Selling unbreakable auth system.

Well tell me exactly how you would be able to crack an application you can't see the source to or find the source out?

 

why don't you just change the title to "Selling one of the best auth systems."

 

well, i think you should be able to know this. Annex you know very well that any brute forcer can easily dehash an MD5 or double sha1 or maybe even md5. And guess what, these encryptions are very tough. Theres probably some way to crack it.. but anyways good job

 

So Annex, you've never heard of the oh so great CORE, Deviance, Paradox, and all the other mighty contributers to the scene. I bet any one of those groups can crack that, and probably relatively fast. Nothing is uncrackable. Everything is crackable. Impossible is nothing.

 

Where's this textbox data program? Lets see them put their money where their mouth is.

 

Problem here is, SSL is 1024 bit encryption, as well as guessing my database name and username. Even if you dehashed all the md5s it still doesn't change the fact that the auth won't work on your computer.

 

I love how this entire topic is about how things are always "breakable".

Annex, would you mind telling me a bit more about it please? (No, not so I can crack it, so I know what I'd be purchasing)

 

aaaaaaaaaaaaaaaaaa

 

aaaaaaaaaaaaaaaa

 

Uses databases, reads hard disk serial number, submits the auth code and serial number to a php file that tests the integrity of the auth, logs the ip, operating system and date of attempted access, if access is denied, emails access attempt to an email, can be made to a function for easy coding. Can use ssl and everytime I update it, ill send you the source or put into a directory, inwhich only you are allowed access to.

 

Would you set it up over Remote access if we need so?

 

But you can. You always can. Anything you put into an EXE can be examined and modified. The only thing you can do is pack, encrypt data, obfuscate, etc... to slow crackers down.
For this auth system, I'd probably tunnel traffic so it never communicates with any DB or php file, except maybe my own. But I'd probably still have to disassemble the EXE to examine the communication further to find out what information to feed it.
Nothing is unbeakable. Making everything server-side is as close as you can get.
The only reason this small project would be safer than bigger ones (like MS OSs) is because there is no motivation to spend time cracking it as it's not in high demand and doesn't cost as much.

Anyhow... if you're so confident it is safe, and others here are so confident it isn't, then you should release an example EXE.

 

guys is it worth it..?

 

Yes, just the fact that you have Annex developing and helping you set it up makes it so.

 

i guess its ok, but you can always be pretty sure from normal ppl by doing a double MD5

 

THAT! is funny.