Copy protection serial number stuff

[DigitalWhiteByte]

actually automate the recording would be the thing that is missing in the system,
I am integrating the ability to encrypt the key and write it as a registry key,
so you do not even bother to create the authorization file,
my test works fine on xp, but do not know if the uac on vista could be permission issues writing or reading of the register.

[Tom7777]

Someone should move this thread to the registered users area. In my opinion examples about protection systems would be safer there since anyone can visit here and look at the osm's to see how you do it.

[aliasant]

Someone should move this thread to the registered users area. In my opinion examples about protection systems would be safer there since anyone can visit here and look at the osm's to see how you do it.

+1

[TomC]

Someone should move this thread to the registered users area. In my opinion examples about protection systems would be safer there since anyone can visit here and look at the osm's to see how you do it.

A protection system IS save if everyone can see how it's done and there's still no way
to create own valid keys.

Everything else is 'security by obscurity' and needs the better half of a cigarette break to
break.

Tom

[djbrynte]

actually i need help in getting this work? aniyone have any idea. I mean how it works?

[MDMA]

Hi guys,

I've written my very own program to get all MAC addresses.

Download the attached file, unpack it and run it on your PC from the
DOS/cmd console (it's completely harmless).

It reads the available MAC addresses via the Windows API and reports
the result into a file MAC.txt, which is created in the Windows temp
folder.

If you don't know where this folder is open a DOS/cmd box and type
echo %temp%

There you find the file. Please report your results here. If the reports
are good I'll incorporate it into my schematic and drop malcs MAC primitive.

Thanks a lot.
Tom

Edit: unlike getmac it simply ignores disabled devices, so the output is
(hopefully) always easy to parse...

Edit 2: oh, and you can use the environment variable %temp% from within SM's
shell exec to read and delete the result file. Easy stuff...

Hey Tom,
First of all, thanks a lot for your help and coding made available for everyone, you are very kind.

Im having trouble using this system just because I cant seem to get arround using environment variables like %temp%.
I tried the following:

variable.jpg (30.11 KiB) Viewed 1144 times

But with no success
I've also tried the shell exec but where will I take its resulting string from?

Many thanks

[CoreStyler]

I created protection system working very well. Implemented in Hardcore Kicks VSTi 2 (not released yet).
When completed i will post and example on my website.

[MDMA]

I created protection system working very well. Implemented in Hardcore Kicks VSTi 2 (not released yet).
When completed i will post and example on my website.

Thanks mate but I would still like to know how to use these variables.

[CoreStyler]

In my project the key is generated using MAC address primtive and mixed with a string (the root).
So, by that way, a valid code should be generated for any computer in use. The validation of a key, can be done with an osm (a standalone app).
The user have to save an autentication file (or text key) generated from the pc in use, then open the validated serial number.
If validation is not present on the disk (the key file) the plugin continues to show the activation popup and no sound come from the synth.

Locked.PNG (215.98 KiB) Viewed 1091 times

the panel is not completed for now
Any time the synth or effect is loaded, the activation key on the disk is compared with the mac adress in use in that system.

The key algorigthm can be also automated via php but i'm not good as necessary to perform that code (also if is not complex).
In fact, the algorithm uses "hex to string" "string to hex" "string length" "integer data" and "integer operations + - and *), also portable to php. ( i think any programming language )

[mayo]

nice to see that you're trying to protect your hard work but I'm afraid it is useless
no matter on how complex is your protection, there is still some simple on/off switch which is doing the stuff:

key valid => unlock
key invalid => lock

cracker will look for this switch and hack it to make unlock permanent

even if you engage the key to computer hw via mac address or something, the lock/unlock switch is still there ready to be hacked...

all what you achieve with C/R protection like you CoreStyler mentioned is that you will lose customer as they hate C/R protection related to HW and it will not give you any protection against cracking, sorry

just my two cents based on personal experiences...

The key algorigthm can be also automated via php but i'm not good as necessary to perform that code

if you want help, just let me know

[sunsynth]

@MDMA:

look here: http://synthmaker.co.uk/forum/viewtopic.php?f=9&t=6354&p=67811&hilit=dwb+ENVIRON#p67807

Happy new Year!
SunSynth

[MDMA]

nice to see that you're trying to protect your hard work but I'm afraid it is useless
no matter on how complex is your protection, there is still some simple on/off switch which is doing the stuff:

key valid => unlock
key invalid => lock

cracker will look for this switch and hack it to make unlock permanent

even if you engage the key to computer hw via mac address or something, the lock/unlock switch is still there ready to be hacked...

all what you achieve with C/R protection like you CoreStyler mentioned is that you will lose customer as they hate C/R protection related to HW and it will not give you any protection against cracking, sorry

just my two cents based on personal experiences...

The key algorigthm can be also automated via php but i'm not good as necessary to perform that code

if you want help, just let me know

I've managed to develop a fully working system similar to the one coreStyler has but have honestly been thinking about using it or not, I'm also good with PHP but these days hackers can unlock everything really fast. We see this happening even with big corpoartions winch have the latest technology in security.
I have come to the conclusion that the best thing is to give out the plugin for free(unregistered) and give the consumer the option to register under their names and use it for comercial purposes.

PS-Thanks for the link sunSynth

[sunsynth]

I have come to the conclusion that the best thing is to give out the plugin for free(unregistered) and give the consumer the option to register under their names and use it for comercial purposes.

PS-Thanks for the link sunSynth

You're welcome... And a wise conclusion nowadays

[mahavishnuman]

nice to see that you're trying to protect your hard work but I'm afraid it is useless
no matter on how complex is your protection, there is still some simple on/off switch which is doing the stuff:

key valid => unlock
key invalid => lock

cracker will look for this switch and hack it to make unlock permanent

even if you engage the key to computer hw via mac address or something, the lock/unlock switch is still there ready to be hacked...

My thought would be to use each hardware serial number to scramble the audio (perhaps by using maximum length sequences which are easy to compute and difficult to crack through brute force) every few seconds. An authentic key would then descramble the audio. This might make it more challenging to completely crack, as there wouldn't be simple boolean switches involved and an improperly cracked signal would still have audible artifacts.

I wouldn't know exactly how to implement this, but it's a quick idea that would still give users preview capability and might take crackers a bit longer than a cigarette break to foil.