Re: IceLicense/SecureCode
- From: "Alexandre" <alexandrecarreira@xxxxxxxxxxx>
- Date: Thu, 6 Apr 2006 15:21:18 +0200
I know about Virtual Machine, it's same technology used by Star-Force
Protection, now you can find some unpacker or Star-Force nightmare to
disabled the protection.
Well I prefer to use VCL Licensing and Copy protection in my application
heart because I have total control and use executable packer like 2nd
protection layer.
My message is to don't use "only" executable protector as main protection
for your application but only second layer.
Regards,
Alex.
"Frank Soriano" <franksoriano@xxxxxxxxxxxxxx> a écrit dans le message de
news: 44350b85@xxxxxxxxxxxxxxxxxxxxxxxxx
There are some "demos" that are full functional or contains useful
functions to use them without requiring to switch to registered version.
Have you ever heard about "Trials" especiall "full functional trial" ?
About Themida, the post done on 22-3-2006 (few days ago) but it was
version 1.1 not 1.3 and 1.4 which are the latests. Do you wonder why? Also
its the demo version which DOESNT include according to author the full
protection system to avoid crackers to study the widely/public demo
version. The registered version, which I own, contains dozen of things
that demo doesnt, including the SDK. Also look the reply by the guy in
forum:
--
Congratulations but this Themida is old version
PD: This version not have internal virtual machine and Virtual Machine
anti dumper
--
or this one:
--
cracking demo version of Themida and cracking protected app of Themida or
Themida registered its two different things. Author is very smart and
added the half protections included in the demo version to protect the
software from being studied by crackers in public. Even the protected
applications produced by Themida demo do not have all protections enabled.
Nice try but it has a lot of work ahead...
--
looks like the Virtual Machine of Themida is the strongest one and the
only one protection that doesnt store trial information in registry thats
why the reset tools doesnt include WinLicense/Themida.
At last, when we say VCL cracking it doesnt mean its the ultimate
security. Its the same level of security as using the API/SDK of any good
protection such as ExeCryptor or Themida. The difference is that
IceLicense is a VCL component with events etc but ExeCryptor and Themida
are lines of code. Not a big deal anyway.
Frank
"Alexandre" <alexandrecarreira@xxxxxxxxxxx> wrote in message
news:4434fa88@xxxxxxxxxxxxxxxxxxxxxxxxx
I'm agree with you when you said VCL protection is not popular in
cracking scene, I think it's an advantage.
Now ICE License is not alone but most protection scheme use registry to
store their information, see here :
http://softweb.ws/2006/02/14/Trial_Reset.html.
Now trial reset is not crack, because the application remain always in
demo mode, if I disabled some features and I use CodeEncryption (Ionworx)
to encrypt code, my application remain always protected until a full
license will be loaded, I prefer this different approach.
About Themida is unpack essay was success :
http://forum.exetools.com/showthread.php?t=9399
The problem with executable protector is the protection must decrypt the
code in runtime before it is executed, which means that decrypted copy of
the program or parts of its must reside in memory during runtime (with
possible dump from memory). Unfortunately, in most cases, encrypted
programs can programmatically decrypted using special unpacker programs.
Unpackers create a new executable without protection.
PE Protection scheme look like to : "It is as to close its door and to
leave the key under the pot of flowers."
If you consider Armadillo as a strong protection, try to use in your
software and you'll see...
For me strong protection is not features on paper but time to resist to
attack, now with many tutorials and unpackers available on the net, the
protection will resist few seconds.
Regards,
Alex
"Frank Soriano" <franksoriano@xxxxxxxxxxxxxx> a écrit dans le message de
news: 4434d052@xxxxxxxxxxxxxxxxxxxxxxxxx
I talked about "trial" weakness. The trial information is stored in a
very visible key in the registry and can be easily removed and reset
trial by anyone. The reason that Ionworx is not so popular in the
cracking scene is because they dont care for VCL protections but for
strong and popular protectors such as ExeCryptor, Themida, Armadillo etc.
About tutorial, they exist they always exist and they will exist for
ever. That is why authors are paid, to fix the bugs and security issues.
Most of the manual unpacking tutorials applies only to normal protection
stages, not advanced protection techniques or using API inside your
code.
Frank
"Alexandre" <alexandrecarreira@xxxxxxxxxxx> wrote in message
news:44343a94@xxxxxxxxxxxxxxxxxxxxxxxxx
Hi,
Well about Ionworx products I'm not agreed with you!
I think VCL protection provide low level protection than executable
protector and you can add some personal new traps (if you have source).
ICE License encrypt fragments of code in the source code.
Execryptor and Armadillo seems to be secure but it's more easy to
break, just need to use unpacker to remove protection in few seconds,
for me it's weak protection.
About ExeCryptor see here :
http://community.reverse-engineering.net/viewtopic.php?t=4987&highlight=armadillo
More details about other protections :
http://www.reversing.be/index.php?topic=tutorials&page=3
Regards,
Alex
"Frank Soriano" <franksoriano@xxxxxxxxxxxxxx> a écrit dans le message
de news: 4433cf68@xxxxxxxxxxxxxxxxxxxxxxxxx
I dont like Ionworx products. Weak security for trial versions.
Other software protections you can see:
The greatest, ExeCryptor http://www.strongbit.com/execryptor.asp
The great Themida www.oreans.com (the greatest for trial)
and then Armadillo http://www.siliconrealms.com/
If you want additional protection against spying there
is a tool that also encrypts all the strings and dfms, but I forgot
where...
This is the tool you cant remember.
http://www.billeniumsoft.com/ctd/overview.htm
Highly recommended.
.
- References:
- IceLicense/SecureCode
- From: joey
- Re: IceLicense/SecureCode
- From: Atmapuri
- Re: IceLicense/SecureCode
- From: Frank Soriano
- Re: IceLicense/SecureCode
- From: Alexandre
- Re: IceLicense/SecureCode
- From: Frank Soriano
- Re: IceLicense/SecureCode
- From: Alexandre
- Re: IceLicense/SecureCode
- From: Frank Soriano
- IceLicense/SecureCode
- Prev by Date: Re: IceLicense/SecureCode
- Next by Date: Hide non-visual components
- Previous by thread: Re: IceLicense/SecureCode
- Next by thread: Re: IceLicense/SecureCode
- Index(es):
Relevant Pages
|