Timeline for Is it possible to protect your software and similar from being cracked? [duplicate]
Current License: CC BY-SA 3.0
14 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 15, 2017 at 6:16 | history | closed |
S.L. Barth is on codidact.com Matthew Anders Xander CaffeineAddiction |
Duplicate of Preventing License protection circumvention in Java software | |
| Feb 14, 2017 at 23:25 | comment | added | user123931 | @npp The key isn't compared to anything, it is used. With a incorrect key decryption takes the encrypted stuff that looks like random garbage and makes it random garbage, the correct key makes it runnable code or useful data. | |
| Feb 14, 2017 at 21:23 | comment | added | That Guy | I mean because if so, is it even worth bothering? | |
| Feb 14, 2017 at 14:59 | comment | added | That Guy | I know but they do not have to find a specific key if they find the place where it the entered key is being compared to an encrypted entry from an online database right? Because then they could simply make the output of the comparison to return the wanted value in order to access the state where a correct key have been entered. Am I misunderstanding something? Thanks again bud! | |
| Feb 14, 2017 at 14:31 | comment | added | Matthew | @npp If they can find the key from the encrypted data and the method, it's a really poor encryption method, or they should be going after much bigger targets! Encryption methods are designed to only produce the right output given the correct key. | |
| Feb 14, 2017 at 14:22 | comment | added | S.L. Barth is on codidact.com | @npp You need the server to return something that the client doesn't have access to. A banking app, for example, gives access to the user's bank account. The user could fake these values on the client - but that won't change the amount of money they really have on the bank. That is controlled by the server. | |
| Feb 14, 2017 at 14:13 | comment | added | That Guy | But in fact, couldn't the "attackers" also find out about that by learning how the code works? | |
| Feb 14, 2017 at 14:11 | comment | added | Matthew | @npp You could avoid that by returning something a bit more involved than a true-false value. The decryption key for the data required, for example (ideally keyed to the specific user). | |
| Feb 14, 2017 at 14:08 | comment | added | That Guy | @S.L.Barth but if a software was in trail version and the user click "enter activation key" then the software would check if the entered key matched an entry on something like an sql database(they use an online database in order to avoid these persons from checking keys). However, can't reverse engineers simply find the place where the comparison happens and then if the output would return true or false, change the output to always return true as if the entered key matched an entry in the online database? Thank again! | |
| Feb 14, 2017 at 13:56 | review | Close votes | |||
| Feb 15, 2017 at 6:16 | |||||
| Feb 14, 2017 at 13:45 | answer | added | Steffen Ullrich | timeline score: 2 | |
| Feb 14, 2017 at 13:44 | comment | added | S.L. Barth is on codidact.com | Short answer: an end user can always reverse engineer the code. Obfuscation makes it harder, not impossible. If part of your code is secret, make it a client/server application and put the secret part on the server. | |
| Feb 14, 2017 at 13:43 | history | edited | schroeder♦ | CC BY-SA 3.0 |
break up wall of text, spelling
|
| Feb 14, 2017 at 13:35 | history | asked | That Guy | CC BY-SA 3.0 |