Creating more secure SWF(s)

Need help with SmartFoxServer? You didn't find an answer in our documentation? Please, post your questions here!

Moderators: Lapo, Bax

Post Reply
User avatar
Lapo
Site Admin
Posts: 23438
Joined: 21 Mar 2005, 09:50
Location: Italy

Creating more secure SWF(s)

Post by Lapo »

Here's an interesting and detailed white-paper by Adobe about hardening the security of your SWF games and applications.

Definitely worth a read.

http://www.adobe.com/devnet/flashplayer ... print.html

p.s. = thanks to fly for sending the link
Lapo
--
gotoAndPlay()
...addicted to flash games
patso
Posts: 380
Joined: 13 Nov 2006, 13:44
Location: Sofia, Bulgaria

Post by patso »

Thanks for sharing this link. Looks very useful information - I'll read it this days.
piser
Posts: 51
Joined: 26 Apr 2007, 08:22
Location: Poland
Contact:

Post by piser »

my 2 cents...

I think there is only one way to secure AS2/AS3 code in compiled swf files which is encrypting them by other programs, such as Amayeta Encrypt.
I use this program already and I'm satisfy.

Some one can say AS3 is secure so far(unavailable for decompile). Well, I saw basic decompilers under AS3 last time, so "secure AS3" is becoming myth :)
Bogumił Święcki
tobypb
Posts: 48
Joined: 15 Jun 2007, 20:50

Post by tobypb »

I thought amateya hasn't released a version compatible with AS3 yet. Does anyone know a code obfuscator that works with AS3? (Amateya claim to be releasing one in Feb, but it has been delayed before so..)
piser
Posts: 51
Joined: 26 Apr 2007, 08:22
Location: Poland
Contact:

Post by piser »

Amayeta made beta version of AS3 Encrypter. I haven't seen yet full AS3 viewer program, but I tested AS3 decompiler from assembler level.
Bogumił Święcki
warhell
Posts: 199
Joined: 18 Aug 2007, 16:49
Location: Silicon Valley, CA
Contact:

Post by warhell »

Does the free trial of Amayeta leave a water mark or something? What's the restrictions?
Muwampa
Posts: 5
Joined: 02 Jun 2008, 06:30
Contact:

Post by Muwampa »

Hi! I use Amateya 4.0 and works perfectly with AS3.

;)
User avatar
Lapo
Site Admin
Posts: 23438
Joined: 21 Mar 2005, 09:50
Location: Italy

Post by Lapo »

Good to know :)
Lapo
--
gotoAndPlay()
...addicted to flash games
mariana
Posts: 77
Joined: 26 Mar 2007, 11:15
Location: Buenos Aires, Argentina

Amayeta

Post by mariana »

I tried Amayeta, and frankly, it didn't work.

The test version, which the vendor says is not 100% effective, leaves a water mark on your screens, but at least it does not introduce BUGS in your code, which the full version does.

I tried it last July, and after a lot of trouble, managed to get Amayeta to refund me the 100+ that I had paid them.

My games are Flash AS2.

Mariana
mistermind
Posts: 131
Joined: 15 Sep 2007, 01:33
Contact:

Post by mistermind »

Guys I think you should know this:
Amayeta is MUCH more expensive then many obfuscation techniques around. The only difference between them and the one I'm using is price. Simple fact is that Amayeta knows how to market their product better then the others =P
Now check this one out:
http://www.swfprotect.net/
It costs only 30 dollars and lets you have up to 10 free encryptions WITHOUT watermark.
SELECT * FROM users WHERE clue > 0
0 rows returned.
Sappho
Posts: 74
Joined: 29 Mar 2009, 19:23
Location: Slovakia

Post by Sappho »

Just my 2 cents here, i worked with Amayeta for long time way before AS3 and its sad to say that they are not up to standards anymore. As someone already said they are all about marketing. Once you start doing some hard-core stuff such as dynamic constructor calls, unpacking parts of application into memory and accessing it there, crossreferencing multiple swfs etc. Amayeta's obfuscation stops working and since the application itself has VERY limited settings for obfuscation you are pretty much screwed.

I went through couple of obfuscators and secureSWF is the one i ended up with, its in a different league altogether.
User avatar
Lapo
Site Admin
Posts: 23438
Joined: 21 Mar 2005, 09:50
Location: Italy

Post by Lapo »

Hi Sappho,
thanks for the insight.
Lapo
--
gotoAndPlay()
...addicted to flash games
Buffy1011
Posts: 48
Joined: 18 Sep 2011, 17:45
Location: Wisconsin
Contact:

Post by Buffy1011 »

The link doesn't work anymore :(
~Buffy
User avatar
Bax
Site Admin
Posts: 4626
Joined: 29 Mar 2005, 09:50
Location: Italy
Contact:

Post by Bax »

Paolo Bax
The SmartFoxServer Team
hostperl
Posts: 4
Joined: 01 Feb 2018, 11:29
Contact:

Re: Creating more secure SWF(s)

Post by hostperl »

thanks for sharing this link, its very useful
https://www.hostperl.com-HostPerl - Dedicated Hosting Solutions
Post Reply