Well tell me exactly how you would be able to crack an application you can't see the source to or find the source out?
Selling unbreakable auth system.
- Thread starter Annex
- Start date
Well tell me exactly how you would be able to crack an application you can't see the source to or find the source out?
why don't you just change the title to "Selling one of the best auth systems."
Puzzle
Apprentice
- Joined
- May 6, 2005
- Sythe Gold
- 0
- Messages
- 846
well, i think you should be able to know this. Annex you know very well that any brute forcer can easily dehash an MD5 or double sha1 or maybe even md5. And guess what, these encryptions are very tough. Theres probably some way to crack it.. but anyways good job
17th Alley
Forum Addict
So Annex, you've never heard of the oh so great CORE, Deviance, Paradox, and all the other mighty contributers to the scene. I bet any one of those groups can crack that, and probably relatively fast. Nothing is uncrackable. Everything is crackable. Impossible is nothing.
Where's this textbox data program? Lets see them put their money where their mouth is.
Problem here is, SSL is 1024 bit encryption, as well as guessing my database name and username. Even if you dehashed all the md5s it still doesn't change the fact that the auth won't work on your computer.
aaaaaaaaaaaaaaaa
Uses databases, reads hard disk serial number, submits the auth code and serial number to a php file that tests the integrity of the auth, logs the ip, operating system and date of attempted access, if access is denied, emails access attempt to an email, can be made to a function for easy coding. Can use ssl and everytime I update it, ill send you the source or put into a directory, inwhich only you are allowed access to.
Would you set it up over Remote access if we need so?
C
Cruel__Machine
Guest
But you can. You always can. Anything you put into an EXE can be examined and modified. The only thing you can do is pack, encrypt data, obfuscate, etc... to slow crackers down.
For this auth system, I'd probably tunnel traffic so it never communicates with any DB or php file, except maybe my own. But I'd probably still have to disassemble the EXE to examine the communication further to find out what information to feed it.
Nothing is unbeakable. Making everything server-side is as close as you can get.
The only reason this small project would be safer than bigger ones (like MS OSs) is because there is no motivation to spend time cracking it as it's not in high demand and doesn't cost as much.
Anyhow... if you're so confident it is safe, and others here are so confident it isn't, then you should release an example EXE.
Yes, just the fact that you have Annex developing and helping you set it up makes it so.
Puzzle
Apprentice
- Joined
- May 6, 2005
- Sythe Gold
- 0
- Messages
- 846
i guess its ok, but you can always be pretty sure from normal ppl by doing a double MD5
BloodArgon
Active Member
give me 10 minutes with it, and we'll see what is unbreakable
THAT! is funny.
