Re: [flexcoders] SWF/Flex security

2008-08-04 Thread Andrew Westberg
I'm not sure whether or not it'll be archived or not.  Just send our sales
guy an email and he can schedule my time for a demo on Adobe Connect.  sales
[at] nitrolm.com

-Andrew

On Sun, Aug 3, 2008 at 7:04 PM, Scott [EMAIL PROTECTED] wrote:

Is there going to be an archived webcast afterwards?  I'd love to go to
 that but unfortunately; August is the busiest time of the year for me and my
 clients.



  Scott


  --

 *From:* flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] *On
 Behalf Of *Andrew Westberg
 *Sent:* Sunday, August 03, 2008 5:45 PM
 *To:* flexcoders@yahoogroups.com
 *Subject:* {Disarmed} Re: [flexcoders] SWF/Flex security



 I'll be speaking on this topic at 360 Flex San Jose.  At the basic level,
 you can embed or even encrypt secure information such as
 usernames/passwords.  If you need a full blown authentication and encryption
 system, I'd look into nitrolm.com.  This will be discussed at the 360
 presentation along with some other non-commercial techniques you can use on
 your own.


 http://www.360conferences.com/360flex/2008/04/360flex-san-jose-schedule.html

 -Andrew Westberg

 On Sun, Aug 3, 2008 at 4:51 PM, Scott [EMAIL PROTECTED] wrote:

 In preparing for securing the site before I code the main site functions I
 thought I'd read up a bit on security.  I was thinking that flex/swf code
 could not be decompiled. But then I found this:
 http://blog.everythingflex.com/2008/02/29/check-you-as3-code/



 I'd like to do some remote object validation (adding in another field for
 the remote object that would verify that the request was coming from my SWF
 and not someone else's (possibly malicious) code.  However, if someone can
 decompile my SWF files then all of that would be for nothing.  What can
 people say about flex code decompiling and protecting my code from prying
 eyes?



  Regards,

   Scott




 --
 This message has been scanned for viruses and
 dangerous content by *MailScanner* http://www.mailscanner.info/, and is
 believed to be clean.
  



Re: [flexcoders] SWF/Flex security

2008-08-03 Thread Andrew Westberg
I'll be speaking on this topic at 360 Flex San Jose.  At the basic level,
you can embed or even encrypt secure information such as
usernames/passwords.  If you need a full blown authentication and encryption
system, I'd look into nitrolm.com.  This will be discussed at the 360
presentation along with some other non-commercial techniques you can use on
your own.

http://www.360conferences.com/360flex/2008/04/360flex-san-jose-schedule.html

-Andrew Westberg

On Sun, Aug 3, 2008 at 4:51 PM, Scott [EMAIL PROTECTED] wrote:

In preparing for securing the site before I code the main site
 functions I thought I'd read up a bit on security.  I was thinking that
 flex/swf code could not be decompiled. But then I found this:
 http://blog.everythingflex.com/2008/02/29/check-you-as3-code/



 I'd like to do some remote object validation (adding in another field for
 the remote object that would verify that the request was coming from my SWF
 and not someone else's (possibly malicious) code.  However, if someone can
 decompile my SWF files then all of that would be for nothing.  What can
 people say about flex code decompiling and protecting my code from prying
 eyes?



  Regards,

   Scott
  



Re: [flexcoders] SWF/Flex security

2008-08-03 Thread Scott
Is there going to be an archived webcast afterwards?  I'd love to go to
that but unfortunately; August is the busiest time of the year for me
and my clients.

 

 Scott

 



From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On
Behalf Of Andrew Westberg
Sent: Sunday, August 03, 2008 5:45 PM
To: flexcoders@yahoogroups.com
Subject: {Disarmed} Re: [flexcoders] SWF/Flex security

 

I'll be speaking on this topic at 360 Flex San Jose.  At the basic
level, you can embed or even encrypt secure information such as
usernames/passwords.  If you need a full blown authentication and
encryption system, I'd look into nitrolm.com.  This will be discussed at
the 360 presentation along with some other non-commercial techniques you
can use on your own.

http://www.360conferences.com/360flex/2008/04/360flex-san-jose-schedule.
html
http://www.360conferences.com/360flex/2008/04/360flex-san-jose-schedule
.html 

-Andrew Westberg

On Sun, Aug 3, 2008 at 4:51 PM, Scott [EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]  wrote:

In preparing for securing the site before I code the main site functions
I thought I'd read up a bit on security.  I was thinking that flex/swf
code could not be decompiled. But then I found this:
http://blog.everythingflex.com/2008/02/29/check-you-as3-code/
http://blog.everythingflex.com/2008/02/29/check-you-as3-code/ 

 

I'd like to do some remote object validation (adding in another field
for the remote object that would verify that the request was coming from
my SWF and not someone else's (possibly malicious) code.  However, if
someone can decompile my SWF files then all of that would be for
nothing.  What can people say about flex code decompiling and protecting
my code from prying eyes?

 

 Regards,

  Scott

 

 


-- 
This message has been scanned for viruses and 
dangerous content by MailScanner http://www.mailscanner.info/ , and is

believed to be clean.