Cracking methods and how to stop them

Just starting out? Need help? Post your questions and find answers here.
User avatar
utopiomania
Addict
Addict
Posts: 1655
Joined: Tue May 10, 2005 10:00 pm
Location: Norway

Re: Cracking methods and how to stop them

Post by utopiomania »

Trond wrote:
It's true, especially on assembly language it's not very effective. However his code is also using a virtual machine.
That was merely an illustration of how powerful obfuscation is, and what a cracker is up to.

The obfuscator I intend to use is of course for assembly language, not source code. :roll:



Anyways, here's my plan for my SYSTEM so far:

Since my main protection is an obfuscator, the critical parts of the code is changed into
instructions which will run on multiple VMs

Customer pays for a licence and supplies his name and email

You enter his name and email into the licenence system

The licence system randomises name and email, fingerprints this
to create a serial

The licence system composes a mail with his registration details and
mails it off to him

The customer enters the registration details (name, email & serial)
into the program to register it

The program randomises name and email, fingerprints this and
compares it to the supplied serial

If ok the program puts the name and email in the about box

The program writes the registration details to a file

On startup, the program looks for the file, if not present, the
program is unregistered

If found, the program read name and email, randomises name
and email, fingerprint this and compares to the serial found in
the file (auto registers on each startup)

If ok the program puts name and email in the about box

If file not found or not ok the program is unregistered
...

- The randomise and compare methods are protected by the obfuscator

- When you receive the payment details from PayPal, you simply
enter them into the Licence System which compose a registration detail
mail body you can mail off to the customer

- The customers enters these registration details once and thats it

- If he decides to share the app with the rest of the world, he also shares
his name and email with us
Mr Coder
User
User
Posts: 54
Joined: Tue Apr 13, 2010 8:02 am

Re: Cracking methods and how to stop them

Post by Mr Coder »

utopiomania wrote:If he decides to share the app with the rest of the world, he also shares his name and email with us
And that's the kink in your whole plan. One single proud yellow* pirate in a country of millions will not care about that. They'll register and then spread your app without fear of reprisal. You can't fight that kind of attitude... not with legal threats, obfuscaters, clever code, nothing. And that's a shame.

* Disclaimer: Yellow = coward. See definition 9 here: http://dictionary.reference.com/browse/yellow
User avatar
DoubleDutch
Addict
Addict
Posts: 3220
Joined: Thu Aug 07, 2003 7:01 pm
Location: United Kingdom
Contact:

Re: Cracking methods and how to stop them

Post by DoubleDutch »

They can usually buy with either a stolen or fake (generated) credit card number and you then give them the code, the real insult comes when you have to pay the chargeback fees! :(

Sometimes they setup a paypal account and pay you, but then say to paypal that you never sent the code, paypal almost always side with them, again you have to pay 'admin' fees and other charges! :(

You could supply one key that lasts 6 months, then another after the chargeback period is over.

Don't make the program obviously hard to bust, that way groups will 'crack it', but real users will find that it isn't really cracked once they start to really use it. There is a well known help creation program that seems to use this method, it appears cracked, but after a while your work files are saves as encrypted zips that will not open unless you buy the program. (It's a great program btw and well worth buying, if you can guess what it is! ;) )
https://deluxepixel.com <- My Business website
https://reportcomplete.com <- School end of term reports system
User avatar
utopiomania
Addict
Addict
Posts: 1655
Joined: Tue May 10, 2005 10:00 pm
Location: Norway

Re: Cracking methods and how to stop them

Post by utopiomania »

They will pay through PayPal only, so the name/email will be vailid, if name/email is false I think they
can say what they want to PayPal. If PayPal helps criminals steal apps, then I think THEY have a
problem, not me or any other customers who trust them and do business in good faith.

Also, distributing a registered stolen app is a risk even if your fake name/email is stamped on it. You
never know what a company can do to try and track you down, and with millions of bytes of obfuscated
code, you never know what's going on under the hood, if you decide to be a cracker hero.
User avatar
DoubleDutch
Addict
Addict
Posts: 3220
Joined: Thu Aug 07, 2003 7:01 pm
Location: United Kingdom
Contact:

Re: Cracking methods and how to stop them

Post by DoubleDutch »

I really don't think that they care what you think as a seller:
See http://www.thisismoney.co.uk/bargains-a ... _page_id=5
and http://paypalsucks.com/

I have been stung by PayPal a few times, but you just have to take it and build it into your pricing - Just like regular shops do for shoplifting.

btw, if it does happen to you a few times then you let flag your PayPal account and keep 1/3 of your PayPal turnover in a rolling reserve account for 6 months. It's a real pain and could hurt your cashflow.
https://deluxepixel.com <- My Business website
https://reportcomplete.com <- School end of term reports system
Post Reply