JackDinn Posted June 6, 2011 Posted June 6, 2011 Hi,I,v spent over a year constructing an app which has been released as freeware on many download sites. I have just seen a comment on a forum that has me a little concerned, a chap has commented that he is going to try to extract my exe.http://www.thaivisa.com/forum/topic/473199-speed-tester/?utm_source=feedburner&utm_medium=email&utm_campaign=Feed%3A%20thaivisa24%20%28Today%27s%20best%20Thaivisa%20topics%29There are a couple of things in the code that i would rather not have people seeing and so im wondering what the chances are that he might succeed ? If people think its quite possible then i might post him a suggestion that i could do what hes trying to do for him, otherwise i wont worry so much.THIS IS NOT A REQUEST FOR POINTERS ON THE SUBJECT OF DE-COMPILING !Cheers all. Thx all,Jack Dinn. JD's Auto Internet Speed Tester JD's Clip Catch (With Screen Shot Helper) Projects :- AutoIt - My projects My software never has bugs. It just develops random features. :-D
guinness Posted June 6, 2011 Posted June 6, 2011 (edited) Are you sure they meant that, because they could have meant creating a wrapper for Portable use, like PortableApps.com does. Also the topic has been discussed before so search the Forums for advice. Edited June 6, 2011 by guinness UDF List: _AdapterConnections() • _AlwaysRun() • _AppMon() • _AppMonEx() • _ArrayFilter/_ArrayReduce • _BinaryBin() • _CheckMsgBox() • _CmdLineRaw() • _ContextMenu() • _ConvertLHWebColor()/_ConvertSHWebColor() • _DesktopDimensions() • _DisplayPassword() • _DotNet_Load()/_DotNet_Unload() • _Fibonacci() • _FileCompare() • _FileCompareContents() • _FileNameByHandle() • _FilePrefix/SRE() • _FindInFile() • _GetBackgroundColor()/_SetBackgroundColor() • _GetConrolID() • _GetCtrlClass() • _GetDirectoryFormat() • _GetDriveMediaType() • _GetFilename()/_GetFilenameExt() • _GetHardwareID() • _GetIP() • _GetIP_Country() • _GetOSLanguage() • _GetSavedSource() • _GetStringSize() • _GetSystemPaths() • _GetURLImage() • _GIFImage() • _GoogleWeather() • _GUICtrlCreateGroup() • _GUICtrlListBox_CreateArray() • _GUICtrlListView_CreateArray() • _GUICtrlListView_SaveCSV() • _GUICtrlListView_SaveHTML() • _GUICtrlListView_SaveTxt() • _GUICtrlListView_SaveXML() • _GUICtrlMenu_Recent() • _GUICtrlMenu_SetItemImage() • _GUICtrlTreeView_CreateArray() • _GUIDisable() • _GUIImageList_SetIconFromHandle() • _GUIRegisterMsg() • _GUISetIcon() • _Icon_Clear()/_Icon_Set() • _IdleTime() • _InetGet() • _InetGetGUI() • _InetGetProgress() • _IPDetails() • _IsFileOlder() • _IsGUID() • _IsHex() • _IsPalindrome() • _IsRegKey() • _IsStringRegExp() • _IsSystemDrive() • _IsUPX() • _IsValidType() • _IsWebColor() • _Language() • _Log() • _MicrosoftInternetConnectivity() • _MSDNDataType() • _PathFull/GetRelative/Split() • _PathSplitEx() • _PrintFromArray() • _ProgressSetMarquee() • _ReDim() • _RockPaperScissors()/_RockPaperScissorsLizardSpock() • _ScrollingCredits • _SelfDelete() • _SelfRename() • _SelfUpdate() • _SendTo() • _ShellAll() • _ShellFile() • _ShellFolder() • _SingletonHWID() • _SingletonPID() • _Startup() • _StringCompact() • _StringIsValid() • _StringRegExpMetaCharacters() • _StringReplaceWholeWord() • _StringStripChars() • _Temperature() • _TrialPeriod() • _UKToUSDate()/_USToUKDate() • _WinAPI_Create_CTL_CODE() • _WinAPI_CreateGUID() • _WMIDateStringToDate()/_DateToWMIDateString() • Au3 script parsing • AutoIt Search • AutoIt3 Portable • AutoIt3WrapperToPragma • AutoItWinGetTitle()/AutoItWinSetTitle() • Coding • DirToHTML5 • FileInstallr • FileReadLastChars() • GeoIP database • GUI - Only Close Button • GUI Examples • GUICtrlDeleteImage() • GUICtrlGetBkColor() • GUICtrlGetStyle() • GUIEvents • GUIGetBkColor() • Int_Parse() & Int_TryParse() • IsISBN() • LockFile() • Mapping CtrlIDs • OOP in AutoIt • ParseHeadersToSciTE() • PasswordValid • PasteBin • Posts Per Day • PreExpand • Protect Globals • Queue() • Resource Update • ResourcesEx • SciTE Jump • Settings INI • SHELLHOOK • Shunting-Yard • Signature Creator • Stack() • Stopwatch() • StringAddLF()/StringStripLF() • StringEOLToCRLF() • VSCROLL • WM_COPYDATA • More Examples... Updated: 22/04/2018
JackDinn Posted June 6, 2011 Author Posted June 6, 2011 (edited) hmm, quite possible now you come to mention it. I'll keep my fingers crossed that my assumption is incorrect thx. p.s. i didn't search the subject as i seriously didnt expect to find anything (for obvious reasons) Edited June 6, 2011 by JackDinn Thx all,Jack Dinn. JD's Auto Internet Speed Tester JD's Clip Catch (With Screen Shot Helper) Projects :- AutoIt - My projects My software never has bugs. It just develops random features. :-D
smartee Posted June 6, 2011 Posted June 6, 2011 Hi,It is sufficiently safe so as to keep the average user/programmer from peering at your source.However, including sensitive information in your source is unwise as this practice serves to motivate the "wrong-doers".To discourage users from going this route, you can include a clause in the terms and conditions of using/downloading your application with respect to prohibiting reverse engineering(or attempts at doing so).As guinness pointed out, the forum is richly populated with posts of this nature, as you are not the first to be concerned with your scripts' security.Perhaps this discussion should be closed on this note as it treads the finer line of a topic that really ought not to be discussed on this forum as per the recently revised Forum Rules.-smartee
GEOSoft Posted June 6, 2011 Posted June 6, 2011 To discourage users from going this route, you can include a clause in the terms and conditions of using/downloading your application with respect to prohibiting reverse engineering(or attempts at doing so).Totally ineffective. They'll do it anyway. George Question about decompiling code? Read the decompiling FAQ and don't bother posting the question in the forums.Be sure to read and follow the forum rules. -AKA the AutoIt Reading and Comprehension Skills test.*** The PCRE (Regular Expression) ToolKit for AutoIT - (Updated Oct 20, 2011 ver:3.0.1.13) - Please update your current version before filing any bug reports. The installer now includes both 32 and 64 bit versions. No change in version number. Visit my Blog .. currently not active but it will soon be resplendent with news and views. Also please remove any links you may have to my website. it is soon to be closed and replaced with something else. "Old age and treachery will always overcome youth and skill!"
JackDinn Posted June 6, 2011 Author Posted June 6, 2011 ahh, delete , delete, delete you piped me to the post ! Thx all,Jack Dinn. JD's Auto Internet Speed Tester JD's Clip Catch (With Screen Shot Helper) Projects :- AutoIt - My projects My software never has bugs. It just develops random features. :-D
smartee Posted June 6, 2011 Posted June 6, 2011 Totally ineffective. They'll do it anyway.Perhaps so, but at least then, if they do, you will have some type of legal recourse.
JackDinn Posted June 6, 2011 Author Posted June 6, 2011 (edited) legal recourse ! you must think im rich or powerful especially as it kinda looks like hes in Thailand, personally believe disclaimers are only effective as a deterrent against corporations. Thing is he only needs to drop me a note and id be quite happy to do it for him ! Edited June 6, 2011 by JackDinn Thx all,Jack Dinn. JD's Auto Internet Speed Tester JD's Clip Catch (With Screen Shot Helper) Projects :- AutoIt - My projects My software never has bugs. It just develops random features. :-D
Maffe811 Posted June 6, 2011 Posted June 6, 2011 I was told:If they really want your source, they will get it. [font="helvetica, arial, sans-serif"]Hobby graphics artist, using gimp.Automating pc stuff, using AutoIt.Listening to music, using Grooveshark.[/font]Scripts:[spoiler]Simple ScreenshotSaves you alot of trouble when taking a screenshot!Don't remember what happened with this, but aperantly the exe is all i got.If you don't want to run it, simply don't._IsRun UDFIt figures out if the script has ben ran before based on the info in a ini file.If you don't want to use exactly what i wrote, you can use it as inspiration.[/spoiler]
JackDinn Posted June 6, 2011 Author Posted June 6, 2011 well i kinda always thought that anyone determined enough would get what they were after which was why i decided I would give it away, in my thought process that would stop any attempts to hack it, looks like i didn't think that through properly. Thx all,Jack Dinn. JD's Auto Internet Speed Tester JD's Clip Catch (With Screen Shot Helper) Projects :- AutoIt - My projects My software never has bugs. It just develops random features. :-D
GEOSoft Posted June 6, 2011 Posted June 6, 2011 I've had 3 pieces of software "Stolen" and all 3 were freeware. Hardly worth the trouble to steal it but they did anyway. Any of them could have asked for the source and I would have given it to them to save them some time. George Question about decompiling code? Read the decompiling FAQ and don't bother posting the question in the forums.Be sure to read and follow the forum rules. -AKA the AutoIt Reading and Comprehension Skills test.*** The PCRE (Regular Expression) ToolKit for AutoIT - (Updated Oct 20, 2011 ver:3.0.1.13) - Please update your current version before filing any bug reports. The installer now includes both 32 and 64 bit versions. No change in version number. Visit my Blog .. currently not active but it will soon be resplendent with news and views. Also please remove any links you may have to my website. it is soon to be closed and replaced with something else. "Old age and treachery will always overcome youth and skill!"
twitchyliquid64 Posted June 6, 2011 Posted June 6, 2011 Wow jack, Thats a pretty nice piece of software you got there. Looks neat! I can understand why people like it. ongoing projects:-firestorm: Largescale P2P Social NetworkCompleted Autoit Programs/Scripts: Variable Pickler | Networked Streaming Audio (in pure autoIT) | firenet p2p web messenger | Proxy Checker | Dynamic Execute() Code Generator | P2P UDF | Graph Theory Proof of Concept - Breadth First search
JackDinn Posted June 7, 2011 Author Posted June 7, 2011 well thx Hyperzap, the nice feedback is the best "fee" i could ask for (pity most people just "hit and run" but thats ok ). I'll shoot that back your way , nice work on the p2p udf ! Thx all,Jack Dinn. JD's Auto Internet Speed Tester JD's Clip Catch (With Screen Shot Helper) Projects :- AutoIt - My projects My software never has bugs. It just develops random features. :-D
chavv Posted June 7, 2011 Posted June 7, 2011 Are you sure they meant that, because they could have meant creating a wrapper for Portable use, like PortableApps.com does. Also the topic has been discussed before so search the Forums for advice.I'm almost sure that's the meaning of the post.As for getting source from exe ... I thought that is possible only when interpreter-like language was used. C/C++ can't be decompiled into readable source.All resources (strings, icons, maybe even comments if exe is debug-compiled) should be easily extractable
Info Posted June 7, 2011 Posted June 7, 2011 that's one of the reasons I never took autoit as a serious language flamers gonna flame
Mobius Posted June 7, 2011 Posted June 7, 2011 that's one of the reasons I never took autoit as a serious languageThat is bloody rediculous
JackDinn Posted June 7, 2011 Author Posted June 7, 2011 In the end the question is "is there a platform that is %100 secure" and off course the answer is nop ! If Microsoft , Adobe, etc have there software hacked every which way from Sunday what chance do any of us have. Thx all,Jack Dinn. JD's Auto Internet Speed Tester JD's Clip Catch (With Screen Shot Helper) Projects :- AutoIt - My projects My software never has bugs. It just develops random features. :-D
Maffe811 Posted June 7, 2011 Posted June 7, 2011 Just close your eyes and hope for the best [font="helvetica, arial, sans-serif"]Hobby graphics artist, using gimp.Automating pc stuff, using AutoIt.Listening to music, using Grooveshark.[/font]Scripts:[spoiler]Simple ScreenshotSaves you alot of trouble when taking a screenshot!Don't remember what happened with this, but aperantly the exe is all i got.If you don't want to run it, simply don't._IsRun UDFIt figures out if the script has ben ran before based on the info in a ini file.If you don't want to use exactly what i wrote, you can use it as inspiration.[/spoiler]
Moderators SmOke_N Posted June 7, 2011 Moderators Posted June 7, 2011 You've handled this thread in a respectable and professional manner. Having said that, I'd suggest 2 things. 1. If you're not already doing it; Obfuscate. 2. Try Mobius's option here: As you said, if it's going to happen, it's going to happen. But those are 2 "easy" steps that don't take months of learning to add just the slightest bit of extra peace of mind. Common sense plays a role in the basics of understanding AutoIt... If you're lacking in that, do us all a favor, and step away from the computer.
JackDinn Posted June 7, 2011 Author Posted June 7, 2011 Thx for your input SmOke_N, I do partially obfuscate, /so, but i decided not so fully obfuscate as it makes it almost impossible for me to debug if users send me an "error at line" Mobius has already been good enough to pm me with a heads up on his AI3Camo. Its just a case of me having to get used to the fact that there is not much i can really do, at best i can delay these people but other than that there is no holy grail. Cheers. Thx all,Jack Dinn. JD's Auto Internet Speed Tester JD's Clip Catch (With Screen Shot Helper) Projects :- AutoIt - My projects My software never has bugs. It just develops random features. :-D
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now