Flasher Archive

[Previous] [Next] - [Index] [Thread Index] - [Previous in Thread] [Next in Thread]


Subject: RE: FLASH: ENCRYPTION and Flash 4
From: Damien Morton
Date: Thu, 6 Jul 2000 22:07:09 +0100

POST data isnt transmitted in the URL, and is fully encrypted using SSL, so
there will be no score=xxx part visible to even the most sophisticated user.
Using the method GET does send information in the URL, however, so you
should always use the POST method when attempting to encrypt.

This technique should prevent most users from tricking your servers. It
works by hiding from view the data that is sent back and forth. A clever
trickster can probably figure out what is being sent back and forth by
examining the SWF file itself.

Theres no 100% secure way to prevent a determined user from faking the
comminication between client and server, especially using Flash. Anything
you do in actionscript to encrypt or encode the score can be reverse
engineered and simulated.

> -----Original Message-----
> From: owneratchinwag [dot] com [owneratchinwag [dot] com]On">mailto:owneratchinwag [dot] com]On Behalf Of Samir
> Thaker
> Sent: Thursday, July 06, 2000 12:10 PM
> To: flasheratchinwag [dot] com
> Subject: Re: FLASH: ENCRYPTION and Flash 4
>
>
> if i do that, wouldn't the score= line still be sitting there at
> the end of
> the url on the users machine? the key here is that i need to stop
> users from
> submitting false point values (that is, editing the score= line
> and changing
> it to 9999999999999 or something like that when they only really recieved
> 100 points). it's not really important for the data to be secure
> on its way
> to the server over the internet, but i need a way to encrypt it before it
> leaves the swf file.
>
> ----- Original Message -----
> From: "Damien Morton" <mortonatdennisinter [dot] com>
> To: <flasheratchinwag [dot] com>
> Sent: Thursday, July 06, 2000 11:46 AM
> Subject: RE: FLASH: ENCRYPTION and Flash 4
>
>
> > Why dont you submit your POST data to a https:// URL, thus using SSL
> > encryption. You will need to trick up your server to accomodate
> this, but,
> > otherwise its no problem.
> >
> > > -----Original Message-----
> > > From: owneratchinwag [dot] com [owneratchinwag [dot] com]On">mailto:owneratchinwag [dot] com]On Behalf Of Samir
> > > Thaker
> > > Sent: Wednesday, July 05, 2000 5:16 PM
> > > To: flasheratchinwag [dot] com
> > > Subject: FLASH: ENCRYPTION and Flash 4
> > >
> > >
> > > are there any ways to encrypt data strings withing Flash 4?
> I've created
> a
> > > game and need to pass the 'score' variable to my server in such a way
> that
> > > it cannot be edited by a user. i can't, for example, have the line
> > > &score=100 sitting at the end of an URL that i've specified using
> > > the 'POST'
> > > command. are there any plugins that can do encryption within
> flash? any
> > > scripts? native support? i'd be using ASP as the database/backend if
> that
> > > matters.
> > >
> > > Samir Thaker
> > >
> > >
> > > flasher is generously supported by...
> > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > > flashforward2000 and the Flash(tm) Film Festival
> > > July 24-26, 2000, NEW YORK CITY, Hammerstein Ballroom
> > > www.flashforward2000.com
> > > Produced by United Digital Artists and lynda.com
> > > Sponsored by Macromedia, Adobe Systems, Fusion, Inc, AtomFilms,
> > > shockwave.com and Electric Rain.
> > > 1.877.4.FLASH.4 or (1.805.640.6679 outside the US and Canada)
> > > Register before June 30 and save $200!!-- www.flashforward2000.com
> > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > > To unsubscribe or change your list settings go to
> > > http://www.chinwag.com/flasher or email helpatchinwag [dot] com
> > >
> > >
> >
> >
> > flasher is generously supported by...
> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > flashforward2000 and the Flash(tm) Film Festival
> > July 24-26, 2000, NEW YORK CITY, Hammerstein Ballroom
> > www.flashforward2000.com
> > Produced by United Digital Artists and lynda.com
> > Sponsored by Macromedia, Adobe Systems, Fusion, Inc, AtomFilms,
> > shockwave.com and Electric Rain.
> > 1.877.4.FLASH.4 or (1.805.640.6679 outside the US and Canada)
> > Register before June 30 and save $200!!-- www.flashforward2000.com
> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > To unsubscribe or change your list settings go to
> > http://www.chinwag.com/flasher or email helpatchinwag [dot] com
> >
> >
>
>
> flasher is generously supported by...
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> flashforward2000 and the Flash(tm) Film Festival
> July 24-26, 2000, NEW YORK CITY, Hammerstein Ballroom
> www.flashforward2000.com
> Produced by United Digital Artists and lynda.com
> Sponsored by Macromedia, Adobe Systems, Fusion, Inc, AtomFilms,
> shockwave.com and Electric Rain.
> 1.877.4.FLASH.4 or (1.805.640.6679 outside the US and Canada)
> Register before June 30 and save $200!!-- www.flashforward2000.com
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> To unsubscribe or change your list settings go to
> http://www.chinwag.com/flasher or email helpatchinwag [dot] com
>


flasher is generously supported by...
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
flashforward2000 and the Flash(tm) Film Festival
July 24-26, 2000, NEW YORK CITY, Hammerstein Ballroom
www.flashforward2000.com
Produced by United Digital Artists and lynda.com
Sponsored by Macromedia, Adobe Systems, Fusion, Inc, AtomFilms,
shockwave.com and Electric Rain.
1.877.4.FLASH.4 or (1.805.640.6679 outside the US and Canada)
Register before June 30 and save $200!!-- www.flashforward2000.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
To unsubscribe or change your list settings go to
http://www.chinwag.com/flasher or email helpatchinwag [dot] com

Replies
  Re: FLASH: ENCRYPTION and Flash 4, Helen Triolo

Replies
  Re: FLASH: ENCRYPTION and Flash 4, Samir Thaker

[Previous] [Next] - [Index] [Thread Index] - [Next in Thread] [Previous in Thread]