ActionScript 3.0 :: Flash Protection From Hackers?
Oct 24, 2010
1.When a person Logs In, a PHP file makes an XML file of questions from the DataBase2.The Flash application then calls for the XML file .. Reads from it and asks the question to the user.3.This XML file also has the answers to the questions so that i can show on my Flash Application.4. The Problem:Softwares like Tamper Data (it Firefox Extension which gives you the power to view, record and even modify outgoing HTTP requests.give the complete path of the XML file when it is called by the Flash Application.
I have some FLV videos was to play on web (play in a flash player, e.g. JWPlayer). How can I protect it? I do not want someone else to download these videos.The videos was high secret! Only allow play on my website.
I want to limit my SWF file so that it cannot be stolen and hosted on another server. So if the domain serving the SWF file isn't on a list of approved domains, the SWF will not load normally but will instead display a message that links to one of the approved locations. What I'm unsure about is how to access the domain that is hosting the file (or get the fully qualified URL of the file). If You know how to get that information, I'm using Flash CS4 to compile the code targeting FP 9.
I'm still a beginning in flash in general and I'm attempting to strengthen the protection of my .swf file.One of the ideas I had was to split the .swf file up, to so speak; creating a new swf with sensitive, but vital functions and values, storing it on my webserver, and having the launcher request the files after passing a few verification processes. Only flaw in this idea, is I have no idea how to add a class (if that's the right term?) to my project. I reversed another .swf file which included the same method using Base64 encryption, but I'm not too sure how to add an external .as file to execute in my project.Of course, I've also found additional methods, such as using DCOMSoft SWF Protector (which wouldn't do much good) and obfuscation programs (which, too, can be reversed). I've recently found out about a .SWC called AS3Crypto, which I have no idea how to use. I've added the file to my AS3 Properties, but that's as far as I have gotten. The rest of AS3Crypto and its mysteries remain vague to me, and I am unable to find any useful information via Google.
I would really like to split the .swf into parts having them in different areas to make it more difficult to reverse, but I am not too sure how effective that would be, let alone how to actually do it. In regards to the external class (terminology?), since I was unable to find how to implement it with my project, I thought of salvaging the functions from the reversed .swf I have found and adding them into my internal script. Even then, the package begins with public class $Base64 extends Object -- extendsI assume simply adds additional functionality to objects, but I do not believe this is entirely necessary.
I've always found it very annoying that Flash takes over the write protection of files that has been used, and suddenly felt an urge to do something about it. I'm not sure if it always happen on all computers but at least most of the times I can't rename a folder if a fla-file in it at some point have been opened in Flash if Flash is still running. So I have to close Flash in order to rename or move files.
I wanted to find out how my intellectual property, such as graphic designs, photos, tweens designs, etc can be protected in a .swf flash file?.This is because there are .swf file decompliers which can very easily convert my files into .fla and so access can be gained to my jpeg designs, photos, etc.Is there a best practise which can be followed whereby some form of security measures can be taken within flash code, etc? And if so does anyone know what these measures are?
If you want to use content on another server, that server needs to host a crossdomain.xml file allowing access. If this file isn't there, flash won't let you access it. Given that it's easy enough to just write a proxy (say a php script that curls the external URLs) what is the purpose of this restriction? It seems that the content is still 100% available to external people, but there is just one extra hoop to jump through.
i have to implement flash streaming for the relaunch of our video-on-demand system but either because i haven't worked with flash-related systems before or because i'm too stupid i cannot get the system to work as it has to.
Is there any AS3/Air library for Zip files with password protection support? Previously i check FZip, it was great but it doesn't support encryption! Also another library that works good, but it not support encryption too.
Any way to set up individual Flash Access protection settings for each of some <Location /{url-path}> tags in httpd.conf in the Apache. I have found in the documentation that EncryptionScope can be set to content or server. If I set it to server and use FlashAccessV2 as ProtectionScheme, how or where do I specify the Flash Access certifications and so on?
I am profiling some AS code by measuring wall clock time. In order to minimize the error I need to run the code for a long period of time. However, flash seems to protect itself from unresponsive scripts by throwing an exception after some period of unresponsiveness, namely: Error #1502: A script has executed for longer than the default timeout period of 15 seconds.
Is there any way to disable this protection, or at least extend the timeout period?
how to make a gatekeeper for flash files that don't let the movie play if the file is running on a forbidden site? Example: Original content located in: [URL] if another site include that example.swf, it redirects to: [URL] I need to do that to malicious people don't steal my bandwidth or just steal my games or any other flash content. btw my site: [URL]
I've spend the last 6 months developping a Flash (CS4 / Flash v10) game. As I'm now ready to publish it online, I would like to ensure that my actionscript code is safe. Hence my questions are: - Is the CS4 built-in password protection safe? (I guess not given that my actionscript still needs to be executed hence has to be readable for the client) - What are the best options to further protect my code? (I guess obfuscation is the most common approach: which obfuscators are good?)
Is it possible to write an anti cheat protection for a multiplayer game? Game type: boards, moving color gems or squares to make three in line. I know there are programs capable of analize the pixel color of each square and auto resolve the game by play itself. Is anyway to protect against this?
Examples: - Detecting if mouse had been moved by a program? - Detecting if keyboard Keys has been sent by a program? - Maybe record player screen or manual review?
Flash 8, Actionscript 2.0 I wasn't exactly sure where to post this, but I figured here would be alright. I've got this image slideshow/scroller here, that grabs its data from a xml file on the server. nothing new, but the problem is that when i enable hotlinking protection with bluehost, firefox is unable to deal with the file. safari, opera, handle it fine. when hotlinking protection is disabled, firefox handles it fine. [URL]
I'm building an Adobe Air app that needs to load external images from different webservers. I have my basic loader function set up, but I encountered one server that wouldn't let me load it's images. it gave me the following error[url]...
After that I got in contact with the server's manager and he told me he had been working on some basisc hotlink protection for his images. He also told me that I could subvert this by supplying[url]... as the referrer when building the request headers.
First of all I found no trace of hotlink protection with online testapplications for hotlink protection. Secondly I have no idea how to set up what he told me with a simple Loader class function.[code]...
I know, yet another topic on protection. I think we've established the fact that you will almost always will be able to decompile a SWF, but that's not exactly what my question is about. I have a client who wants to show data (some html and css) in a Flash movie. This content will be delivered from an external source and will be passed through to the SWF. The main idea is not to be able to copy-paste the html. Of course, if you use a flashvar to pass the html-source or html-page to the SWF, it's easy to look it up in de pagecode. So perhaps a sollution is to encrypt the html before sending it through to the SWF and decrypt it inside the SWF. But of course, you would need some sort of key that's hardcoded inside the SWF file to decrypt the information ... which is a problem if you can decompile an SWF. So my question is, is there any way to encrypt data delivered to an SWF so it's impossible to directly access the data?
I'm working through Dreamweaver fairly well, and I'm now wanted to import Flash buttons I've created myself into Dreamweaver for a website I'm currently building, and it's here that I'm finding the problem. I have been to the 'get URL Function', but it says something about needing to link to a web page? But my problem is how can I link Flash Buttons to a web page, when my site is still being developed and not published? Do I have to publish first?
:confused:Does anybody know is Flash mx 2004 compatible with flash CS3 and flash 8?? I can not open flash cs3 on my laptop with flash mx2004 also can actionscript 3.0 be used with flash mx2004 and flash 8 because when I save my flash cs3 document as a flash 8 document it does not work? I am awful confused with all this. If you created a flash website in flash 8 or Flash mx2004 you can not open in in flash cs3 it dosent make sence?
Are there any programs or features in flash that can simplify flash vector art?
I just realized that one of the reasons why my program might be running so slow is that I made the images out of lots and lots of circles. When things didn't look right I often just put larger circles over smaller ones. I didn't think that flash might still be drawing the invisible circles underneath-
We've got a green screened video playing in a flash movie over top of our html content.when the movie ends, flash uses external interface .api to call a javascript function which swaps the flash movie out with a 5 x 5 pixel flash movie (rewrites the <div>).this works and you can interact with the html content after the flash movie in all browsers except firefox.anyone know of any work-arounds or is there a better way of handling flash over html in this fashion?
I have absolutely no idea where to post about this, please move if necessary.So, I've just installed flash player 10 and now my flash tracer plugin (in firefox) won't work. do i have to switch back to flash player 9 or is there a solution to this?
i have the correct path in Flash Tracer's settings (C:Documents and SettingsAdministratorApplication DataMacromediaFlash PlayerLogsflashlog.txt) as well as the mm.cfg file in C:Documents and SettingsAdministrator.
I have made a small rectangle in the flash with the tweening effect and export in to the FLEX. When i publish in the FLEX i could see the rectangle with out tweening effects.How can i see the tweening effects.
