Re: [flexcoders] Preventing SWF from dis-assembling

2009-09-14 Thread Rohit Sharma
 I am not sure Nitrolm will help.

  I think I was not clear in mail. The problem is while we are hosting the
application on our web server.
  Once the swf gets downloaded at client side, it can be disassembled.I want
to prevent that.


On Mon, Sep 14, 2009 at 10:14 PM, Jeffry Houser j...@dot-com-it.com wrote:




  Nitrolm.com

 Rohit Sharma wrote:



 Hello All,

  We are working on a commercial application being built on Flex 3.0
 framework.
 Recently we noticed that the swf can be easily dis-assembled and the code
 and the components can be retrieved.
 Please suggest ways to prevent this or make it harder.
 I have read that one way is obfuscation but that only makes the code
 hard to read.
 So, I am not too keen about obfuscating the code.

 Looking for replies.

 Thanks,
 Rohit


 --
 Jeffry Houser, Technical Entrepreneur
 Adobe Community Expert: 
 http://tinyurl.com/684b5hhttp://www.twitter.com/reboog711  | Phone: 
 203-379-0773
 --
 Easy to use Interface Components for Flex 
 Developershttp://www.flextras.com?c=104
 --http://www.theflexshow.comhttp://www.jeffryhouser.com
 --
 Part of the DotComIt Brain Trust

  



Re: [flexcoders] Preventing SWF from dis-assembling

2009-09-14 Thread Jeffry Houser


Nitrolm.com

Rohit Sharma wrote:
 


Hello All,

 We are working on a commercial application being built on Flex 
3.0 framework.
Recently we noticed that the swf can be easily dis-assembled and the 
code and the components can be retrieved.

Please suggest ways to prevent this or make it harder.
I have read that one way is obfuscation but that only makes the 
code hard to read.

So, I am not too keen about obfuscating the code.

Looking for replies.

Thanks,
Rohit




--
Jeffry Houser, Technical Entrepreneur
Adobe Community Expert: http://tinyurl.com/684b5h
http://www.twitter.com/reboog711  | Phone: 203-379-0773
--
Easy to use Interface Components for Flex Developers
http://www.flextras.com?c=104
--
http://www.theflexshow.com
http://www.jeffryhouser.com
--
Part of the DotComIt Brain Trust



Re: [flexcoders] Preventing SWF from dis-assembling

2009-09-14 Thread Jeffry Houser


You can't prevent it.  Isn't it daily that a new form of DRM is broken 
by some hacker? 

But, NitroLM has some tools to encrypt your swf files; and a special 
loader that will load up an encrypted swf and decrypt it for running. 

Such encryption in place makes it a lot harder to decompile the swf. 

I do not know of any alternative solutions to this. But, you're more 
than welcome to build your own.


Rohit Sharma wrote:
 

 
 I am not sure Nitrolm will help.


  I think I was not clear in mail. The problem is while we are hosting 
the application on our web server.
  Once the swf gets downloaded at client side, it can be 
disassembled.I want to prevent that.
  

On Mon, Sep 14, 2009 at 10:14 PM, Jeffry Houser j...@dot-com-it.com 
mailto:j...@dot-com-it.com wrote:


 



 Nitrolm.com


Rohit Sharma wrote:
 


Hello All,

 We are working on a commercial application being built on
Flex 3.0 framework.
Recently we noticed that the swf can be easily dis-assembled and
the code and the components can be retrieved.
Please suggest ways to prevent this or make it harder.
I have read that one way is obfuscation but that only makes
the code hard to read.
So, I am not too keen about obfuscating the code.

Looking for replies.

Thanks,
Rohit



-- 
Jeffry Houser, Technical Entrepreneur

Adobe Community Expert: http://tinyurl.com/684b5h 
http://tinyurl.com/684b5h
http://www.twitter.com/reboog711 http://www.twitter.com/reboog711  | 
Phone: 203-379-0773
--
Easy to use Interface Components for Flex Developers
http://www.flextras.com?c=104 http://www.flextras.com?c=104
--
http://www.theflexshow.com http://www.theflexshow.com
http://www.jeffryhouser.com http://www.jeffryhouser.com
--
Part of the DotComIt Brain Trust





--
Jeffry Houser, Technical Entrepreneur
Adobe Community Expert: http://tinyurl.com/684b5h
http://www.twitter.com/reboog711  | Phone: 203-379-0773
--
Easy to use Interface Components for Flex Developers
http://www.flextras.com?c=104
--
http://www.theflexshow.com
http://www.jeffryhouser.com
--
Part of the DotComIt Brain Trust



RE: [flexcoders] Preventing SWF from dis-assembling

2009-09-14 Thread Battershall, Jeff
Rohit,

At one point I had lost some Flex source code for a particular project and used 
one of the publicly available SWF de-compilation tools for such out there. It 
'worked' but realize that your MXML will not be recovered, only the AS code 
that exists behind it.  Frankly, from the perspective of re-doing a project, 
the AS source code wasn't that useful to me.  I ended up re-coding it from 
scratch. So, I'm not sure what you're trying to protect exactly but 
de-compilation isn't going deliver your Flex project to anyone, ready to be 
re-compiled.

Possibly someone might know otherwise, my experience with SWF de-compilation is 
limited.  Modules are another possible approach, where your code is loaded at 
run time and you have some sort of scheme to allow them to be downloaded to the 
shell application at runtime, based upon credentials.

Jeff


From: flexcoders@yahoogroups.com [mailto:flexcod...@yahoogroups.com] On Behalf 
Of Jeffry Houser
Sent: Monday, September 14, 2009 1:56 PM
To: flexcoders@yahoogroups.com
Subject: Re: [flexcoders] Preventing SWF from dis-assembling




 You can't prevent it.  Isn't it daily that a new form of DRM is broken by some 
hacker?

 But, NitroLM has some tools to encrypt your swf files; and a special loader 
that will load up an encrypted swf and decrypt it for running.

 Such encryption in place makes it a lot harder to decompile the swf.

 I do not know of any alternative solutions to this. But, you're more than 
welcome to build your own.

Rohit Sharma wrote:



 I am not sure Nitrolm will help.

  I think I was not clear in mail. The problem is while we are hosting the 
application on our web server.
  Once the swf gets downloaded at client side, it can be disassembled.I want to 
prevent that.

On Mon, Sep 14, 2009 at 10:14 PM, Jeffry Houser 
j...@dot-com-it.commailto:j...@dot-com-it.com wrote:


 Nitrolm.com

Rohit Sharma wrote:


Hello All,

 We are working on a commercial application being built on Flex 3.0 
framework.
Recently we noticed that the swf can be easily dis-assembled and the code and 
the components can be retrieved.
Please suggest ways to prevent this or make it harder.
I have read that one way is obfuscation but that only makes the code hard 
to read.
So, I am not too keen about obfuscating the code.

Looking for replies.

Thanks,
Rohit


--

Jeffry Houser, Technical Entrepreneur

Adobe Community Expert: http://tinyurl.com/684b5h

http://www.twitter.com/reboog711  | Phone: 203-379-0773

--

Easy to use Interface Components for Flex Developers

http://www.flextras.com?c=104

--

http://www.theflexshow.com

http://www.jeffryhouser.com

--

Part of the DotComIt Brain Trust




--

Jeffry Houser, Technical Entrepreneur

Adobe Community Expert: http://tinyurl.com/684b5h

http://www.twitter.com/reboog711  | Phone: 203-379-0773

--

Easy to use Interface Components for Flex Developers

http://www.flextras.com?c=104

--

http://www.theflexshow.com

http://www.jeffryhouser.com

--

Part of the DotComIt Brain Trust