1) Create a web page of your own with a regular link pointing to the .swf file.
2) Right-click, save as...
3) Profit!

Proxy sniffers are also easy to come by, easy to use, and give you the option to save any of the files locally.

Nathan
http://www.nathanderksen.com


On Jan 16, 2006, at 2:21 AM, zwetan wrote:


if anyone has any further coherent information or personal experience
with obfuscating by hand (ie not using someone else's software)...  i
would be more then happy to hear from you.  once i actually achieve
any results i will report back.

i'm benchmarking against asv and sothink 2005 build 5.whatever.


One thing that people don't consider is that
You don't need to obfuscate if people can not access the SWF
In the first place


1) use SSL + prevent caching in the HTTP header
   -> no SWF in the browser cache

or

2) instead of pointing to foobar.swf in the Object/Embed tag
   point to getBinary.php /getBinary.asp / whatever
   + prevent caching in the HTTP header
   -> no SWF in the browser cache


It's complicated to put in place, but the result is
No SWF in the browser cache to decompile

2) off course is still not 100% safe against people being able
to detect a SWF stream with a HTTP sniffer

but the solution 1) well.. almost unbeatable

zwetan



_______________________________________________
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders


_______________________________________________
Flashcoders mailing list
Flashcoders@chattyfig.figleaf.com
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Reply via email to