Adobe Air Distribution

I work for a library in Michigan and I am using Kaspersky Security Center to Distribute Software/Updates for our network. I have a distribution license agreement with Adobe to distribute Air, Flash, Reader, Shockwave Flash. I am able to silently install various apps such as Java, Flash ect. via this Program. I am unable to get Adobe Air to install properly when -silent is added to the command line. I look in the add/remove programs and the program does not show up even though Kaspersky shows there were not errors during the installation process. I install it without the -silent command it hangs as it does not get passed the End User License Agreement. I already have a distribution agreement with Adobe for the library I work at. I was wondering what could be causing it not to install and if anyone knew of any work arounds. I have tried to convert the exe file to an MSI and that has not worked either.
Thanks,
Matt

There isn't any way to distribute an HTML/JS AIR application without the HTML/JavaScript source files. Because JavaScript is a run-time interpreted language, the HTML and JavaScript code has to be available at run time. The obvious downside to this is that the source code of your application is available in plain text on the users' hard drive.
If your main concern is protecting data stored on the server from malicious users, the username/password strategy is probably a good one (and you wouldn't need to implement in using Flash at all -- you could do the same thing in HTML/JS.). What you need to do is:
Set up your web server so that the user has to be authenticated with the web server in order to get any data or perform any of the calls (from ajax or anywhere else).
When your app first starts or at some point, have a login form where the user enters their username/password for your serve. When you make the ajax calls to the server pass the username/password along (or use a session cookie, or some other similar technique for maintaining authentication).
That way, even if an attacker knows the url of your server calls, they can't actually use them unless they have an account with you.
From a practical standpoint, you should protect your server by requiring authentication in any case. Otherwise your only security defense is the fact that an attacker doesn't know your exact url. But there are ways to learn urls (for example, by monitoring network traffic) that make it so it isn't too hard for someone to discover the urls even without your app's source code.

Similar Messages

  • Adobe AIR Distribution including RunTime - Possible?

    Is it possible to include the Adobe AIR Runtime in the installer package so users wont have to worry about having the Runtime installed, already, before they install the app.
    Ideally, an installer that checks if the runtime is there, if not, it installs and then installs the app itself.
    Any examples of any such thing ?

    Try the Shu Packager at http://shu-player.com. It might be the ticket for what you want.
    Sorry to threadjack but does anyone know under what conditions the Shu SA (Stand Alone) Lite can be used?
    We've just finished 6+ months work on an AIR app simultaneous with the blacklisting of the AIR runtime from all machines on the network. However, we are stilled allowed to distribute exe's that are proven to be virus-free so I am thinking our options at this point are something like Shu SA where only our code has access to the AIR runtime OR redoing all our work in .NET...
    Anyone want to weigh in the "custom" licensing option mentioned on the Shu website?

  • Adobe air distribution problem. (AJax / html)

    Hi guys,
    I have written a sample application in javascript (ajax) and xhtml and successfully published with adobe air. The system works fine but my question is when i distribute the application (.air) I had to include all my javascript , images, xhtml. I dont have any problem in sending the images with .air package but sending javascript files is imposible that is be because, since im using ajax to show all the details I have to use full URL for all my ajax calls.
    so someone who knows about abobe air can use those same URL`s and create their own air application and steal my details from my server. (adobe air allow cross scripting)
    As a solution I have seen many applications (ex: ebay desktop) uses flash logins and check the login using flash and redirect user to a seperate page if the login is successful. so in this case i only need to package my .swf file since redirection will handdle from the flash end.
    Im not a flash developer so I wont be able to create the whole application using flash. thats why im looking for a javascript / html solution to overcome this problem.
    so my questions are,
    1. Is there any way i can publish my .air application without packaging js files?
    2. Is there is a posibility which i can use a flash login and if the login success open up a new window with the actual application and close the login window? and while logging off viseversa
    I hope you guys undestand my questions and any help highly appreciate it.
    Thanks in advanced,
    Best regards,
    niroshan

    There isn't any way to distribute an HTML/JS AIR application without the HTML/JavaScript source files. Because JavaScript is a run-time interpreted language, the HTML and JavaScript code has to be available at run time. The obvious downside to this is that the source code of your application is available in plain text on the users' hard drive.
    If your main concern is protecting data stored on the server from malicious users, the username/password strategy is probably a good one (and you wouldn't need to implement in using Flash at all -- you could do the same thing in HTML/JS.). What you need to do is:
    Set up your web server so that the user has to be authenticated with the web server in order to get any data or perform any of the calls (from ajax or anywhere else).
    When your app first starts or at some point, have a login form where the user enters their username/password for your serve. When you make the ajax calls to the server pass the username/password along (or use a session cookie, or some other similar technique for maintaining authentication).
    That way, even if an attacker knows the url of your server calls, they can't actually use them unless they have an account with you.
    From a practical standpoint, you should protect your server by requiring authentication in any case. Otherwise your only security defense is the fact that an attacker doesn't know your exact url. But there are ways to learn urls (for example, by monitoring network traffic) that make it so it isn't too hard for someone to discover the urls even without your app's source code.

  • Adobe AIR Application Distribution

    I have a client that requested me to do them a CD application
    which I am thinking of using Adobe AIR.
    Does the distribution license allow Adobe AIR applications
    made using Flex or Flash be published through CD-roms and for
    downloads? Are there any implications for this?
    Also, does the license allow if say Adobe AIR player is put
    together with the Adobe AIR application into a CD for distribution
    so that if a computer does not have Adobe AIR player to install the
    AIR application, he/she can install the player directly from the CD
    without going to the Internet?

    AIR does not support running applications from a CD-ROM;
    that's both a technical and a licensing limitation.
    You can redistribute both AIR and your application via
    CD-ROM, thus enabling off-line install, if you agree to a
    redistribution license. See
    http://www.adobe.com/products/air/runtime_distribution1.html
    for details.
    Oliver Goldman | Adobe AIR Engineering

  • Adobe Air Silent Distribution

    I work for a library in Michigan and I am using Kaspersky Security Center to Distribute Software/Updates for our network. I have a distribution license agreement with Adobe to distribute Air, Flash, Reader, Shockwave Flash. I am able to silently install various apps such as Java, Flash ect. via this Program. I am unable to get Adobe Air to install properly when -silent is added to the command line. I look in the add/remove programs and the program does not show up even though Kaspersky shows there were not errors during the installation process. I install it without the -silent command it hangs as it does not get passed the End User License Agreement. I already have a distribution agreement with Adobe for the library I work at. I was wondering what could be causing it not to install and if anyone knew of any work arounds. I have tried to convert the exe file to an MSI and that has not worked either.
    Thanks,
    Matt

    AIR does not support running applications from a CD-ROM;
    that's both a technical and a licensing limitation.
    You can redistribute both AIR and your application via
    CD-ROM, thus enabling off-line install, if you agree to a
    redistribution license. See
    http://www.adobe.com/products/air/runtime_distribution1.html
    for details.
    Oliver Goldman | Adobe AIR Engineering

  • Deployment of an Adobe AIR application in an enterprise environment

    Dear Team members,
    first of all my apologies for posting this thread in more than one forum (see Installations Issues) but the argument is very important to us and I don't know where discuss it.
    I would like to post a question to you regarding deployment doubts that we are trying to address.
    My company is working on the new version of our primary application previously built as a J2EE application with some reporting functions with Flex, and we want to use AIR in order to leverage its possibilities:
    Seamless integration with existing application functionalities (implemented as standard JEE web application pages) thanks to the integrated HTML capabilities
    Improved integration of the user interface with the desktop
    Native processes to provide additional functionalities
    Our application is targeted to pharmaceutical industry, subject to FDA regulations, and it affects more than 5000 users for each customer, so we have some specific requirements affecting the deployment and distribution of the software:
    Allow to run multiple versions of the software on the same client machine (to support test and acceptance activities in addition to the production environment)
    Minimize the effort of the initial setup on each client
    Manage the version upgrades without manual activities on each client
    Keep the test/acceptance and production environments strictly aligned to improve effectiveness of formal validation (ideally, an application once validated should be transported in production without any source code modification, recompilation or repackaging)
    The current browser-based strategy is perfectly fit to these requirements, and in the shift towards a desktop-based strategy we need to continue satisfying them as much as possible. We evaluated the standard distribution strategy of Adobe AIR applications, and noticed several attention points in this scenario.
    The first issue we encountered is the back-end services endpoint discovery problem. Simply hardcoding a server URL in the packaged application could be a viable solution for public internet-accessible applications, but we need to support multiple customers in their intranet, and each one typically requires multiple environments for the application (acceptance, production, etc.). Maintaining dozens of different packages of the AIR application to support all these customer environments clearly is not the solution. Neither we want to force thousands of different users to enter and maintain the correct server location in their local preferences.
    So, we thought to use a badge hosted in the back-end application to run the local AIR application: using the underlying API, we could activate the application specifying also the network location of the back-end services. We could also rely on the badge to install the application (and the AIR runtime if necessary)… however, application packaged as native installers cannot be installed, upgraded, or launched by the badge API (and we need to package ours as native to use native processes).
    We also noticed that multiple versions of an AIR application cannot be installed side-by-side in a client machine, and that the installation and upgrade of the application can be performed only when the local user has administrative rights on the machine (using standard or native packages), forcing us to rely on external software distribution systems in some customer scenarios (introducing additional complexities in the release cycle).
    At this point, in our opinion the standard deployment strategies of Adobe AIR applications are unfit for enterprise environments. In the enterprise world, many of the applications have migrated to a completely browser-based solution, while others enhanced their client layer to comply with the requirements, for example installing only a thin portion of the client code and allowing to connect to multiple server versions/environments with it (e.g. the SAP GUI universal client). Without smarter deployment and distribution tools, AIR applications currently are a step back compared to web applications in terms of manageability.
    So, we are trying to develop a solution to address these problems, with some concepts similar to JStart: install on the client machine a launcher application capable of being activated from a web page, dynamically locate, download and run the actual client bytecode, transparently enforce client software updates, and supporting multiple applications (and multiple versions of the same application). However, we are facing many technical problems due to internal architecture of AIR and we already spent a considerable amount of effort trying to find a solution. We are now thinking to return on the choice of AIR, going back to Flex.
    What is the position of Adobe on this argument? Is Adobe aware of these issues and are there any plans on this topic? Any advice?
    Thank you in advance

    For those following along, Oliver Goldman will be answering this post in future articles on his blog.
    Many great comments and questions here. I’m working on some follow-up posts to address these; nothing I could cram into this comment field would really do your query justice. - Oliver Goldman
    Pursuit of Simplicity
    Chris

  • Anyone succeeded installing Adobe Air on Fedora 10?

    I just tried to install AdobeAir on my Fedora 10 GNOME system but got an error message:
          Adobe AIR could not be installed. Either gnome-keyring or Kwallet must be installed prior
          to installing Adobe AIR.
    But gnome-keyring is installed on my system:
       [root@localhost Desktop]# yum list *ring*
       Loaded plugins: refresh-packagekit
       Installed Packages
       gnome-keyring.x86_64                          2.24.1-1.fc10                installed
       gnome-keyring-pam.x86_64                  2.24.1-1.fc10                installed
       gnome-python2-gnomekeyring.x86_64  2.23.0-1.fc10                installed
    so I don't know what to do next. I also can't find a Kwallet to install via yum (and am not sure that would work anyhow since I am not using the KDE desktop).
    Has anyone succeeded installing Air on Fedora 10? If so, can you email me how?
       Thanks,
       Henry

    syed mehadi <[email protected]> writes:
    Please try adobe air installation on your Fedora 10 after
    installing xterm on it.  sudo yum install xterm see if
    that resolves your issue.
    This does not make a difference.
    I did find this webpage:
        http://kb2.adobe.com/cps/408/kb408084.html
    which gives some suggestions about how to install Air on a
    64-bit Linux distribution, but the information is out of
    date, e.g., although Air evidently installs and works on a
    64-bit Fedora 8 system, it does not on Fedora 10. The
    recommended 32-bit libraries also don't exist (at least,
    they are not accessible via yum).
        Henry

  • Adobe AIR - Inconsistencies in detecting whether Adobe AIR runtime is installed

    Hello Flex community,
    I am having issues with detecting whether Adobe AIR is installed  using the following process: http://livedocs.adobe.com/flex/3/html/help.html?content=distributing_apps_3.html
    Having installed Adobe AIR 1.5, we are at times getting a value of  not installed from the getStatus() function of the air.swf located at  http://airdownload.adobe.com/air/browserapi/air.swf
    Has anyone else faced this issue before? If so, does anyone have any  steps to resolve it?
    Thanks!
    Mauricio

    After doing some more research on the issue, I have found other users encountering the same issue we are:
    http://groups.google.com/group/air-tight/browse_thread/thread/706716c29caf0254
    http://www.flexdeveloper.eu/forums/adobe-air/air-swf%27s-getstatus-method-mistakenly-retur ns-%27available%27-when-air-is-installed/
    http://forums.adobe.com/thread/435935
    In the second thread, it says:
    “My issue seems to be specifically related to the use of "Silent Install". My client has a distribution license for the AIR runtime and is bundling the AIR installer with their installer. When Silent Install is used to install the AIR Runtime, Adobe's air.swf reports that the runtime is not installed. This happens until the user initiates an air app, at which point air.swf is able to detect the runtime installation.””
    This seems to suggest there is a bug with the Silent Installer or with the air.swf getStatus function. I tried the steps above and was able to recreated and resolve the issue. Does anyone else know of a different workaround?

  • Installing reader without Adobe Air

    We would like to distribute Adobe Reader without Adobe Air or
    Adobe.com. The command we use to remotely install Adobe Reader is
    "psexec @c:\tmp\systems.txt -u XXXUSERIDXXX-p XXXPASSWORDXXX
    -c -i \\apps\adobe\9.1.0\AdbeRdr910_en_US_Std.exe /sAll /rs /rps"
    Is there a switch we could use to only install Adobe Reader?

    Hi alouis,
    Sounds like your distributing Flash Player within your org, as such, you'll need to license these products for distribution.  Please see the following links for information on licensing the various products for distribution:
    Adobe - Adobe Runtimes / Reader Distribution License Agreement
    Volume distribution | Adobe Reader XI
    Adobe Flash Player Distribution | Adobe
    Adobe AIR Runtime Distribution | Adobe 
    Adobe Shockwave Player Licensing | Adobe 
    Maria

  • Adobe AIR dist. Runtime not loading MyApp.air

    Hi
    I've got the License Agreement & have been sent the link to download the Air distribution files.
    My project is a CD ...
    OSX portion works ok ... Run Air dist app, installs Air if ness... then installs MyApp.air .
    WIN side of things, no luck .
    I've got .airinstall.cfg pointing to MyApp.air in a test folder with the Air Runtime distribution file .  Double click runtime & it says either "Adobe Air already installed" & then quits, MyApp.air not loaded ... or ... Installs Air runtime & then quits, MyApp.air not loaded (depending on if Air installed/not) .
    Theoretically all you need is 3 files in a directory : AdobeAIRInstaller.exe, .airinstall.cfg, MyApp.air & it should work, is this correct?
    Tried the side-car method (not sure what end difference is) & get message :
    "This application cannot be installed because this installer has been mis-configured. Please contact the application author for assistance."
    When double-click MyApp.air it works/installs fine .
    Am I missing something ?

    Turns out I hadn't been using an up-to-date installer ... dur

  • How is the Adobe AIR runtime distributed?

    The Adobe AIR runtime can be distributed in a number of ways, including but not limited to:
    Desktop
    Downloaded and installed from the Adobe website.
    Installed along with an AIR application as part of a seamless web install.
    Distributed by third parties as part of a licensed distribution (typically along with an AIR application.)
    Android
    Downloaded from the Android Market.
    Preinstalled on the device.
    Distributed by third parties as part of a licensed distribution.
    BlackBerry Tablet OS
    The AIR runtime is preinstalled and integrated into the BlackBerry Tablet OS.

    Hi Dirk.
    Peter Grainge has an article on Air's use on his
    site.

  • Adobe Air APK issue

    Since we have developed our own application distribution channels for our Android tablets which our target audience are kids aged 2-13 years old, we have enabled parental control and do not install Google Play in our tablets.  However, some apps didnt work on our tablets because they needed parents to download "Adobe Air".  May I know if there is anyway, I can get the Adobe Air SDK and distributed it on our own Android app market?

    Fixed answer with a workaround using a second user account.

  • Questions about Adobe AIR and FLV license model

    I'm currently looking for a game development framework which I can use for a fan-project in my spare time and also for commercial projects for the company I'm working for.
    I think that the Citrus Engine which is open source and based on Apache Flex/Adobe AIR/Starling/Away3D/Box2d/Nate might be a good choice.
    But I'm really confused about the license model of Adobe AIR and its runtime distribution.
    Do I have to pay a license fee or royalties for my games (which include the AIR runtime in order to be stand-alone-apps) when I publish them?
    If so, how much are these license fees/royalties?
    Does this also concern free apps?
    What is the name of the license which I would have to request from Adobe in order to publish my games?
    Do I need several licenses when publishing an app on multiple AppStores (Apple/Google/Amzaon) or desktop distribution platforms (Steam/GOG)?
    Are there further licensing obstacles which I have to keep in mind when using Flex/AIR for (commercial) game development?
    By the way - the FAQ on the product page (http://www.adobe.com/products/air/faq.html) isn't really helping on this topic:
    "How much does Adobe AIR cost?" -> "The Adobe AIR runtime and AIR SDK are free for most users."
    This answer leaves me with the question: Am I belonging to the "most users" or not?
    Therefore it isn't meaningful at all.
    I'm also thinking about adding short video sequences as FLVs to the games.
    If I understood correctly H.264 and MP3 are currently used as a standard for these video files but aren't free.
    Is there a free alternative available for FLVs which can be used in combination with Adobe AIR?
    Or did I get something wrong here and don't need to worry about getting sued when using these formats?
    Thank you in advance for answering my numerous questions.

    That's true.
    I'm using a Dell Studio 1537 with 3GB of RAM and Intel Core 2 Duo and it's quick in Lr    

  • Adobe AIR application crash on start in iOS devices

    I have Adobe AIR application that uses Starling and DragonBones.
    We use IntelliJ IDE.
    We can run the application on the device without problem when running from the IDE.
    We build an ad-hoc distribution and put it on a device using TestFlight.
    When we run the application it show the splash-screen image and after that either go into white blank screen or crashes.
    In the XCode Organizer crash report I can't find helpful information.
    How can I debug this problem?

    Any chance of Testing with Flash Professional ? If so than connect your device and in Flash Professional CC go to Debug->Debug Movie-> On Device Via Usb -> Select your device.
    It will start a debug session as soon as you start your app/game and than you can debug whats going wrong on the device, setup your trace statements or breakpoints and see in output panel what actually the problem is.
    I hope it will help or some community guru may assist you or particularly you can post your problem in starling forum too, may be someone will help you there ...
    PS: In debug session mode performance will be low so don't worry about that. This mode is just for debugging and testing purposes.
    Thanks,
    Muhammad Faisal Zaheer,
    Sr. Software Engineer, Team Lead, Cubix Labs

  • Adobe AIR Application Installer command-line

    Could someone provide the command-line reference (parameters
    and usage) for Adobe AIR Application Installer?
    Tks!

    Hey Oliver!
    I've applied for an AIR distribution license but I still have
    some doubts.
    My application is based in one .air component and another one
    service created using C++. So, in order to install my application,
    I need to install both applications. I've used the bundled
    installation mentioned in the distribution docs, but it is not the
    best solution for my problem. I would like to have just one entry
    point in the “Add/Remove Programs” applet.
    Is there another way to deliver the .air application (e.g.
    not using the Adobe AIR Application Installer)?
    For example, is it possible get all files needed to create my
    .air file and install them without creating the .air file properly?
    I mean, is there any license or technical restrictions that
    invalidate this approach?
    Thanks!

Maybe you are looking for