Re: New version support Flash 9 and AS3?

["Oliver.Kilb" <director@xxxxxxxxxxxxxx>]

necromanthus schrieb:
>  2) there're "official" tools (aka Xtras made by Valentin and other shockwave 
> "developers") designed to steal the DCR assets.

Well, follow the path I mentioned before: Your .dcr isn't really secured 
(or I should rather say "hardened")! Basically you just embedded your 
.swf into a .dcr and thought that's enough, but it isn't. Like Mark said 
before, assets aren't secured by design.

But you can do more about that. Think about checking something like the 
moviepath and how you could destroy assets when it's not a valid one for 
starters. Or what to do if you run offline instead of in a browser. That 
could give you some ideas to work with.

I'm sure you can do better! Give it a try - send me a mail if you need 
another test. But to be honest: I don't specialize in these things, so 
just that I can't break your security doesn't mean it's as secure as it 
could be...

If you're relying on your assets to be safe and if there is something 
like a market that feels the same - file a feature request that 
.dcr-Assets should be locked/hidden or binded to a given URL when 
published...