To protect my code

Question

1 个投票

Dear Sirs,

I built an executable file without GUI because I can not find Italian documentation and now I would like to protect my software. I used pcode and deploytool with this order but I would like:

1.to write the password into windows command prompt too (In this time I use logindlg but I don’t like it very much)

http://www.mathworks.com/matlabcentral/fileexchange/8499

2.to create an executable file that work on one computer only too (I would like to use a code that to read IP of my pc)

Are they possible?

Thanks M. Peruzzo

0 个评论
显示 -2更早的评论隐藏 -2更早的评论

请先登录，再进行评论。

请先登录，再回答此问题。

Follow Question

Answer 1

Jan 2012-9-24

编辑：Jan 2012-9-25

1 个投票

While it is easy to create a password input dialog in a few lines, restricting the usage to a single computer is actually impossible, when you want a serious protection level. On one hand the TCP/IP can change, on the other hand it is not trivial to obtain it in a trustworthy way. Usually the MAC-address of the network card is used, but this can be modified by a user also. Finally a user can install your program in a virtual machine, such that running it on several real computers is trivial also.

I suggest to read http://undocumentedmatlab.com/blog/unique-computer-id/. Finally it is more helpful to let a customer sign a non-disclosure agreement and ship the program as source code. All big software manufacturers have been victims of pirated software, therefore I do not think that a reliable copy-protection is possible except for the cruel online activation.

[EDITED] Password dialogs from the FileExchange:

I expect that these programs contain enough example code. When you want to solve a standard problem, searching in the FileExchange is a good idea.

5 个评论
显示 3更早的评论隐藏 3更早的评论

Jan 2012-9-26

编辑：Jan 2012-9-26

Yes, Mario, I can try to formulate it in a different way: Storing the correct password in clear text inside the function allows to reveal the seceret easily. Therefore a hash value of the password is stored and compared with the hash of the password typed in by the user. But passwords have usually 6 characters, to be exact, they contain the characters '1' to '6' in sorted order. Therefore it is very cheap to use a lookup table to search in your program for the hash-values of the most frequently used 1e6 passwords. Tools, which perform this automatically, can be downloaded freely from the net. To avoid such attacks, the hash value is not calculated directly, but a so called "salt" is added by the function, which checks the password, e.g. 'a98D8szd*=)+&R'. Now the user types in the dull '123456', but the hash is created for 'a98D8szd*=)+&R123456'. Although the hash must be store in clear text, this increases the costs of a brute force attack or the create of a lookuptable dramatically. As mentioned already, this method is explained exhaustively in WikiPedia - simply ask Google: https://www.google.de/search?q=Wiki+salted+hash. This was meant by "WikiPedia knows the details."

But the corresponding WikiPedia articles contain a meta-message: Creating secure login procedures is an extremly complicated task. Even international credit card companies repeatedly fail to implement this reliably.

Mario 2012-9-26

编辑：Mario 2012-9-26

在 MATLAB Online 中打开

I understand you, thanks for your help. Perhaps I find a solution but I still have a problem: I would like to delete the figure, is it possible?

.m

 function pw=prova  
  callstr = 'set(gcbf,''Userdata'',double(get(gcbf,''Currentcharacter''))) ; uiresume ' ;
  h = figure(...
      'keypressfcn',callstr, ...
      'windowstyle','modal',...
      'position',[-10000000000 -100000000000 1 1],...
      'userdata','timeout') ;
  k=1;
  while get(h,'Userdata')~=13
      uiwait;
      fprintf('*');
      pw(k) = char(get(h,'userdata')) ;  
      k=k+1;
  end
  fprintf('\n');
  pw=pw(1:end-1);
  delete(h) ;

programma.m

disp('Digitare la password di autenticazione:');
p=prova;
if strcmp(p , '100') == 0
    return
end
A=input('A? ');
B=input('B? ');
C=A+B;
disp('Somma: ');
C

请先登录，再进行评论。

Answer 2

Mario 2012-9-25

0 个投票

I am agree about your consideration but I would like to protect however my software from inexperienced average user, can you help me about that? I'll settle for a bland protection! I have two problems that I reported in previous message.

2 个评论
显示无隐藏无

Jan 2012-9-25

Did Yair's blog help you to obtain a kind of machine-IP? What is the problem for the password input dialog?

Mario 2012-9-25

编辑：Mario 2012-9-25

I would want to write the password into command prompt of windows.

http://www.2shared.com/photo/qz_ZCLPw/secondoproblema.html

请先登录，再进行评论。

Answer 3

Mario 2012-9-25

0 个投票

I read your page about “Unique computer ID” and I found it very interesting. Thanks very much! :) My second problem is to write the password into command prompt of Windows. Watch here:

http://www.2shared.com/photo/JWkD54Zn/secondoproblema.html

2 个评论
显示无隐藏无

Jan 2012-9-25

编辑：Jan 2012-9-25

Please post comments as comments and not in the section for answers.

See [EDITED] in my answer above.

Mario 2012-9-25

Ok, I am sorry. I hope to undersand you, I am not so expert with English...

请先登录，再进行评论。

To protect my code

0 个评论
显示 -2更早的评论隐藏 -2更早的评论

采纳的回答

5 个评论
显示 3更早的评论隐藏 3更早的评论

更多回答（2 个）

2 个评论
显示无隐藏无

2 个评论
显示无隐藏无

类别

标签

Community Treasure Hunt

To protect my code

0 个评论 显示 -2更早的评论 隐藏 -2更早的评论

采纳的回答

5 个评论 显示 3更早的评论 隐藏 3更早的评论

更多回答（2 个）

2 个评论 显示 无 隐藏 无

2 个评论 显示 无 隐藏 无

类别

标签

另请参阅

Community Treasure Hunt

0 个评论
显示 -2更早的评论隐藏 -2更早的评论

5 个评论
显示 3更早的评论隐藏 3更早的评论

2 个评论
显示无隐藏无

2 个评论
显示无隐藏无