Software Protection!!! What license system you use?

Hello bhw family

To all the programmers out there!What software or website services you use to create licenses for your bots?
Im searching around the net but i only find super high price services!
Maybe this is the price for a license system but i like to get more infos from the Pros here

I use a mix of custom built in-house system to handle licensing and off the shelf obfuscation software.

Well I agree with chris except I do my own obfuscation.

I use this: softwarekey.com
The best EVER protection system for your software. I love it!

I obfuscate myself the important stuff... then run it all through an obfuscator.. and then use any good online verification/activation to verify it's legit... thing is nothing is 100% safe.. but if your app becomes so popular that you get people cracking it.. then you're probably making enough money with it already

or you could host your software on your end, and give client access through a web interface... that is the safest way afaik

I use a custom solution that mixes both web, hardware, along with obfuscation.

I don't believe in paying for something that I can do myself.

whats the best protection though.. reading a lot of the hacking forums they can all be de-obfuscated and de-compiled..

Anyone know which one if the hardest and the most pain in the arse to crack?

I use an homemade system with licence key, with which I can disable a licence from internet.

If someone is interested I can build a crackme to play with

Beny

Thanks for sharing valuable information. Numerous tools to protect of system software. You must install antivirus for system protection.

Creating one for Yourself is what i recommend

as it may be even better , Just try to find a method

Operating under the knowledge of KNOWING that your program can/will be deobfuscated and decompiled.

It helps you better make a licensing system.

For example:


Instead of just 1 active license check, add several.

Sending your license to a website..are you sending it in plain text? encrypt it.

Is your license server(aka website) returning a simple string like 'good'? worried about people changing their host file and allowing for access anytime? maybe try making the program verify the websites IP.

I personally ALWAYS obfuscate, compile... then decompile and deobfuscate and see if i can't "figure it out".


Maybe try changing your password string to username, and your person2spam as their username.

Just because it CAN be obfuscated, and it CAN be decompiled, doesn't necessarily mean that its easily figured out once they get it.

The people you really have to worry about are those who know what they're doing, and desperately want it.

I've had software that HEAVILY relies on a web server for its function. Meaning, it got some of its functions/code values from a web server. My web server then could establish if the program sending the request is correct.

I also implement checksums, as, if they modify the code, the checksum changes.

Get creative, you can do it!

Cynikal said:

Instead of just 1 active license check, add several.

Sending your license to a website..are you sending it in plain text? encrypt it.

Is your license server(aka website) returning a simple string like 'good'? worried about people changing their host file and allowing for access anytime? maybe try making the program verify the websites IP.

I personally ALWAYS obfuscate, compile... then decompile and deobfuscate and see if i can't "figure it out".

Maybe try changing your password string to username, and your person2spam as their username.

Just because it CAN be obfuscated, and it CAN be decompiled, doesn't necessarily mean that its easily figured out once they get it.

The people you really have to worry about are those who know what they're doing, and desperately want it.

I also implement checksums, as, if they modify the code, the checksum changes.

Click to expand...

And then someone launches IDA PRO and bypasses all that in a few hours

I've had software that HEAVILY relies on a web server for its function. Meaning, it got some of its functions/code values from a web server. My web server then could establish if the program sending the request is correct.

Click to expand...

This is a practical and good strategy.

Get creative, you can do it!

Click to expand...

Not really. Unless you are doing this for the learning experience, you/me can't compare with the experience in software protection that the coders of professional systems have, so our homebrew attempts are easy to defeat by a good reverser.