Announcing secureSWF v3.5

May 27th, 2010

Thanks to your continuous feedback, we have no shortage of new features to add to secureSWF. Today, we are thrilled to present secureSWF v3.5. As all minor point releases, this is a free upgrade to existing licensees.

The new release builds on 22 months of secureSWF v3 updates (we can’t believe it has been that long) and adds for the first time the following new features:

Integration with Powerflasher FDT

FDTWouldn’t it be great to run secureSWF inside the most advanced Flash development platform? You will find a 5th download option when you download secureSWF v3.5; an FDT plugin! Copy the file into FDT plugins folder and a new secureSWF button will appear in FDT toolbar. That’s all what it takes to start running secureSWF within FDT.

Kindisoft and Powerflasher are also announcing today a new partnership to empower you to make the best out of the Flash platform. secureSWF v3.5 is just a beginning of a much closer integration along the way. We’ll be working closely with the FDT team to bring you the ability to declare obfuscation settings within your code, debug obfuscated files, export a complete auto build script with a click of a button, and much more.

Remove Debugging Information

Keeping debugging information in released Flash applications can be useful for error reporting because source code line numbers and files names where an exception has been thrown can be found in the call stack. Unfortunately, this information is also available to attackers trying to reverse-engineer your code and it also costs a lot of file size.

New options in secureSWF v3.5 will enable you to remove all debug information that you will no longer need outside a debugger, but will keep the source code line numbers. Error messages will show the obfuscated call stack trace (which you can de-obfuscate using the mapping table) with the line numbers.

Local Variables Renaming for ActionScript 3

Variables declared within the function scope in ActionScript 3 are usually compiled as registers without their specified names. But when they are not, for a number of reasons, the identifiers names are passed along the compiled code giving decompilers the ability to regenerate a very closer version on the original source code. With secureSWF v3.5, you can enable the ability to rename local variables in the few cases were they are still in the compiled code.

Control Over Randomization

Randomization is one of the most important protection mechanism for secureSWF. Proper randomization what makes it impossible to create another tool to reverse secureSWF protection. The downside is that a completely different SWF file will be generated every time you run secureSWF, which might not be favorable for testing or verification.

To solve the dilemma, we added a new checkbox in the “Protection Options” tab labeled “Randomize Results” checked by default. When unchecked, secureSWF will generate exactly the same protected SWF file. This will guarantee a consistent output for the identical files and identical configurations.

Detailed File Save Options

Ok. We get it. You want to specify a new name for each file and you want that saved in the project configuration file. secureSWF v3.5 will save the selected output option and adds a new save option that enables you to specify the new name for each file if you want to.

Official support for Adobe Flash CS5

Flash CS5With secureSWF v3.5 we officially support Adobe Flash CS5. You can now switch to CS5 with confidence that you can still rely on us to protect your work.

Want to know what others think of secureSWF, check the following very detailed reviews done recently:

Please download the new version of secureSWF and let us know what you think. We’d love to hear from you.

New Release: secureSWF v3.4 100% Goodness

October 27th, 2009

Your feedback has paid off, as we are proud to announce the availability of our new release of secureSWF. Like all point releases, the upgrade is free for all existing licensees!

secureSWF v3.4 Features:

  • Super Compression

You’ve asked and we have delivered! secureSWF can now reduce your SWF file size. In our labs, we’ve seen Flash SWF file sizes drop by 30%. This new feature can reduce the file size up to 10% by itself!

Unlike other obfuscators that just bloat the size of your SWF files, secureSWF can actually reduce your file size when using identifiers renaming, size optimization, and this new amazing feature.

This feature is available today and it’s free for all secureSWF users!

  • Complete AIR and SWC Files Support

secureSWF is proud to be the only protection and obfuscation product on the market fully supporting AIR and SWC files. What does that mean?

It means you can directly protect your whole AIR application from within secureSWF.  Say goodbye to the manual process of protecting each embedded SWF file and then fumbling to properly package the AIR application. secureSWF will automatically handle packaging and protecting your AIR application.

It also means you can now use all secureSWF’s features for SWC and AIR files too!

  • Uber-Detailed Configuration Rules

Previous versions of secureSWF enabled you to specify how your code will be obfuscated down to a single function or identifier. This is powerful, but we’ve heard from users that pinpointing individual functions and identifiers is very time consuming. Because of this, we’ve added the Rules tab.

Now, you can just tell secureSWF exactly what to do with all the code in an entire package, or a single class. Just write in the pattern and check the options you want to override. More details can be found here.

secureSWF in the Wild!

We recently found two worthy articles about Flash ActionScript theft, check them out:

Please spread the word!

More Resources:

New to secureSWF? Here is where you can get started:
http://www.kindisoft.com/secureSWF/getting-started.php

Want to know more about protecting IP in Flash apps? Check this white paper:
http://www.kindisoft.com/secureSWF/white-paper.php

Check it out:

Please try out the new release, we’re very excited about the new features and can’t wait to hear your feedback.

Demo Version:
http://www.kindisoft.com/secureSWF/ddownload.php

Professional Edition:
http://www.kindisoft.com/secureSWF/download_pro.php

Standard Edition:
http://www.kindisoft.com/secureSWF/download_standard.php

Personal-Lite Edition:
http://www.kindisoft.com/secureSWF/download_personal.php

Sponsoring Flash on the Beach 09

September 20th, 2009

fotb09 web badgeMake sure to visit our booth this year if you are attending Flash on the Beach 2009 Brighton. We’re in the middle of sponsors’ hall, so there is no way you’re going to miss us :)

Flash on the Beach is one of the few ‘must to go’ Flash conferences around. With nearly 50 of the world’s most talented speakers presenting over 3 full days and 1100 participants from over 30 countries around the world, Flash on the Beach this year will sure be the best Flash on the Beach conference yet!

Mohammed Abu Rahmeh, Rest in Peace

September 9th, 2009

Farewell Mohammed

Mohammed Abu Rahmeh, VP of Research at Kindisoft, passed away this morning after a tragic car accident that had put him in a coma on the 1st of September. Mohammed joint us in February this year to lead our research efforts at Kindisoft. He was so well respected and everyone always had such kind things to say about him. He always had such a presence that made everyone feel calm around him.

While words are only a small gesture of support, we want his family to know that his spirit has touched many people’s lives as it has ours.

You will always be in our thoughts and prayers, Mohammed. Farewell our friend.

secureSWF Now Supports Alchemy

July 17th, 2009

Now that there are a number of Alchemy projects out there, and some people are starting to use SWC libraries created using Alchemy, we’re happy to announce that secureSWF now supports Alchemy. It’s not that projects created using Alchemy need any obfuscation, Alchemy doesn’t leave much for an obfuscator to do, but Flash projects utilizing libraries created using Alchemy, such as JPEGEncoder, still do. And now you can obfuscate and protect such projects normally with secureSWF.

Besides that, we made the Advanced Code Transformation Configuration tool also available in secureSWF Standard edition due to the many requests we’ve received. And as always, the new build brings a number of bug fixes and enhancements based on the feedback that you are continuously lending us.

secureSWF v3.3: Exciting New Features

June 5th, 2009

We are very excited to announce the official release of secureSWF v3.3! The new version went through an intensive series of refactoring that enabled us to fix long standing issues.  More exciting than that, we also added new features that have been planned for a while.

New Features

secureSWF v3.3 includes the following new features:

Advanced Code Transformation Selection

Is all code created equal? We do not think so. Some parts of your code are definitely worth the overhead Control Flow Obfuscation adds and the file size increase Dynamic Code Wrapping does. But you are probably happy leaving other parts of your code less protected for the sake of better performance or smaller file size. Now with this new feature, which opens up by clicking the “Advanced” button in Protection Options tab, you can override the code transformation settings for each package, class, and even function and get surgical control over your obfuscation and protection.
Advanced Code Obfuscation Selection

Exclude 3rd-Party SWC Code

When using a third-party SWC file in your Flash project, there is a chance that it is already obfuscated. If so, the resulting SWF file will contain obfuscated code blocks that will prevent secureSWF from successfully parsing and analyzing your SWF file. To solve this issue, you can now add the SWC files that you have been using in secureSWF which will allow secureSWF to properly skip over those pre-obfuscated blocks of code.

SWC

Enhanced Control Flow Obfuscation

We’ve enhanced our Control Flow Obfuscation algorithm making it more random and much harder to trace. You will no longer see stuff as if(false) or if(true) in your obfuscated code. Instead, we are using your own variables and parameters to evaluate our branching statements. Don’t worry, this change does not affect the performance and the file size increase is still negligible.

PDF Reports

secureSWF can now generate a neat and shiny PDF report that will detail all the changes done to your code!

Easier Classes Navigation

We’ve separated Classes from Frame Labels names in ActionScript 3 projects for good. You can now browse your code without the frame label noise!  If you need them, all frame labels can still be found in nice table next to the classes.

Enhanced CLI and Ant Script Integration:

We want you to be able to do everything secureSWF can do using either a command-line interface or an Ant script.  We are working to make that happen. This version includes many enhancements and additions to the CLI interface and Ant support.

Enhanced Performance: Better Memory Usage

You will notice that it now take less time for secureSWF to process your code and, more importantly, secureSWF will consume less memory.   Stay tuned for further enhancements in the next releases.

Download secureSWF v3.3:

Kindisoft Corporate News

Because of our strong growth from customers like you, we are excited to announce Kindisoft has now opened offices in North America.  Our New Jersey and California offices will be available to answer all your customer support, sales, and corporate inquiries. Please reach us at sales.us@kindisoft.com or by phone at 609 678 0325.

secureSWF v3.3 beta

May 6th, 2009

Update : secureSWF v3.3 has been officially released.

We are very excited that v3.3 is almost ready. Today, we have finally been able to put together a build that we can share with you. v3.3 went through an intensive series of refactoring that enabled us to fix long standing issues as what @bunnyhero kindly reported and add new features that we’ve been excited about for a while.

While v3.3 is a minor release, it adds new features and enhancements that qualifies for a major release for most software vendors. The new version introduces the following:

Advanced Code Transformation Selection

Is all code created equal? We do not think so. Some parts of your code are definitely worth the overhead Control Flow Obfuscation adds and the file size increase Dynamic Code Wrapping does. But  you are probably happy leaving other parts of your code less protected for the sake of better performance or smaller file size. Now with this new feature, which opens up by clicking the “Advanced” button in Protection Options tab, you can override the code transformation settings for each function.

But the most useful thing about this is overriding the settings for code that breaks after obfuscation. For example, if you get an unbalanced stack verification error after obfuscating a file, you no longer have to turn off Control Flow Obfuscation for the entire code. You can now turn it off for the function that is causing the error which is usually at the top of the call stack trace.

Exclude 3rd-Party SWC Code

When using a third-party SWC file in your Flash project, there is a chance that it is already obfuscated. If so, the result SWF file will contain obfuscated code blocks that will prevent secureSWF from successfully parsing and analyzing your SWF file. To solve this issue, you can now add the SWC file that you have been using in secureSWF and it will skip the code blocks in your SWF files that came from it.

Enhanced Control Flow Obfuscation

We’ve enhanced our Control Flow Obfuscation algorithm making it more random and much harder to trace. You will no longer see stuff as if(false) or if(true) in your obfuscated code. Instead, we are using your own variables and parameters to evaluate our branching statements. Don’t worry, this change does not affect the performance and the file size increase is still negligible.

PDF Reports

secureSWF can now generate a nice and shiny PDF report that details all the changes it did to your code. Please note that the reports still need some polishing that we will definitely do before the official release.

Easier Classes Navigation

We’ve separated Classes from Frame Labels names in ActionScript 3 projects for good. You can now browse your code without the noise frame labels adds. All frame labels can still be found in nice table next to the classes.

Enhanced Performance

You will notice that it now take less time for secureSWF to process your code and, more importantly, will consume less memory. We still plan for even further enhancements in the next releases.

Enhanced CLI and Ant Script Integration

We want you to be able to do everything secureSWF can do using the command-line interface or an Ant script. And we are working to make that happen. This version includes many enhancements and additions to the CLI and Ant task. Please note that we haven’t updated the documentation yet. Contact our support team for a draft documentation of the CLI and Ant task new features.

Download secureSWF v3.3 beta

secureSWF Demo Version

secureSWF Professional Version (Requires Registration Information)

secureSWF Standard Version (Requires Registration Information)

secureSWF Personal Version (Requires Registration Information)

Kindisoft Sponsors Flash Gaming Summit

March 18th, 2009

We are very excited to announce that we will be co-sponsoring Flash Gaming Summit 2009 that will take place at The Solarium in downtown San Francisco on the 22nd of March. Flash Gaming Summit is a new one day conference dedicated to fostering the growth and success of the Flash games community. The conference will bring together leaders in the Flash game space to share industry insights and strategies for monetization, distribution and successful game development.

If you are going, then drop us a line if you would like to meet with us. You can also watch Flash Gaming Summit live on Sunday here.

Build 3147 Fixes a Few Minor Issues

March 12th, 2009

secureSWF v3.2.0 build 3147 is now available for all secureSWF editions. The new build fixes two issues that surfaced on some systems after releasing v3.2 last week and includes some internal enhancements that didn’t make it with the previous release.

To download the new build, simply run your copy of secureSWF now and it will notify about a new update available and then will take you to the appropriate download page.

Announcing secureSWF v3.2

March 3rd, 2009

We happily announce that secureSWF v3.2 is now available. The new version includes several bug fixes and introduces three new features.

New Features

  1. Control Over Aggressive Renaming.
    Aggressive Renaming turns identifiers names into a mix of symbols, whitespaces, and numbers that are illegal for ActionScript. While this is completely safe for the Flash Player, it causes trouble when parsing and writing XML. You can now turn aggressive renaming off for better compatibility with XML data-binding. When turned off, the new identifiers names will still be illegal for ActionScript, but fine with XML.
  2. Using ActionScript Keywords for New Identifiers Names.
    You will find another new checkbox in the Identifiers Renaming tab. When “Use ActionScript Keywords” is checked, Identifiers Renaming will use ActionScript reserved words, such as switch, case, if, while, do… etc, for 38 of the new identifiers names whither they are packages, classes, functions or variables. It will randomly select the identifiers that will be renamed to ActionScript keywords.
  3. Local Execution Prevention
    We thought you might find it useful to prevent users from running your Flash application locally while it can still run on every other domain. The new checkbox under Encrypted Domain Locking will do just that if you don’t want to lock your SWF file to your domain while still don’t want users to run it on their local machines.

Bug Fixes

We’ve done many general enhancements and fixed almost every issue that was reported to us through the Error Reporting tool. Most significant fixes are: A better layout for the Protection Options tab, we’ve fixed the issue with activating secureSWF on some localized versions of Windows, smart renaming now works for ActionScript 3 frame labels, and we now properly fill up the identifiers tables for ActionScript 2.

Please keep sending your valuable feedback.

Follow Us On Twitter

The secureSWF development team have started tweeting on how new features are being developed into secureSWF and bugs are being debugged. Follow us here.