You can corupt the files... or use a packer that is harder to crack than others. There are lot's of ways to detect if someone is trying to reverse engineer your program, but it's a little harder to get it to self-destruct if you do. i recommend reading Crackproof your software: http://www.amazon.com/exec
Give "LockFile" a glance here: http://www.securitysoftwar
Hacker's get around all protection- even the extreme. with windows it's pretty easy to read memory and set your points and disassemble code. There are plenty of mechanisims- however all are thwartable. You can intercept web traffic in the NIC (actually in the processor stack) and fake a response back to the program- you can make a propritary Serial adapter that contains code to unlock your program, or have a usb stick with a PGP key to decyper the program... etc... its all covered in that book above. What the ultimate recommendation is- use the best compiler (his btw) SVK protector http://www.anticracking.sk
Woodmann is a bit full of himself- however he's been doing this for some time- understand how cracker's are going to crack your software- search for "woodmann pavol cerven" (no quotes) to see how hacker's think and act.
GL!
-rich
Main Topics
Browse All Topics





by: skorpfoxPosted on 2004-03-10 at 01:01:05ID: 10559000
There was a similar question like this earlier that I answered. There really isn't a way to make a CD copy proof, otherwise all companies today would be using it. hehe
What I would recommend is having the program authenticate itself with a server and make the program actively authenticate with the server and have the person who is trying to use the program enter a key while connected with the server. That's pretty much what Windows XP is doing now for its registration key.
So far that seems to be the hardest to thwart for crackers. Physical things on the CD would probably be the utility to install it. Have a local authentication key to unlock the installation program ( associated to each distrobution individually or based on a mathmatical algorithm that verifies the correct sequence of letters numbers). then have that internet based authentication.
Most of that is pretty involved and means you need remote servers and databases of registration keys, but if you are that determined to lock out your software to the world that would be pretty much the way to go.
Hope that helps!
-Skorpfox