How to hide an swf

Discussions of secure PHP coding. Security in software is important, so don't be afraid to ask. And when answering: be anal. Nitpick. No security vulnerability is too small.

Moderator: General Moderators

Post Reply
tehhparadox
Forum Newbie
Posts: 18
Joined: Thu Oct 01, 2009 11:55 am

How to hide an swf

Post by tehhparadox »

Hi guys

As the title says, how do you hide your swf? I've tried using iframes, php URI checks, php HTTP_REQUEST checks and everything and found, it's not possible to completely hide your swf. On Google Chrome, the component inspector takes you directly to the swf 8O . Using JavaScript also doesn't really work out, loading the swf from another swf doesn't work either. The best way is probably encrypting your swf, but this isn't really hiding your swf. Any ideas?
User avatar
kaisellgren
DevNet Resident
Posts: 1675
Joined: Sat Jan 07, 2006 5:52 am
Location: Lahti, Finland.

Re: How to hide an swf

Post by kaisellgren »

It can't be done.

Think about it, if your browser can see and play it, how could you not have it.
User avatar
phdatabase
Forum Commoner
Posts: 83
Joined: Fri May 28, 2010 10:02 am
Location: Fort Myers, FL

Re: How to hide an swf

Post by phdatabase »

I'm not sure I agree that it can't be done. Maybe it can't be done like your trying, but the real question here is hidden from who or what?
tehhparadox
Forum Newbie
Posts: 18
Joined: Thu Oct 01, 2009 11:55 am

Re: How to hide an swf

Post by tehhparadox »

Hiding from the user, in order to protect your swf being downloaded and possibly being decompiled. I know no one really does it but it will make me relieved to know that my swfs are protected from being downloaded. :)
User avatar
phdatabase
Forum Commoner
Posts: 83
Joined: Fri May 28, 2010 10:02 am
Location: Fort Myers, FL

Re: How to hide an swf

Post by phdatabase »

You're right, hiding them in that case probably won't work.
User avatar
Weirdan
Moderator
Posts: 5978
Joined: Mon Nov 03, 2003 6:13 pm
Location: Odessa, Ukraine

Re: How to hide an swf

Post by Weirdan »

tehhparadox wrote:I know no one really does it but it will make me relieved to know that my swfs are protected from being downloaded. :)
Well, then taking your site offline (make sure you disconnected network cables :twisted: ) seems to be a sensible option.
Bind
Forum Contributor
Posts: 102
Joined: Wed Feb 03, 2010 1:22 am

Re: How to hide an swf

Post by Bind »

it cant be done.

simple as that.

You can code in domain prerequisite checks into the swf (if you have the source), and you can compress/obfuscate the flash source/actionscript, but they are always coming out with new decompilers whenever a new flash version is released.

Until Macromedia (now Adobe) starts taking their customers intellectual property rights seriously and develops a mature, secure, and robust protection mechanism (true encryption) for swf's, it really is like a dog chasing his tail.

your best bet is to code in a check for the domain the swf is hosted on, into the source code, and if its blank or an incorrect domain, then disable the flash file and/or redirect to the authors site, to prevent offline viewing and someone else hosting your files.
Post Reply