View previous topic :: View next topic |
Author |
Message |
LiquidCode Moderator Team
Joined: 05 Dec 2000 Posts: 1751 Location: Space and Time
|
Posted: Fri Mar 15, 2002 2:40 pm Post subject: VDSReg - A Registration system for VDS Developers |
|
|
Hello all!
I just finished VDSReg. It is a registration system for VDS deveopers.
It creates registration code for use in VDS Script files so developers can
create shareware programs much easier. It creates key files to allow the
developers software to be registered by users. It also can create a list of
banned key files so authors can help protect there software from being
stolen. It creates code for VDS versions 3.x and 4.x. The code it
generates uses no external dll files.
You can see a screen shot here. http://www.cgingerich.cc/VDSReg.htm
The link to download it from my site is not up yet but you can
download a copy from VDSWorld.
I have got great feedback from my beta tester Martin from eXtreme
Senses. Thanks Martin.
I hope you will find this as valuable a I do.
Take Care,
Chris Gingerich _________________ Chris
Http://theblindhouse.com |
|
Back to top |
|
|
Garrett Moderator Team
Joined: 04 Oct 2001 Posts: 2149 Location: A House
|
Posted: Fri Mar 15, 2002 9:39 pm Post subject: |
|
|
How secure is it? Can the hacks figure it out quickly? Basically, have you had a hacker try to get by your system yet?
-Garrett _________________ 'What you do not want done to yourself, do not do to others.' - Confucius (550 b.c. to 479 b.c.) |
|
Back to top |
|
|
PGWARE Web Host
Joined: 29 Dec 2001 Posts: 1563
|
Posted: Fri Mar 15, 2002 10:58 pm Post subject: |
|
|
It's pretty hard to crack/patch a vds exe since the language is interpreted and doesn't work well with normal disasemblers - CRACK PATCH (possible but unlikely).
But if this system does not use high level encryption then key generators can easily be made - KEN GEN (possible and very likely).
Trust me I used very complex math routines within Alloy and they put out a keygen within the first 2 weeks of it's release. I've since then used high level encryption for Alloy's registration algorithm and they have yet to make a keygen/crack for the new version of Alloy (over 2 years) they can only supply keys that they purchased with fradulent orders. This can easily be stopped (and has) by banning the key in future versions of the software.
Of course there are ways around my system too but using math routines/ascii values as a way to protect your code will get your program cracked/key gen'd quickly.
I haven't tried this new vdsreg yet so I really don't know how much protection he has put into it, nor do I want to say his system is flawed without looking at it first. But from my exerience with VDS and using normal math/ascii routines this is not really safe. I'll have to try out the vdsreg system before I can judge if it's a good mechanism or not, it may just prove to be pretty good and I'll eat my words. I would suggest that you have "professional" crackers try to take a look at your system and see how long they would take. If it takes a good deal of time then your system may just be very useful. |
|
Back to top |
|
|
LiquidCode Moderator Team
Joined: 05 Dec 2000 Posts: 1751 Location: Space and Time
|
Posted: Sat Mar 16, 2002 3:42 am Post subject: |
|
|
Hello,
I did my best to make the encryption as best as I could. I don't know
of any crackers that could test it. I took the encryption code that iMPA
created and I have a random key generated that is from 50 - 150 chars
long that is used to create the keys. For the VDS 4.x code I have
it use binary encryption, and for VDS 3.x I used an encription algorithm
that is based in the 'Solitaire' algorithm. Prakash I can let you take a
look at it and you may be able to give a good review. If you want,
email me and I can hook you up.
Thanks, _________________ Chris
Http://theblindhouse.com |
|
Back to top |
|
|
PGWARE Web Host
Joined: 29 Dec 2001 Posts: 1563
|
Posted: Sat Mar 16, 2002 4:25 am Post subject: |
|
|
Sure I'll take a look at it, it sounds pretty promising seeing how you are using some encryption - which is a definate plus. You can email me at - pk@pgware.com with the url/location of the beta if you want and I'll test it out |
|
Back to top |
|
|
LiquidCode Moderator Team
Joined: 05 Dec 2000 Posts: 1751 Location: Space and Time
|
Posted: Sat Mar 16, 2002 1:24 pm Post subject: |
|
|
Ok, I'll do that. I put the download on hold for now. I'll send you the
link ASAP. I'm going to be out of town today, I'll send it when I get
back.
Thanks _________________ Chris
Http://theblindhouse.com |
|
Back to top |
|
|
PGWARE Web Host
Joined: 29 Dec 2001 Posts: 1563
|
Posted: Sat Mar 16, 2002 8:41 pm Post subject: |
|
|
Hey LiquidCode,
I downloaded and tested your code. The encryption is great but there are holes in your registration system. It took me under 30 minutes to bypass your system and make it take any type of .KEY file and make the program registered .
Basically I made it bypass your entire encryption portion of the code. Mind you I made 0 modifications to the exe, and I am no cracker. Someone with experience cracking exe's would have done this in much quicker time then I did.
I've emailed you already with instructions on how to fix it and if you do implement in those suggestions the product will be near 100% protected and secure to use. When you do make those fixes please email me back with a new link and I'll test drive it for you |
|
Back to top |
|
|
Garrett Moderator Team
Joined: 04 Oct 2001 Posts: 2149 Location: A House
|
Posted: Sat Mar 16, 2002 8:56 pm Post subject: |
|
|
PK,
Thanks for checking into this for LiquidCode.
-Garrett _________________ 'What you do not want done to yourself, do not do to others.' - Confucius (550 b.c. to 479 b.c.) |
|
Back to top |
|
|
PGWARE Web Host
Joined: 29 Dec 2001 Posts: 1563
|
Posted: Sun Mar 17, 2002 4:31 am Post subject: |
|
|
Just to keep everyone updated I've tried the new version LiquidCode sent me and so far so good. I have yet to bypass his system ) which is a plus for all of us. Mind you I'm not a cracker so further tests could be done with someone who has knowledge with cracking for a better analysis. But from what I've seen I can say it's pretty secure. |
|
Back to top |
|
|
Garrett Moderator Team
Joined: 04 Oct 2001 Posts: 2149 Location: A House
|
Posted: Sun Mar 17, 2002 5:48 am Post subject: |
|
|
Paging Mr Mike Cherry... Oh Mr Mike Cherry, your services are needed in the Cracking Department.. Please report to the Cracking Department... And we're not referring to the cafe at the truck stop either!
-Garrett
P.S. Remember, Crack kills, especially when it's a burly truck driver bending over in front of you to pick up his bag of Twinkies! _________________ 'What you do not want done to yourself, do not do to others.' - Confucius (550 b.c. to 479 b.c.) |
|
Back to top |
|
|
Zoltar VDS Pirate
Joined: 26 Dec 2001 Posts: 91
|
Posted: Sun Mar 17, 2002 3:15 pm Post subject: |
|
|
is it nearly finished LiquidCode? _________________ Zoltar
http://membres.lycos.fr/ |
|
Back to top |
|
|
LiquidCode Moderator Team
Joined: 05 Dec 2000 Posts: 1751 Location: Space and Time
|
Posted: Sun Mar 17, 2002 4:27 pm Post subject: |
|
|
Well, I hope to have it finished sometime within
the next 2 or 3 days. _________________ Chris
Http://theblindhouse.com |
|
Back to top |
|
|
Zoltar VDS Pirate
Joined: 26 Dec 2001 Posts: 91
|
|
Back to top |
|
|
LiquidCode Moderator Team
Joined: 05 Dec 2000 Posts: 1751 Location: Space and Time
|
Posted: Sun Mar 17, 2002 8:05 pm Post subject: |
|
|
Ok everyone, VDSReg version 1.3.18.2002 is now available for download
on VDSWorld.com. I had time to work on it today and got it finished A LOT
sooner than expected _________________ Chris
Http://theblindhouse.com |
|
Back to top |
|
|
Garrett Moderator Team
Joined: 04 Oct 2001 Posts: 2149 Location: A House
|
Posted: Sun Mar 17, 2002 10:31 pm Post subject: |
|
|
Chris, I'll thank you in advance for doing this for us. As I've been hoping for a viable alternative to using dlls for this stuff.
Your code will be put into real world scenario within the week as I have one app ready for the shareware market right now that's been waiting for your code.
Thanks,
-Garrett _________________ 'What you do not want done to yourself, do not do to others.' - Confucius (550 b.c. to 479 b.c.) |
|
Back to top |
|
|
|