoughts?
[flexcoders] Re: Trying to pass a value to the mxml/swf file from java(android).How?
No Saurabh, its not the part of android The flex project contains the mxml application file. flex produces the build in swf format. The following method is used to get the run time arguments in flex side var flashVarsObj:Object = Application.application.parameters as Object; arg1 = flashVarsObj.arg1; arg2 = flashVarsObj.arg2; Using the FlashVars object you can pass the arguments to swf file FlashVars=arg1=valarg2=val2 please follow the below link to know how to load swf in android. http://stackoverflow.com/questions/6532303/problem-loading-swf-file-in-android; Thanks, --- In flexcoders@yahoogroups.com, rawat rawatsaurabh@... wrote: Hi Rohini, Is the part of the code above mxml in android(in androidmanifest.xml file).PLz elaborate , i would like to know more about what you have posted. Best rgds and Thanks in advance Saurabh --- In flexcoders@yahoogroups.com, Shunmuga msrohini@ wrote: you can pass the arguments to swf file by using Flashvars: FlashVars=arg1=valarg2=val2 string htmlUrl = object width=\550\ height=\400\ param name=\movie\ value=\file:///android_asset/sample.swf\ embed src=\file:///android_asset/sample.swf\ FlashVars=arg1=valarg2=val2 width=\550\ height=\400\ /embed/object; In MXML file: var flashVarsObj:Object = Application.application.parameters as Object; arg1 = flashVarsObj.arg1; arg2 = flashVarsObj.arg2; Thanks, Rohini. --- In flexcoders@yahoogroups.com, rawat rawatsaurabh@ wrote: HI, I have been trying to pass the values to the mxml file(whose output is .swf file) via android (java code) , But i am unable to do this.Here is my problem, I think tht .SWF file is a binary file(like exe , .out or .dll or .iso) which runs on flash platforms(browser, mobile phone supporting flash).Now i want the output of the .swf to be dependent on some values which I want to pass thourgh the android code. Other way is that I put the mxml files itself inside the eclipse(android project IDE) and pass the values to it (don't know how) compile it using mxmlc.exe compiler and link(don't know how ) with the android project and generate the final output file(we call it apk) and run it.Please suggest me which way to go even though my study is still partial but I am at the cross roads of confusion.Please suggest me which way to go and how. Rgds, Saurabh
Re: [flexcoders] Re: exclude certain classes from debugging session
yes, I'm familiar with watch expressions but they don't really help me with this project, I'm working on a project with thousands of classes and want to monitor the activity taking place in a couple of the classes while excluding the rest. On 26 September 2011 16:59, valdhor valdhorli...@embarqmail.com wrote: ** Just use watch expressions to see only the items you are interested in. --- In flexcoders@yahoogroups.com, Wouter Schreuders wschreuders@... wrote: Hi All When debugging some code and stepping through or stepping over some code, is it possible to configure flex to not include certain classes in the debugging session or at least to entirely skip those classes from begin included in the debugging session(but they still need to execute, just don't want to see it) The reason for this is that sometimes I'm stepping though some code and there are certain classes just dont' want to know about (for instance tweening classes or robotlegs) Anyone know if this is possible? Thanks Wouter
[flexcoders] asdocs blows up.
I have been using asdoc for a number of years to document a system. Recently I tried to run it to create a new version of the docs and I get the message; Error: Could not create toplevel.xml: Nothing else to provide a clue as to what might be happening. The full command I run is; C:\Program Files (x86)\Adobe\Flex Builder 3\sdks\3.5.0\bin\asdoc -warnings=false -source-path I:\FCDSApps\src -doc-sources I:\FCDSApps\src\Classes\Input I:\FCDSApps\src\com\Utils\ I:\FCDSApps\src\AppTools -output I:\FCDSApps\Documentation\CustomComponents I have tried it on XP x86 and Widows 7 x64. I get the same error. Windows 7 actually provides a crash dialog box with the following; Problem signature: Problem Event Name: APPCRASH Application Name: asDocHelper.exe Application Version: 0.0.0.0 Application Timestamp:449a14c3 Fault Module Name:StackHash_2c8f Fault Module Version: 0.0.0.0 Fault Module Timestamp: Exception Code: c0fd Exception Offset: 77851264 OS Version: 6.1.7601.2.1.0.256.48 Locale ID:1033 Additional Information 1: 2c8f Additional Information 2: 2c8f7c9734cfabe0c452a7c52273e5ef Additional Information 3: 6ef7 Additional Information 4: 6ef7d84656c59f9fa0f41b2aa8bc8b8c Does anyone have any idea how to go about troubleshooting this? Paul
[flexcoders] What happened to advancedDataGridClasses in sdk 3.6.0
Whilst trying to resolve my asdoc's issue, I decided to download sdk 3.6.0. I previously had been using 3.5.0. When I try to compile my application I get an error 1064 looking for AdvancedDataGridColumn in my as code. I checked and the import is there; import mx.controls.advancedDataGridClasses.AdvancedDataGridColumn; When I use intellisense and start typing mx.controls it doesn't find advancedDataGridClasses. For fun I copied the advancedDataGridClasses folder from 3.5.0 to 3.6.0 with no joy. Anybody care to explain what's going on, or point me to the docs that might help? Paul
[flexcoders] Re: What happened to advancedDataGridClasses in sdk 3.6.0
Nevermind. I had not downloaded the Datavisualization bit. once I downloaded this the issue went away. Paul --- In flexcoders@yahoogroups.com, aceoohay pauls@... wrote: Whilst trying to resolve my asdoc's issue, I decided to download sdk 3.6.0. I previously had been using 3.5.0. When I try to compile my application I get an error 1064 looking for AdvancedDataGridColumn in my as code. I checked and the import is there; import mx.controls.advancedDataGridClasses.AdvancedDataGridColumn; When I use intellisense and start typing mx.controls it doesn't find advancedDataGridClasses. For fun I copied the advancedDataGridClasses folder from 3.5.0 to 3.6.0 with no joy. Anybody care to explain what's going on, or point me to the docs that might help? Paul
[flexcoders] Re: asdocs blows up.
While I would still like to understand how to troubleshoot this, it would appear that SDK 3.6.0 doesn't have the problem. Unfortunately it will take a little while to be able to fully switch to 3.6.0. Paul --- In flexcoders@yahoogroups.com, aceoohay pauls@... wrote: I have been using asdoc for a number of years to document a system. Recently I tried to run it to create a new version of the docs and I get the message; Error: Could not create toplevel.xml: Nothing else to provide a clue as to what might be happening. The full command I run is; C:\Program Files (x86)\Adobe\Flex Builder 3\sdks\3.5.0\bin\asdoc -warnings=false -source-path I:\FCDSApps\src -doc-sources I:\FCDSApps\src\Classes\Input I:\FCDSApps\src\com\Utils\ I:\FCDSApps\src\AppTools -output I:\FCDSApps\Documentation\CustomComponents I have tried it on XP x86 and Widows 7 x64. I get the same error. Windows 7 actually provides a crash dialog box with the following; Problem signature: Problem Event Name: APPCRASH Application Name: asDocHelper.exe Application Version:0.0.0.0 Application Timestamp: 449a14c3 Fault Module Name: StackHash_2c8f Fault Module Version: 0.0.0.0 Fault Module Timestamp: Exception Code: c0fd Exception Offset: 77851264 OS Version: 6.1.7601.2.1.0.256.48 Locale ID: 1033 Additional Information 1: 2c8f Additional Information 2: 2c8f7c9734cfabe0c452a7c52273e5ef Additional Information 3: 6ef7 Additional Information 4: 6ef7d84656c59f9fa0f41b2aa8bc8b8c Does anyone have any idea how to go about troubleshooting this? Paul
Re: [flexcoders] Re: Trying to pass a value to the mxml/swf file from java(android).How?
If you produce a Flex/AIR app for Android, it is basically an AIR app and you’d have to launch it and pass it parameters like any other Android app. I’m pretty sure flashvars don’t work on AIR apps in Android. On 9/27/11 6:52 AM, Shunmuga msroh...@yahoo.com wrote: No Saurabh, its not the part of android The flex project contains the mxml application file. flex produces the build in swf format. The following method is used to get the run time arguments in flex side var flashVarsObj:Object = Application.application.parameters as Object; arg1 = flashVarsObj.arg1; arg2 = flashVarsObj.arg2; Using the FlashVars object you can pass the arguments to swf file FlashVars=arg1=valarg2=val2 please follow the below link to know how to load swf in android. http://stackoverflow.com/questions/6532303/problem-loading-swf-file-in-android; Thanks, --- In flexcoders@yahoogroups.com mailto:flexcoders%40yahoogroups.com , rawat rawatsaurabh@... wrote: Hi Rohini, Is the part of the code above mxml in android(in androidmanifest.xml file).PLz elaborate , i would like to know more about what you have posted. Best rgds and Thanks in advance Saurabh --- In flexcoders@yahoogroups.com mailto:flexcoders%40yahoogroups.com , Shunmuga msrohini@ wrote: you can pass the arguments to swf file by using Flashvars: FlashVars=arg1=valarg2=val2 string htmlUrl = object width=\550\ height=\400\ param name=\movie\ value=\file:///android_asset/sample.swf\ embed src=\file:///android_asset/sample.swf\ FlashVars=arg1=valarg2=val2 width=\550\ height=\400\ /embed/object; In MXML file: var flashVarsObj:Object = Application.application.parameters as Object; arg1 = flashVarsObj.arg1; arg2 = flashVarsObj.arg2; Thanks, Rohini. --- In flexcoders@yahoogroups.com mailto:flexcoders%40yahoogroups.com , rawat rawatsaurabh@ wrote: HI, I have been trying to pass the values to the mxml file(whose output is .swf file) via android (java code) , But i am unable to do this.Here is my problem, I think tht .SWF file is a binary file(like exe , .out or .dll or .iso) which runs on flash platforms(browser, mobile phone supporting flash).Now i want the output of the .swf to be dependent on some values which I want to pass thourgh the android code. Other way is that I put the mxml files itself inside the eclipse(android project IDE) and pass the values to it (don't know how) compile it using mxmlc.exe compiler and link(don't know how ) with the android project and generate the final output file(we call it apk) and run it.Please suggest me which way to go even though my study is still partial but I am at the cross roads of confusion.Please suggest me which way to go and how. Rgds, Saurabh -- Alex Harui Flex SDK Team Adobe System, Inc. http://blogs.adobe.com/aharui
