free hit counters
The Process Forum - View Single Post - Vavavoom Boob Fairy Game
View Single Post
Unread 04-27-2013   #33
Fake_Name
Archives everything
 
Fake_Name's Avatar
 
Join Date: Jun 2005
Location: Fake_Place
Posts: 680
Re: Oooooh! Big Time Hacker Detected!

Quote:
Originally Posted by vincent_richter View Post
Stop. NOW.

Ask your lawyer about Right of First Sale, and whether it's been tested as pertaining to free, embedded Flash products. Odds are you'll get a lot of "hmm"s and "haw"s and some settlement figures, but no real case precedent. That's because:

1. At least here in the USA, it is not illegal at all; the DMCA even takes special care to exempt decompilation "for security research purposes." I don't know about you, but I consider loading rogue remote locations to be an enormous concern, licensing stipulations be damned. You're in murky water, and you know it, so stop threatening the people who are trying to help you out, lest no host willingly touch your material again.

2. This goes with Point 1: packet sniffing YOUR OWN RIG is not - I repeat - NOT - a crime, and if you're going to imply that it is, then GTFO the Internet because you're getting feloniously bad legal advice.

Bottom line: what we're doing here is trying to help you with hosting issues, and if you're just going to spurn that offer with disingenuous threats, then none of us should feel reserved about telling you precisely what you can do with yourself.

EDIT: Why are you singling out Fake_Name when Calhoun posted it first? Is this just how you operate when you see a copyvio, rather than going through established DMCA 512 takedown procedures with the appropriate host?

EDIT2: If he can pull URLs with SoThink, either your obfuscation isn't worth a damn, or it flat-out doesn't exist. Don't pull this black-box "it's my content" bullshit now that you've been caught with your pants down, secure your codebase!

FWIW, I didn't actually do any packet sniffing. The loader shim pulls files from dropbox, which properly uses HTTPS. As such, You would need to generate a fake root cert, and MITM the https connection. That's too much work, and flash files are not encrypted anyways, so why bother.

"Decompiling" is really a rather sensational term for what's involved in pulling stuff from a flash file. A swf file is really just a bunch of various files in a box, that is sometimes then gzipped. You just give it a poke with swftools, and it falls apart.

Code:
C:\Profile\Desktop\Manga\SWF Decompile\bf>"C:\pathUtilities\SWFTools\swfdump.exe" -a BoobFairyGame.swf > dump
        [snip]
        00050) + 1:1 iffalse ->95
        00051) + 0:1 findpropstrict <q>[public]flash.net::URLRequest
        00052) + 1:1 pushstring "https://dl.dropbox.com/u/66403118/Games/VavavOOm%20Boob%20Fairy/Girl01.swf"
        00053) + 2:1 constructprop <q>[public]flash.net::URLRequest, 1 params
        [snip]
Really, I only originally poked around because I wanted to grab a local copy of the swf for myself. I posted the link because I figured it was useful, and added a note that it wouldn't run locally because it was relevant. The other stuff was just because I found it interesting.

Then vavavoom had to go all internet-tough-guy for no reason I can determine, so fuck him.


Quote:
Originally Posted by vincent_richter View Post
EDIT3: Fake_Name, reposting when he already took exception to Calhoun's upload maybe wasn't the best idea. He can hit the takedown a lot easier now if it really worries him, but if he's really dead set on being a masochist, go ahead and edit out those links.
No. That just encourages such behaviour.

I see no issue with linking to something, particularly if it's already easily available.

Last edited by Fake_Name; 04-27-2013 at 06:49 AM.
Fake_Name is offline   Reply With Quote