Sorry your browser is not supported!

You are using an outdated browser that does not support modern web technologies, in order to use this site please update to a new browser.

Browsers supported include Chrome, FireFox, Safari, Opera, Internet Explorer 10+ or Microsoft Edge.

AppGameKit/AppGameKit Studio Showcase / Asset Protection possibility

Author
Message
Bengismo
6
Years of Service
User Offline
Joined: 20th Nov 2017
Location: Yorkshire, England
Posted: 4th Jul 2020 22:56 Edited at: 10th Jul 2020 15:31
Link
Media encryption for AGK:

This simplified version i came up with handles everything silently behind the scenes. All you have to do is put any of the files in your media directory into a password protected ZIP or .dat file. All the media files can be loaded directly from this file without being exposed on the drive (They aren't temporarily unpacked) - they are loaded directly from the .dat file into AGK. The file extension used can actually be anything you want it to be.

In this solution - Whenever you call ANY of AGK's load functions, the file you are after is first looked for inside the datafile and it will unpack it with the password before looking in the normal places (Write folder/read folder). This means you can still read from normal unprotected files as well if you wanted. All file types and load functions are supported with the exception of video files so far as I havent got round to that yet.

You can have multiple dat files (say...one for each level?) and specify which one to load from or select none at all. NO additional libraries are needed and its still teir 1 code but with ONE extra command that specifies the dat file to load from.

Its really simple and works quick. It can be applied to finished projects with little or no changes.

The sample zip contains a DEMO which is just an exe and a data file....Thats ALL....if you run it it loads up a ton of resources as a demo.

http://s000.tinyupload.com/?file_id=36717364772643172450



If this turns out to be something TGC and users thinks is a good idea I can upload it to github...
Back to top
Profile PM
Virtual Nomad
Moderator
18
Years of Service
User Offline
Joined: 14th Dec 2005
Location: SF Bay Area, USA
Posted: 4th Jul 2020 23:52
Link
Quote: "If this turns out to be something TGC and users thinks is a good idea"

it's been a good idea for a long, long time thanks, Bengismo!

and, thanks for the BOOM in your demo. i was able to play along with the music = added bonus!
My Itch.io Home.
Back to top
Profile PM Website
Hubert BAYRE
6
Years of Service
User Offline
Joined: 21st Oct 2017
Location: France
Posted: 5th Jul 2020 04:11
Link
Amazing, you should contact TGC about this.
Back to top
Profile PM
ando
4
Years of Service
User Offline
Joined: 21st Feb 2020
Location: Australia
Posted: 5th Jul 2020 04:19
Link
+1 Very handy.
Never play leap frog with a unicorn.
Back to top
Profile PM
Amalien
4
Years of Service
User Offline
Joined: 30th Nov 2019
Location: Somewhere in outer space.
Posted: 5th Jul 2020 04:23
Link
+1 that's a great idea, imo media protection is way up there on the list of "kinda very important"
Back to top
Profile PM
haliop787
4
Years of Service
User Offline
Joined: 22nd Mar 2020
Playing: With reality.
Posted: 5th Jul 2020 06:45 Edited at: 5th Jul 2020 06:48
Link
Thabk you! Checking this soon.

P.s

Now we just need to kill Bengismo he is the only one with free passage to our Assets.

What would you like for your last meal? Maybe a beer Icecream?

Benisgmo you are a

I recommend Begismo for a "Life Saver Badget"

And offer him the Purplish Thanos Fruit Heart Medal. As Bengismo.probably saved our assets (all of them execpt videos)
Nadav "Haliop" Rosenberg
Lets make the world great forever.
Back to top
Profile PM
Xaron
9
Years of Service
User Offline
Joined: 3rd May 2014
Location: Germany
Posted: 5th Jul 2020 07:33
Link
Nice! Even though it won't stop anyone from ripping your assets using the right tools.
Back to top
Profile PM Website
Bengismo
6
Years of Service
User Offline
Joined: 20th Nov 2017
Location: Yorkshire, England
Posted: 5th Jul 2020 10:32
Link
The idea is to make it harder for people to rip assets and not to leave assets unprotected on the disc. Its how most distributions are made.

Even if someone gave me their data file i still cant open it without their password. Thats the whole point - it becomes unique to you.
Back to top
Profile PM
haliop787
4
Years of Service
User Offline
Joined: 22nd Mar 2020
Playing: With reality.
Posted: 5th Jul 2020 11:00
Link
Give this man A MEDAL !
Nadav "Haliop" Rosenberg
Lets make the world great forever.
Back to top
Profile PM
Kevin Picone
21
Years of Service
User Offline
Joined: 27th Aug 2002
Location: Australia
Posted: 5th Jul 2020 12:50 Edited at: 5th Jul 2020 12:54
Link
This kind of thing can work, but it's not a great idea to leave the password agk#251&$lllio89 as raw string.



PlayBASIC To HTML5/WEB - Convert PlayBASIC To Machine Code

Attachments

Login to view attachments
Back to top
Profile PM Website
Bengismo
6
Years of Service
User Offline
Joined: 20th Nov 2017
Location: Yorkshire, England
Posted: 5th Jul 2020 12:55 Edited at: 5th Jul 2020 13:46
Link
Yes, but ive intentionally done that...as there's no point in hiding it in a demo. All those assets are freely available so If i posted the original project they would be given out anyway.

Ive a single function that encrypts the password meaning that its not openly visible in the bytecode... I just didnt bother with it in this case of a demo.


EDIT:
Ive re-uploaded the original project but this time with the password encrypted in the bytecode file rather than openly readable....also the bytecode is not in the exe anymore just so you can easily get at it if you wanted to see if you could find the password. The password is in there but not in readable form and you would need to reverse it to get it.

Also...if you wanted to, anyone can put the bytecode into the exe in my version...just get a resource editor (resource hacker etc..) and add the byte code file (bytecode.byc) as RC_DATA called "BYTECODE" to the exe... and it works

The bytecode can be in the media folder or packed with the exe file - your choice. im not sure if I made that clear above.
Back to top
Profile PM
Xaron
9
Years of Service
User Offline
Joined: 3rd May 2014
Location: Germany
Posted: 5th Jul 2020 14:13
Link
Quote: "The idea is to make it harder for people to rip assets and not to leave assets unprotected on the disc. Its how most distributions are made.

Even if someone gave me their data file i still cant open it without their password. Thats the whole point - it becomes unique to you."


I get the idea and appreciate your work. Just want to say that the common tools out there don't care about what's on disc but just intercept the stuff on the way to the graphics card.
Back to top
Profile PM Website
Bengismo
6
Years of Service
User Offline
Joined: 20th Nov 2017
Location: Yorkshire, England
Posted: 5th Jul 2020 14:15 Edited at: 5th Jul 2020 14:19
Link
Of course, its fairly easy to get any graphics straight off the graphics card while it is running, intercepting opengl glTexture() commands is very easy ....same with directx ....doesn't matter how well it is protected on disk. This can be done for ANY pc AAA title if wanted. Same with memory sniffers to get sound resources etc...

As i said, its still just a case of not making it easy to do straight from files at least. it just looks unprofessional to have all your media in separate files in the media folder.
Back to top
Profile PM
Xaron
9
Years of Service
User Offline
Joined: 3rd May 2014
Location: Germany
Posted: 5th Jul 2020 14:17
Link
And that is really great! So thanks for that.
Back to top
Profile PM Website
haliop787
4
Years of Service
User Offline
Joined: 22nd Mar 2020
Playing: With reality.
Posted: 5th Jul 2020 15:03
Link
Have not checked it yet it will work on Android right?

So the idea is that it packed everything into one file then it read from that file and not open it on disc right ?

If so, i could potentially increase its securtiy.
Nadav "Haliop" Rosenberg
Lets make the world great forever.
Back to top
Profile PM
Bengismo
6
Years of Service
User Offline
Joined: 20th Nov 2017
Location: Yorkshire, England
Posted: 5th Jul 2020 15:14 Edited at: 5th Jul 2020 15:15
Link
On android, everything IS already placed in one file.... The .apk file holds everything including the exe, classes, runtime and resources etc...and it is technically a zip file but can be opened too.
Back to top
Profile PM
haliop787
4
Years of Service
User Offline
Joined: 22nd Mar 2020
Playing: With reality.
Posted: 5th Jul 2020 15:52
Link
What i am asking is, An APK is uncompressed when installed on an android. Right? Am i wrong?
So if it is uncompressed the zip file you present is as is right ? Then the bytecode interpreter is reading stright from that zip file.

Right ?
If so i can make a total headec to anyone who will trt to open it. Or even fetch the data stright from the gpu.
Nadav "Haliop" Rosenberg
Lets make the world great forever.
Back to top
Profile PM
haliop787
4
Years of Service
User Offline
Joined: 22nd Mar 2020
Playing: With reality.
Posted: 5th Jul 2020 15:55
Link
P.s

First thing i learned about the cyberspace is that if you have something password protected you should always create layers.

Meaning, you have one passworded zip file inside it you have about 2 more password protected and then you have another 10 protected zip files for the actuall stuff.

Thats just the first theory when it comes to layers.

Think about ti, if you have 3 different passwords to open your phone, it should be harder to crack not impossible just harder.
Nadav "Haliop" Rosenberg
Lets make the world great forever.
Back to top
Profile PM
Virtual Nomad
Moderator
18
Years of Service
User Offline
Joined: 14th Dec 2005
Location: SF Bay Area, USA
Posted: 5th Jul 2020 21:00
Link
The only question i have is how fast does it unpack/load media compared to reading from raw files or extracting from zip, then loading large amounts of media? Otherwise, this should do well (while no one should expect it to be fully secure).
My Itch.io Home.
Back to top
Profile PM Website
Bengismo
6
Years of Service
User Offline
Joined: 20th Nov 2017
Location: Yorkshire, England
Posted: 5th Jul 2020 22:27 Edited at: 5th Jul 2020 22:43
Link
Well I have the comparison of loading direct from Password protected zip vs from files in the media folder...



about 8% slower to decrypt and unpack from a zip over a range of file various file types. (weirdly - some were quicker direct from a data file? - id have to repeat this more than 3 times to get accurate figures)


The ExtractZip() function in AppGameKit takes 0.367 Secs in my example case to extract the whole file so extracting all the files to disk then loading one by one would make the whole thing slowest by approx 65% - plus that doesnt include deleting these files after loading them.

From individual media: 100%
From password Zip: 108%
Extract all then load: 165%
Back to top
Profile PM
Back to top

Login to post a reply

Server time is: 2024-04-20 13:31:47
Your offset time is: 2024-04-20 13:31:47