Re: [flexcoders] Preventing SWF from dis-assembling
I am not sure Nitrolm will help. I think I was not clear in mail. The problem is while we are hosting the application on our web server. Once the swf gets downloaded at client side, it can be disassembled.I want to prevent that. On Mon, Sep 14, 2009 at 10:14 PM, Jeffry Houser j...@dot-com-it.com wrote: Nitrolm.com Rohit Sharma wrote: Hello All, We are working on a commercial application being built on Flex 3.0 framework. Recently we noticed that the swf can be easily dis-assembled and the code and the components can be retrieved. Please suggest ways to prevent this or make it harder. I have read that one way is obfuscation but that only makes the code hard to read. So, I am not too keen about obfuscating the code. Looking for replies. Thanks, Rohit -- Jeffry Houser, Technical Entrepreneur Adobe Community Expert: http://tinyurl.com/684b5hhttp://www.twitter.com/reboog711 | Phone: 203-379-0773 -- Easy to use Interface Components for Flex Developershttp://www.flextras.com?c=104 --http://www.theflexshow.comhttp://www.jeffryhouser.com -- Part of the DotComIt Brain Trust
Re: [flexcoders] Preventing SWF from dis-assembling
Nitrolm.com Rohit Sharma wrote: Hello All, We are working on a commercial application being built on Flex 3.0 framework. Recently we noticed that the swf can be easily dis-assembled and the code and the components can be retrieved. Please suggest ways to prevent this or make it harder. I have read that one way is obfuscation but that only makes the code hard to read. So, I am not too keen about obfuscating the code. Looking for replies. Thanks, Rohit -- Jeffry Houser, Technical Entrepreneur Adobe Community Expert: http://tinyurl.com/684b5h http://www.twitter.com/reboog711 | Phone: 203-379-0773 -- Easy to use Interface Components for Flex Developers http://www.flextras.com?c=104 -- http://www.theflexshow.com http://www.jeffryhouser.com -- Part of the DotComIt Brain Trust
Re: [flexcoders] Preventing SWF from dis-assembling
You can't prevent it. Isn't it daily that a new form of DRM is broken by some hacker? But, NitroLM has some tools to encrypt your swf files; and a special loader that will load up an encrypted swf and decrypt it for running. Such encryption in place makes it a lot harder to decompile the swf. I do not know of any alternative solutions to this. But, you're more than welcome to build your own. Rohit Sharma wrote: I am not sure Nitrolm will help. I think I was not clear in mail. The problem is while we are hosting the application on our web server. Once the swf gets downloaded at client side, it can be disassembled.I want to prevent that. On Mon, Sep 14, 2009 at 10:14 PM, Jeffry Houser j...@dot-com-it.com mailto:j...@dot-com-it.com wrote: Nitrolm.com Rohit Sharma wrote: Hello All, We are working on a commercial application being built on Flex 3.0 framework. Recently we noticed that the swf can be easily dis-assembled and the code and the components can be retrieved. Please suggest ways to prevent this or make it harder. I have read that one way is obfuscation but that only makes the code hard to read. So, I am not too keen about obfuscating the code. Looking for replies. Thanks, Rohit -- Jeffry Houser, Technical Entrepreneur Adobe Community Expert: http://tinyurl.com/684b5h http://tinyurl.com/684b5h http://www.twitter.com/reboog711 http://www.twitter.com/reboog711 | Phone: 203-379-0773 -- Easy to use Interface Components for Flex Developers http://www.flextras.com?c=104 http://www.flextras.com?c=104 -- http://www.theflexshow.com http://www.theflexshow.com http://www.jeffryhouser.com http://www.jeffryhouser.com -- Part of the DotComIt Brain Trust -- Jeffry Houser, Technical Entrepreneur Adobe Community Expert: http://tinyurl.com/684b5h http://www.twitter.com/reboog711 | Phone: 203-379-0773 -- Easy to use Interface Components for Flex Developers http://www.flextras.com?c=104 -- http://www.theflexshow.com http://www.jeffryhouser.com -- Part of the DotComIt Brain Trust
RE: [flexcoders] Preventing SWF from dis-assembling
Rohit, At one point I had lost some Flex source code for a particular project and used one of the publicly available SWF de-compilation tools for such out there. It 'worked' but realize that your MXML will not be recovered, only the AS code that exists behind it. Frankly, from the perspective of re-doing a project, the AS source code wasn't that useful to me. I ended up re-coding it from scratch. So, I'm not sure what you're trying to protect exactly but de-compilation isn't going deliver your Flex project to anyone, ready to be re-compiled. Possibly someone might know otherwise, my experience with SWF de-compilation is limited. Modules are another possible approach, where your code is loaded at run time and you have some sort of scheme to allow them to be downloaded to the shell application at runtime, based upon credentials. Jeff From: flexcoders@yahoogroups.com [mailto:flexcod...@yahoogroups.com] On Behalf Of Jeffry Houser Sent: Monday, September 14, 2009 1:56 PM To: flexcoders@yahoogroups.com Subject: Re: [flexcoders] Preventing SWF from dis-assembling You can't prevent it. Isn't it daily that a new form of DRM is broken by some hacker? But, NitroLM has some tools to encrypt your swf files; and a special loader that will load up an encrypted swf and decrypt it for running. Such encryption in place makes it a lot harder to decompile the swf. I do not know of any alternative solutions to this. But, you're more than welcome to build your own. Rohit Sharma wrote: I am not sure Nitrolm will help. I think I was not clear in mail. The problem is while we are hosting the application on our web server. Once the swf gets downloaded at client side, it can be disassembled.I want to prevent that. On Mon, Sep 14, 2009 at 10:14 PM, Jeffry Houser j...@dot-com-it.commailto:j...@dot-com-it.com wrote: Nitrolm.com Rohit Sharma wrote: Hello All, We are working on a commercial application being built on Flex 3.0 framework. Recently we noticed that the swf can be easily dis-assembled and the code and the components can be retrieved. Please suggest ways to prevent this or make it harder. I have read that one way is obfuscation but that only makes the code hard to read. So, I am not too keen about obfuscating the code. Looking for replies. Thanks, Rohit -- Jeffry Houser, Technical Entrepreneur Adobe Community Expert: http://tinyurl.com/684b5h http://www.twitter.com/reboog711 | Phone: 203-379-0773 -- Easy to use Interface Components for Flex Developers http://www.flextras.com?c=104 -- http://www.theflexshow.com http://www.jeffryhouser.com -- Part of the DotComIt Brain Trust -- Jeffry Houser, Technical Entrepreneur Adobe Community Expert: http://tinyurl.com/684b5h http://www.twitter.com/reboog711 | Phone: 203-379-0773 -- Easy to use Interface Components for Flex Developers http://www.flextras.com?c=104 -- http://www.theflexshow.com http://www.jeffryhouser.com -- Part of the DotComIt Brain Trust