anti leak system

[devo]

Requesting an AntiLeak system preferably web based. I'd like a system to generate license keys and add kill switches that basically make a license key return false instead of true when read. I'd like it look fairly pretty too if possible and use friendly so I can create separate keys for separate categories.

 

[devo]

Pm me if you can do this. My budget is fairly large.

 

[croissant222]

I will tell you why this makes zero sense, or servers would have done this already. Reverse engineering java code isn't impossible, and they could easily remove the authentication code. Hope this helps so you don't waste money

Did he actually say its for java though

anyway there are several ways to make plugins for MC and hide the source very well

 

[Dorian349]

https://www.spigotmc.org/resources/advancedlicense.20823/ + obfuscation can work.

 

[keyaza]

Did he actually say its for java though

anyway there are several ways to make plugins for MC and hide the source very well

Hide it maybe, but nothing is impossible to crack, eventually it will be cracked, so don't waste your time on anti leak systems and focus on improving your product, focus on the people that want to support you instead

 

[croissant222]

Hide it maybe, but nothing is impossible to crack, eventually it will be cracked, so don't waste your time on anti leak systems and focus on improving your product, focus on the people that want to support you instead

All of my companies products have copy protection, i cant find a single cracked version of them, obviously they can still be cracked but its unlikely someone knowledgeable enough will just choose our product to crack.

 

[devo]

I will tell you why this makes zero sense, or servers would have done this already. Reverse engineering java code isn't impossible, and they could easily remove the authentication code. Hope this helps so you don't waste money

I'd be using obfuscation along with it

 

[MaccariTA]

I'd be using obfuscation along with it

Not that obfuscation would prevent cracking. It would just increase the required skill-set but Java is still relatively easy to crack.

 

[devo]

https://www.spigotmc.org/resources/advancedlicense.20823/ + obfuscation can work.

ill try this. thank you [DOUBLEPOST=1567868976][/DOUBLEPOST]

Not that obfuscation would prevent cracking. It would just increase the required skill-set but Java is still relatively easy to crack.

true but apparently theres no deobfuscators for the one that i use

 

[croissant222]

If you want JVM but dont want easy decomp why even use java?

 

[MaccariTA]

ill try this. thank you [DOUBLEPOST=1567868976][/DOUBLEPOST]
true but apparently theres no deobfuscators for the one that i use

Let's start with the fact that there are no public deobfuscators. There are probably more than one private ones.
On top of that, add the fact that in order to crack your anti-leak scheme, you don't need to deobfuscate the whole code. The only thing you need is to find that one sweet spot (method / class) and handle that.

In general, anti-leak systems are a bad idea especially when it comes to Java.

 

[devo]

Let's start with the fact that there are no public deobfuscators. There are probably more than one private ones.
On top of that, add the fact that in order to crack your anti-leak scheme, you don't need to deobfuscate the whole code. The only thing you need is to find that one sweet spot (method / class) and handle that.

In general, anti-leak systems are a bad idea especially when it comes to Java.

i usuaully use the crashers/code hiders, not sure if that changes anything

 

[MaccariTA]

i usuaully use the crashers/code hiders, not sure if that changes anything

These are good against decompilers, but decompilers are already kind of useless when you obfuscate.
Still, a decent reverse engineer can get the bytecode and alter it appropriately.

 

[croissant222]

These are good against decompilers, but decompilers are already kind of useless when you obfuscate.
Still, a decent reverse engineer can get the bytecode and alter it appropriately.

You can get it to a level where i doubt anyone but the top reverse engineers will be able to bypass it.

 

[devo]

These are good against decompilers, but decompilers are already kind of useless when you obfuscate.
Still, a decent reverse engineer can get the bytecode and alter it appropriately.

You can get it to a level where i doubt anyone but the top reverse engineers will be able to bypass it.

i bet the chances are very low right? i'd rather sell 10-15 copies and have it get leaked instead of after 1 purchase

 

[croissant222]

i bet the chances are very low right? i'd rather sell 10-15 copies and have it get leaked instead of after 1 purchase

The fact is most people in the MC community are idiots, especially those who are leaking software, i wouldnt be suprised if it never got leaked if you do things properly

 

[devo]

The fact is most people in the MC community are idiots, especially those who are leaking software, i wouldnt be suprised if it never got leaked if you do things properly

I'm not sure if you know what Doge was, it was an anticheat a couple years ago that had a very good antileak. It only got leaked after they stopped making updates, but the plugin never got decompiled

 

[croissant222]

I'm not sure if you know what Doge was, it was an anticheat a couple years ago that had a very good antileak. It only got leaked after they stopped making updates, but the plugin never got decompiled

If they do some naive GET request to a server with the license key then yeah it should be easy to bypass the anti leak without ever decompilling it, there are many ways to prove that the response you get is indeed from the right place.

 

[MaccariTA]

You can get it to a level where i doubt anyone but the top reverse engineers will be able to bypass it.

i bet the chances are very low right? i'd rather sell 10-15 copies and have it get leaked instead of after 1 purchase

You can, but it would definitely not be worth it.
You will have to invest a lot of time and effort (possibly money as well) in order to get to this level, and still - your plugin will be leaked eventually. I rather put a minimal level of obfuscation/antileak, with no negative performance at all whatsoever and prevent the typical customer from sending it to a friend (because this is most of the customers).