Protecting swf files from being decompiled

At the end of the day, our flex apps are deployed as swf
files which have the potential to be decomplied and thereby our
intellectual properties lost. There are tools in the market which
claim to secure the swf files from being decompiled. Are these
tools live up to their claims? Is it worthwhile to spend money on
these tools? Would the protected swf become harder to deployed? Any
good products already available in this line? Please point out
some. Thx.

Most of the tools I have seen are geared towards extracting
resources from swf's. I use one myself (eltima.com) for
"harvesting" manufacturers content for my motorcycle dealers. They
are authorized to use this content, but finding someone at Yamaha
of Kawasaki or any of the majors who even knows where to find these
resources is next to impossible. I have also used it to learn from
by viewing scripts, but as you say, at the end of the day, I think
the concepts and best practices are about the only thing worth
taking away from others efforts, not the code.
Unlocking a protected file can be done as well and I remember
using a product over a year ago to get at the scripts within an swf
(I wanted the URL's that pointed to media - it was legal for me to
do this). It ran from the command line and output the scripts.
There aren't too many of these types of programs to be found, but
they exist.
My personal opinion is that it's not worth the effort. My
java classes can be decompiled and if someone wants to go to that
trouble, more power to them. To my knowledge, there isn't anything
out there yet that is perfect for backwards engineering an swf into
an MXML file, but a competitor of FLASH Decompiler says that they
can decompile Adobe 9 PLAYER swf's. For what it's worth, I plan on
posting the majority of my code on my flexdev.org site once I get
it established.
For people who make components for sale, this could be an
issue of stolen revenue if the decompilers get sophisticated enough
to reverse engineer the swc into a usable MXML file. I would be
against anyone who stole code for this purpose, for sure.

Similar Messages

  • Prevent SWF files from being decompiled back into FLA format

    Some programs such as Sothink SWF Decompiler may be used to
    decompile the SWF files back into FLA format. Even the ActionScirpt
    inside the SWF files can be decompiled as well! No one can even
    tell the difference between the original FLA file and the compiled
    FLA file! What can we do to prevent this from happening? I heard
    that we may protect the SWF files by using ActionScript Obfuscator.
    Is it true? How to do that? Please help, I must do something on
    it.

    Ng Jackie wrote:
    > Some programs such as Sothink SWF Decompiler may be used
    to decompile the SWF
    > files back into FLA format. Even the ActionScirpt inside
    the SWF file can be
    > decompiled as well! No one can even tell the difference
    between the original
    > FLA file and the compiled FLA file! How can we do to
    prevent this from
    > happening? I heard that we may protect SWF files by
    using ActionScript
    > Obfuscator. Is it true? How to do that?
    It's not true. SWF can't be protected.
    There are companies trying to sale products claiming they can
    protect SWF
    file, don't fall for that.
    In order to protect the file they jam the code and name of
    variables and functions.
    This however does not go w/o consequence. There is only how
    much you can mess the
    file up before the player will be unable to run it. Very
    risky games if you do that.
    One of the tools that was doing that, produced files which
    stop working with next
    player upgrade. From version 7 to 8. Than you just can't open
    it anymore.
    Secondly, as soon as such tool appear, the producers of
    decompilers provide antidotes.
    Upgrades with work around for the protection.
    Best Regards
    Urami
    !!!!!!! Merry Christmas !!!!!!!
    Happy New Year
    <urami>
    If you want to mail me - DO NOT LAUGH AT MY ADDRESS
    </urami>

  • How to protect class files from being decompiled?

    any ideas
    guide me

    You may consider looking into Java native compilers.
    I'm referring to compilers that take existing Java
    code and convert them into native executables rather
    than class files which are interpreted.yeah... kills portability too.

  • Protect DLL Files from being deleted or unregistered

    I am looking for a way to protect a DLL file from being deleted or unregistered.
    My users have an application that uses the same DLL files as another application. This is in a test environment, so when they are uninstalled they step on each other by deleting or un-registering the DLLs.
    Any ideas?

    Hi,
    These apps are designed to delete the DLL file in uninstallation process. You can test to Deny the Delete permission on the DLL file as a test but it may cause a new issue that application think they failed to uninstall itself clearly as the DLL file cannot
    be deleted. Just have a try on Deny Delete permission in NTFS security. 
    If you have any feedback on our support, please send to [email protected]

  • Protecting SWF files.

    Hi,
         Can i know whether there is any way to protect swf files from being decompiling. I have seen that some tools are available for decompiling the swf files. Can anybody help me by providing a tutorial for the same or any ideas.
    Thank and Regards,
             Sreelash

    Yes, as mantissao states, the best you can do for a SWF is to run it through an Obfuscator.
    Google: Actionscrip Obfuscation and you will find some products to do this.
    What it does is change the Actionscript in the SWF to make it "unreadable" by decompilers.  In practice, what happens is this: Decompilers update constantly to work around any problems arising from new obfuscation techniques, and then new obfuscation techniques are created to stop the new decompilers.  In the end, a decompiled SWF that was obfuscated becomes difficult to parse through, as all variable names are random strings of text, but not impossible.
    Otherwise, the only method you can use is a streaming server (Adobe FMS, Red5, Wowza, etc) and offload all important Actionscript to the server.  This would be reliable in protecting that Actionscript, but may not be worth the time and effort of setting it up.  Plus, this is overkill if the only goal is to protect some "proprietary" code.

  • How Can I protect my swf files from decompiling / saving

    I have navigated through the internet for a long time now but
    could not find the solution to my problem which is "how to protect
    my swf file from decompiling/saving"?
    I know that it CAN BE DONE and here is an example of a file
    on the internet that cannot be saved or decompiled using any
    software that I have come across (ie:SOTHINK decompiler, saveflash)
    http://www.3dinternet.com/video.swf
    Any help? any hints ?
    Thanks
    Hagop

    Hagop,
    > I have navigated through the internet for a long time
    now but
    > could not find the solution to my problem which is "how
    to
    > protect my swf file from decompiling/saving"?
    There is no way to protect your SWF from decompiling. Any
    commercial
    software on the market can be decompiled -- including the
    Flash authoring
    tool and Photoshop, for example -- which is why softare
    generally ships with
    an end user license agreement (EULA) that expects you to
    agree not to
    decompile or reverse engineer your purchase.
    Most Flash content (other than RTMP requests for video, for
    example) are
    HTTP requests, which by nature means the content is
    downloaded to your hard
    drive, just like HTML documents, CSS files, JPGs, and GIFs.
    Your browser
    requests the files, downloads them to your hard drive, then
    displays them
    from your local copy.
    > I know that it CAN BE DONE and here is an example of a
    > file on the internet that cannot be saved or decompiled
    using
    > any software that I have come across
    What you've seen, then, is merely the result of software
    that uses
    unknown (to you or to your sofware) encryption/obfuscation
    algorithms. Keep
    trying, and you'll eventually nail it.
    At best, you can use obfuscators to temporarily deter a
    certain segment
    of the decompiling-inclined population.
    David Stiller
    Adobe Community Expert
    Dev blog,
    http://www.quip.net/blog/
    "Luck is the residue of good design."

  • Protecting EXE, PDF and SWF files from piracy

    I am hoping others in the community have some experience with protecting their Captivate output (EXE and SWF files) from piracy.  We will be selling our eLearning products developed with Captivate through our online store and want to protect them against file sharing and other forms of piracy.  I have found several companies online offering DRM (digital rights management) and SAS (software activation services) that require users to enter a license key to use the products.  I am looking for any recommendations from users who have implemented these types of services.  What provider did you use and what issues did you encounter.  Any insights would be greatly appreciated!
    Thanks,
    Jason

    Most of the tools I have seen are geared towards extracting
    resources from swf's. I use one myself (eltima.com) for
    "harvesting" manufacturers content for my motorcycle dealers. They
    are authorized to use this content, but finding someone at Yamaha
    of Kawasaki or any of the majors who even knows where to find these
    resources is next to impossible. I have also used it to learn from
    by viewing scripts, but as you say, at the end of the day, I think
    the concepts and best practices are about the only thing worth
    taking away from others efforts, not the code.
    Unlocking a protected file can be done as well and I remember
    using a product over a year ago to get at the scripts within an swf
    (I wanted the URL's that pointed to media - it was legal for me to
    do this). It ran from the command line and output the scripts.
    There aren't too many of these types of programs to be found, but
    they exist.
    My personal opinion is that it's not worth the effort. My
    java classes can be decompiled and if someone wants to go to that
    trouble, more power to them. To my knowledge, there isn't anything
    out there yet that is perfect for backwards engineering an swf into
    an MXML file, but a competitor of FLASH Decompiler says that they
    can decompile Adobe 9 PLAYER swf's. For what it's worth, I plan on
    posting the majority of my code on my flexdev.org site once I get
    it established.
    For people who make components for sale, this could be an
    issue of stolen revenue if the decompilers get sophisticated enough
    to reverse engineer the swc into a usable MXML file. I would be
    against anyone who stole code for this purpose, for sure.

  • How to protect my jar file from being downloaded

    How can i protect my jar file from being downloaded by users by accessing it through the web site.
    Now everybody can just type the url www.mysite.com/applets/myApplet.jar
    And download it to his computer.
    I realize that anybody who really wants to download it he will get it anyway, but I want to make it harder.
    thanks in advance

    Your browser has to download the jar file if it's going to run the applet. That's applets work. The browser downloads the classes and then runs them locally.
    I suppose if you wanted to make something to make it difficult for users to explicitly download the jar, you could set some kind of permission flag when the HTML is page is rendered, and then unset it some amount of time (10 seconds?) later, and then only let the user download the jar when the flag is set. But this would be fragile and irritating and unhelpful. It would probably break more than you'd like and not prevent download very much (it wouldn't take long to figure out what was happening), and besides nobody is ever going to try to steal your code.

  • How can I prevent a PDF file from being copied, printed or downloaded? Students should only be able to view the text and and not distribute it in any way.

    How can I prevent a PDF file from being copied, printed or downloaded? Students should only be able to view the text and and not distribute it in any way.

    You can prevent it from being printed by applying a security policy to it
    in Acrobat. The rest can't be prevented, unless you spend  a LOT of money
    on DRM protection.

  • Protecting Sequence Files From Modifications

    I sure others have had to do this in the past.
    What is the best way to protect the sequence file from being modified in the field?
    Even I, with my limited TestStand skills, have gone in with a text editor and changed things in a sequence file.
    We would like to encrypt the sequence file and then have code to convert it back as it is loaded.
    Or is there a better way.
    We are also encrypting the report files on the back end so those can't be altered easily.
    Thanks

    What version of TestStand are you using? According to this version 3.5 has some built-in security features.
    If you don't want to or can't upgrade, there are a few other things I can think of. Are you getting copies of the test results from the CM. At each of the CMs I deal with, we insist on an Internet connection so that the test results are transfered to our local database. If I wanted, I could look at the limits and number of test in the results and compare to a master. I also install VNC on each of the deployed testers. This not only helps to debug when a problem arises, but I can do a simple check sum on the sequence file and compare it to my local copy.

  • Protecting your email from being copied

    Does anyone know if there is a function for mac that can protect your emails frome being copied by another person.

    +Outlook does not include these capabilities which is impossible.+
    Don't be silly. Information rights management has been an integral part of MS' Office suite since the 2003 version. I might add that there are other programs that do the same thing, for other kinds of documents, for example Adobe Acrobat for pdf files. Unbelievably enough, even various well-known pieces of Apple software do the same thing for certain kinds of media files. You simply do not know what you are talking about.
    This is straight from Outlook's Help:
    "By using Permission on the toolbar, you can restrict permission on an e-mail message for specific recipients you want to read the message. As the message sender, you can remove restricted permission from a saved draft of a message by clicking Permission on the toolbar again. Recipients can open and read an e-mail message with restricted permission just as they would a message that doesn't have restricted permission. If recipients don't have Outlook 2003 or later installed on their computers, they can download the Rights Management Add-on for Internet Explorer or another program that supports content with restricted permission.
    E-mail administrators can create permission policies to include on the Outlook Permission submenu (or Permission on the File menu). These permission policies define who can read messages and what actions recipients can take with those messages. For example, an e-mail administrator might define a policy called "Company Confidential" that specifies that a message using that policy can be opened only by people inside the company domain. When you compose a message, you can choose from up to 20 customized policies on the Permission submenu (depending on how many policies the e-mail administrator provides)."
    +Regarding security, there is a night and day difference between Windows and OS X.+
    More nonsense. See my above remark.

  • How do I prevent files from being backed up to iCloud and iTunes?

    I have created the ios app using adobe AIR16 and flash cc. After submission of my aap into aapstore, I received a message from Apple with the following message –
    From Apple
    2.23 - Apps must follow the iOS Data Storage Guidelines or they will be rejected.
    By using xcode we can prevent files from being backed up to icloud and itunes, but i want to know that  what is the way to achieve this by using AIR. While creating an explicit app id from apple developer account , i am not enabling icloud support.

    Within AIR you can set the File.preventBackup property to true on a directory or file to prohibit that content from being backed up to the cloud:
    File - Adobe ActionScript® 3 (AS3 ) API Reference
    This is all you need to call when you first create the folder or file to have it work with iOS backup guidelines.

  • Is there a way to prevent a PDF file from being forwarded?

    is there a way to prevent a PDF file from being forwarded? For example, im a personal trainer and if i send a client a plan via PDF file, i want to make sure that they cannot send it to anyone else. I read about how you can secure a file by creating an ID and then having the recipient create an ID as well, but i would like to make the orocess as easy as possible for my clients and not have to have them create an ID and then send it to me. is there a better way to block the recipient from resending the PDF?

    Hi Kiana,
    As such there is no option to prevent the recipients from forwarding the pdf. However you can refer to this blog How do I prevent someone from forwarding a PDF?, it might be of some help.
    Regards,
    Aadesh

  • Getting Error message while open a SWF file from desktop and any other location

    dear all.,
    I am using Flash CS4, when I publish SWF movie and open it directly from directories I get an error message. (The image of error message attached,
    Plz, help me to short out this problem. ASAP.
    Thanks in advance.

    hi.
    When I double click on the any SWF file (from any location of my system), this error message pop up, which say that “ Windows cannot find “<< file path>>” ……………… but file is playing.
    I don’t know why this error message is coming.
    plz, help me to solve this problem .
    Thanks.

  • Loading local swf files from Application Dir (ios)

    Hi Guys,
    I would like to load additional local swf files to my ios release build but I am confused a little bit because of the new API changes.
    As far as I know at the moment (from Air 3.7 or newer) it is allowed to load local swf files that contains compiled actionscript both from local folder and from a predefined remote host as well. 
    My assumption based on this article:
    http://blogs.adobe.com/airodynamics/2013/03/08/external-hosting-of-secondary-swfs-for-air- apps-on-ios/
    I created the text file to include all of my local swf file names and created the following node in the application.xml:
    <iPhone>
           <externalSwfs>assets/SampleSWFInfoFile.txt</externalSwfs>
    </iPhone>
    When I compile the release build (ipa) using command line adt, it converts all of my local swfs into the stripped swfs which is perfect, but even though I include all the swfs in the compiler command, it puts only the SampleSWFInfoFile.txt file into the assets folder in the ipa but not the swf files.
    I assume, it thinks I will load these files from an external host, but I would like to include them in the app itself.
    I tried to copy the stripped swf files from the externalStrippedSwfs folder and comment the <externalSwfs>assets/SampleSWFInfoFile.txt</externalSwfs> node in the application.xml and compile it and this way it puts the swf files into the ipa, but when I try to install and launch the app it crashes and when I test it using Flash Builder it shows an error message
    "VerifyError: Error #1042: Not an ABC file."
    Do any of you guys know the  solution for this problem?
    Thank you for your help in advance!

    You're publishing in AOT mode as long as you use one of these:
    The AIR Developer Tool or ADT has targets that lets you package apps either for the AOT mode or Interpreter mode. The targets for packaging in AOT mode are ipa-app-store, ipa-ad-hoc, ipa-test and ipa-debug.
    Flash Pro CS6 and Flash Builder automate this process pretty well so it's invisible but the SWF loads and executes code just fine for me when directly published.
    If I take it to command line I can use this to compile successfully (iPad test app):
    adt -package -target ipa-ad-hoc -storetype pkcs12 -keystore my.p12 -provisioning-profile my.mobileprovision NameOfApp.ipa NameOfApp-app.xml NameOfApp.swf iTunesArtwork iTunesArtwork@2x AppIconsForPublish swfs/swfs.txt swfs/GenerateText.swf
    I at least include generic icons in there but I made a 'swfs' folder and placed 'swfs.txt' and 'GenerateText.swf' in there. The SWF uses code to randomly generate text and changes every second using a Timer. I load it in using the same code you do with the ApplicationDomain.currentDomain context. I see the SWF appear and text start randomly changing.
    As I compile there's a folder generated called 'externalStrippedSwfs' with the stripped SWF in there.
    One thing to note is I do not supply <externalSwfs>swfs/swfs.txt</externalSwfs> in my iPhone settings. If I do that it doesn't work. I supply the path to the text file containing the SWF I want to be stripped to adt itself along with the SWFs I want stripped and it takes care of the rest.

Maybe you are looking for