Good day all,
To test my Flash site, I downloaded the free version of Sothink SWF Decompiler
and was surprised at how much it was able to obtain from my swf - even the AS
files in a protected folder on the server! Impressive in its own way...
I have used amfphp to import text from a mysql
To test my Flash site, I downloaded the free version of Sothink SWF
Decompiler and was surprised
at how much it was able to obtain from my swf - even the AS files in a
protected folder on the server!
Impressive in its own way...
I have used amfphp to import text from a mysql database.
I should have mentioned that I am also using a SSL certificate to encrypt
traffic to and from the site. Doesn't this deter packet sniffers?
-Webmastermack
--
Yes, but it can easily be viewed as it's coming across the wire using
packet sniffers or
This won't solve the issue, ssl certs do encrypt data, but they are
not meant to encrypt the data so that it is unreadable to the end
user... they are meant so that if I am conducting a transaction
online, it encrypts all the data so that Bob over in Arkansas can't
jack the posted fom data.
So,
I should have mentioned that I am also using a SSL certificate to encrypt
traffic to and from the site. Doesn't this deter packet sniffers?
It prevents third parties from monitoring network traffic. It doesn't
prevent either endpoint (client or server) from monitoring network
traffic.
Dave
Good points have been raised. Thank you for quick your feedback!
Does anyone have recommendations for keeping text data as safe as possible? Is
there a different track I should be taking? (I am open to leaving the Flash
environment as well)
-Webmaster Mack
If you are worried about the client accessing your data outside of the
player, that you just have to live with it; for, if someone is good
enough they will find a way.
For example:
-If you are using the browser's ssl capability, I would just create a
proxy for the browser(thanks for the slap
Hi,
It's more about risk assessment and minimising it than how to keep
it safe. If your data is so sensitive that joe public should not see it
then allowing access to the data over the internet is probably a bad
thing to do...
Otherwise, if it's not hugely sensitive, perhaps personal
Encrypt your text using a super crazy encryption algorithm.
Then, create a swc that contains the key and algorithm to decrypt the
text.
Then, encrypt that swc using another super crazy encryption algorithm.
Load the swc at runtime as raw bytes, decrypt it in memory, and then
instantiate
Very interesting video. Thanks for the info!
-Mack
--- On Wed, 5/13/09, Steven Sacks flash...@stevensacks.net wrote:
From: Steven Sacks flash...@stevensacks.net
Subject: Re: [Flashcoders] is imported db text safe from decompilers?
To: Flash Coders List flashcoders@chattyfig.figleaf.com
Date
10 matches
Mail list logo
