Home Tutorials Forums Articles Blogs Movies Library Employment Press
Old 11-23-2009, 02:33 PM   #1
snapple
member
 
snapple's Avatar
 
Join Date: Feb 2002
Location: London
Posts: 2,442
Default SWC Security

Hi,

How secure are SWC's for distributing code?

How easily can they be reverse engineered?

Is there an Adobe solution to prevent reverse engineering?

Regards, snapple
snapple is offline   Reply With Quote
Old 11-23-2009, 02:54 PM   #2
maskedMan
Obfuscated Coder
 
maskedMan's Avatar
 
Join Date: Apr 2008
Posts: 1,571
Default

To test this, I just componentized a movieclip with a linkage ID connecting it to a custom class.

I then created a new fla, imported that swc, placed it on the timeline, and compiled.

I then opened up SoThink decompiler and pointed it at my newly compiled swf file and all my code was right there in the actions panel.

SWC files are then clearly not a secure way to keep determined crackers away from your code.
__________________
http://www.scriptocalypse.com - It's not the end of the world. It's just Actionscript!

man.mask = mask_mc;
maskedMan is offline   Reply With Quote
Old 11-23-2009, 03:05 PM   #3
snapple
member
 
snapple's Avatar
 
Join Date: Feb 2002
Location: London
Posts: 2,442
Default

Hi maskedMan,

Thanks for your experiment.

So, is there a secure way to share code?

Doesn't look like it

Is there a way to remotely distribute code at all?

Regards, snapple
snapple is offline   Reply With Quote
Old 11-23-2009, 05:21 PM   #4
henke37
Senior Member
 
henke37's Avatar
 
Join Date: Mar 2009
Location: Sweden
Posts: 10,833
Send a message via Skype™ to henke37
Default

How about opening the swc file directly? It follows the latest fileformat trend, storing stuff in a renamed zip file.
henke37 is offline   Reply With Quote
Old 11-24-2009, 07:20 AM   #5
snapple
member
 
snapple's Avatar
 
Join Date: Feb 2002
Location: London
Posts: 2,442
Default

Hi henke37,

I'm not sure what you mean.

I need to make some Shared Library assets available for compilation by another company and therefore need to distribute some code securely, and there doesn't seem to be a way to do that.

Seems like a big step backwards from AS 2.0 Shared Library simplicity.

Regards, snapple
snapple is offline   Reply With Quote
Old 11-24-2009, 08:10 AM   #6
henke37
Senior Member
 
henke37's Avatar
 
Join Date: Mar 2009
Location: Sweden
Posts: 10,833
Send a message via Skype™ to henke37
Default

Uhm, shared libraries had the same level of security, none.
henke37 is offline   Reply With Quote
Old 11-24-2009, 09:43 AM   #7
snapple
member
 
snapple's Avatar
 
Join Date: Feb 2002
Location: London
Posts: 2,442
Default

I think you've miss understood.

I need to distribute Shared Library FLA's. So another company can create own their Shared Library graphics.

But because of the sh*t way Flash CS3 works - they are unable to compile their Shared Library assets, unless they link to our codebase.

For example, if we had a class called "Circle" and this was linked to a ball, and that ball MC can be edited by other developers, then they need to be able to compile that Shared Library FLA.

So i therefore need to distribute the codebase / library. But i can't do that because of security.

And i am therefore unable to use Shared Libraries in CS3.

A major negative against Flash.
snapple is offline   Reply With Quote
Old 11-24-2009, 12:44 PM   #8
henke37
Senior Member
 
henke37's Avatar
 
Join Date: Mar 2009
Location: Sweden
Posts: 10,833
Send a message via Skype™ to henke37
Default

Uhm, I have yet to find anything where you don't have to give the instructions to run out when you are letting someone edit something that runs instructions. It is because, in the end, the computer needs the instructions, otherwise, what would it run?
This is not unique to Flash, it is common to all programing languages, scripting systems and so on. If you want to distrubute something that can be run, you need to distrubute the instructions to be run.

Your issue is that you are worrying about the wrong thing. Do not worry about the ease about doing something unwanted, worry about making people not do it in the first place. We have copyright laws for a reason, just bring them to court if they misbehave.
henke37 is offline   Reply With Quote
Old 11-24-2009, 12:55 PM   #9
snapple
member
 
snapple's Avatar
 
Join Date: Feb 2002
Location: London
Posts: 2,442
Default

No - my point was that in Actionscript 2.0, you weren't required to have a class for a Shared Library asset. So we were free to distribute these FLAs to other developers, and then integrate them to our own implementation logic.

I think the whole SL stuff in CS3 and above needs a overhaul. Its still got a hangover from the older versions of Flash, but with new functionality constraining and confusing the issue.
snapple is offline   Reply With Quote
Reply


Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 05:03 AM.

///
Follow actionscriptorg on Twitter

 


Powered by vBulletin® Version 3.8.5
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Ad Management plugin by RedTyger
Copyright 2000-2013 ActionScript.org. All Rights Reserved.
Your use of this site is subject to our Privacy Policy and Terms of Use.