eRistocracy I have a general question. Not about Starling, but IPA and APK files. Is it easy to hack our classes and use them? I bet there are plenty of cracks for SWF files. Can we somehow encode our work?
danieldourado_2 You can't protect your code from people trying to see it. You can only make it more dificult for someone to steal it. There is always a way to get into your code and your assets. The best you can do to protect your code, is to scramble it. This way people will still be able to see your code, but will hardly understand it. http://www.kindi.com/actionscript-obfuscator.php
eRistocracy I did that only once before 😉 What is a best practice for that? Renaming all packages, classes and vars? I can imagine it is enough, because I did that before, but it takes lots of time... anyway... it is good protection 😉
Artemix You dont need to do it manually, there are softwares that take your variable, let say, _car, and transform it into: ffgj8_00900ppl. If you game/s get popular enough, don't doubt it, some chinese will use your code no matter how obfuscated it is :p.
radarek Hm, AFAIK compiled .ipa (production release) doesn't include .swf code (ipa is native compiled code) so there is no way to retrieve .swf (and later decompile it to as3 etc.) code. Could someone confirm that?
eRistocracy So... IPA is safe... and what about Android? There is SWF file inside, which can be hacked. Is it possible to encrypt this SWF and put it back to APK?
sHTiF Nothing is safe, people have this weird thinking that C/C++ or Java can't be decompiled, it can and easily. Anything can be decompiled. The safest is to offload logic to server if possible. BTW best swf obfuscator is by far secureSWF no other even comes close. The new 4.0 version which is still beta will even optimize your SWF
danieldourado_2 IPA is the LESS safe I have ever seen. it is just a zip with .ipa extension. You can decompress it using WinZip and get things you want inside it.
sHTiF secureSWF 4 is able to build APK/IPAs as far as I know. But beware the beta has still a lot of issues especially negatively affecting performance up to crazy amounts. :/ danieldourado_2 apk is a zip file as well 🙂
joshtynjala IPA is the LESS safe As radarek pointed out, an IPA file produced by AIR doesn't contain a SWF with ActionScript. The ActionScript gets compiled to native code.
jlu We have been using SecureSWF with ant for a couple of years, building ipa/apk/win/mac apps is always just one command away 🙂 Jeremy.
skol @radek & all, I think you can. Rename .ipa to .zip. Extract, show contents. Theres app .swf (around 10% of native app size) and native app. So I'd assume .swf doesn't actually contain main app code.
rickms it is just a zip with .ipa extension. You can decompress it using WinZip and get things you want inside it. So is a .apk, btw.
esdebon I have my ipa files compiled with AIR 4.0, but when I change the extension to zip I can see the swf file and uncompile it, maybe te problem happens beacause I using Flash to compile it. Compiling in the terminal is a solution to eliminate the swf from my ipa file? Why flash need include the swf file?
joshtynjala A SWF file contains more than code. AIR needs that other stuff, even if it compiles the ActionScript to native code. You should not try to remove the SWF file from the IPA.