It is currently Tue Aug 22, 2017 2:04 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 6 posts ] 
Author Message
 Post subject: Is the gfp container secure?
PostPosted: Sat Jul 17, 2010 11:23 am 
Offline
User
User
User avatar

Joined: Tue Aug 19, 2008 11:01 am
Posts: 87
We are convinced that the gfp container format is secure. However, with this challenge you can prove us wrong.

The challenge is about decrypting the given media file without giving a password.
If someone can decrypt this media file, I will upload the complete sourcecode of the current version of the GreenForce-Player.

1) Download media file
2) Decrypt the media file
3) Send me the password or the decrypted video

What is the prize:
The complete sourcecode of the current version of the GreenForce-Player will be released to everyone.

GreenForce-Player

_________________
GreenForce-Player - The portable media player!


Top
 Profile  
Reply with quote  
 Post subject: Re: Is the gfp container secure?
PostPosted: Sat Jul 17, 2010 1:33 pm 
Offline
Addict
Addict
User avatar

Joined: Fri Jul 21, 2006 4:41 am
Posts: 2336
Location: Berlin, Germany
This challenge is pointless. The player has to read the file anyway. So you will just debug the player and check where password check/decryption occurs. No one will even bother looking at the files but rather for the decryption in your program.

_________________
Windows 10 Pro, 64-Bit / Whose Hoff is it anyway?


Top
 Profile  
Reply with quote  
 Post subject: Re: Is the gfp container secure?
PostPosted: Sat Jul 17, 2010 11:51 pm 
Offline
Addict
Addict
User avatar

Joined: Sat Aug 15, 2009 6:59 pm
Posts: 1213
Fluid Byte wrote:
This challenge is pointless. The player has to read the file anyway. So you will just debug the player and check where password check/decryption occurs. No one will even bother looking at the files but rather for the decryption in your program.

Right, and then ripping the code and do a bruteforce attack on the file to get the password.
You can't do anything against a brute force attack except having long passwords and a slow encryption algo.


Top
 Profile  
Reply with quote  
 Post subject: Re: Is the gfp container secure?
PostPosted: Sun Jul 18, 2010 12:52 am 
Offline
PureBasic Expert
PureBasic Expert

Joined: Fri Apr 25, 2003 5:24 pm
Posts: 7581
> You can't do anything against a brute force attack

What about a Captcha in the password input routine?

_________________
I compile using 5.31 (x86) on Win 7 Ultimate (64-bit).
"PureBasic won't be object oriented, period" - Fred.


Top
 Profile  
Reply with quote  
 Post subject: Re: Is the gfp container secure?
PostPosted: Sun Jul 18, 2010 4:10 am 
Offline
Addict
Addict
User avatar

Joined: Sat Aug 15, 2009 6:59 pm
Posts: 1213
PB wrote:
What about a Captcha in the password input routine?

Captchas are just annoying for the user and could be just patched out by a cracker.


Top
 Profile  
Reply with quote  
 Post subject: Re: Is the gfp container secure?
PostPosted: Mon Jul 19, 2010 9:29 pm 
Offline
PureBasic Expert
PureBasic Expert
User avatar

Joined: Sat May 17, 2003 11:31 am
Posts: 6016
Just the password wouldn't matter, but I guess if someone could return a proper unencrypted media file then that would make sense.

_________________
( PB5.50 Win7 x64 Dell XPS710 nForce 5 Intel Q6600 SSD Evo 840 GFX GTS450 )
( You have two options: psychotherapy, or the PureBasic Survival Guide... )


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 6 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 7 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  

 


Powered by phpBB © 2008 phpBB Group
subSilver+ theme by Canver Software, sponsor Sanal Modifiye