Collaborate Disseminate
I wrote a VCL app using Delphi10.2. It has a simple activation setup, encrypted key is stored in Kinvey backend. The key to decrypt the encrypted key is hidden in the source code.
Now in order to establish the HTTPS connecti… Continue reading Securing Delphi application SSL traffic from decryption
Our web application uses a HTML file with jQuery embedded inside.
According to the jQuery license (https://jquery.org/license/), we have to leave the license header intact, including the version number.
Our client reported e… Continue reading Is it really Security Misconfiguration to show a version number?
I’m working on a piece of software written in VB.NET for Windows machines (mainly Windows Server). I have some understanding of cryptography and security, but I want some good old fashioned peer review on the method I’ll be u… Continue reading Is anything missing in the offline software licensing plan?
I got log files of a specific software of a couple of systems, I was trying to identify the pirated and genuine versions of the software by looking at them. I haven’t been able to figure it out with proof. Any suggestions wou… Continue reading How to identify whether a software being used is pirated or licensed from log files?
From what I can tell, some software licenses work client side.
For example, when looking in to the purchased software for the first time, the server will return a software license. In order to validate that the license is leg… Continue reading What prevents the client from changing the signature in files?
I’m a bit new to Azure AD. I have some software development offshored and have already created a guest account in Azure for the developer. I’ve create an account in SQL Server (Manually via the following script):
CREATE US… Continue reading Allow Guest User in Azure Access to SQL Server (DEV, Read/Write)
I’m trying to make a good licensing system without affecting user’s experience and at the same to make it as secure as possible. I know it’s impossible to make it 100% secure, but I would like to make it harder.
My program i… Continue reading How secure is this schema for Online Licensing System?
I got a GUI Program, which loads the Logic from a webserver if the entered License Key is valid.
The actual connection string I hexed and xor’d with a secret key. (which is unfortunately static)
The Webservice itself authent… Continue reading Key Encryption / Obfuscation
We have a licensing system where our software, a commercial product we sell to people, contacts our licensing server when starting to get an OK to run.
It contacts our licensing URL and passes up an XML file signed with our … Continue reading Allow setting both server URL and public key – security hole?
I’m looking into binary obfuscation for an exectuable binary written in C++. I realize preventing cracks is impossible, but making it slightly harder would be nice.
No matter how complex the actual license scheme is, I can’t think of a wa… Continue reading C++ binary obfuscation: how to get around license checks being a simple if/then branches?