Lost Password?

Go Back   CodeCall Programming Forum > Software Development > Software Security

Software Security Information to inform users on how to protect their personal software / applications. Learn how to protect against software crackers.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 11-01-2007, 02:48 PM
Chan Chan is offline
Programming Professional
 
Join Date: Jun 2006
Posts: 204
Rep Power: 9
Chan is on a distinguished road
Default NuLLeD?

If one of your scripts has been NuLLeD what does that mean? i just found something I had sold on a site and it said it was nulled. The thing is, it is a free script.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

Sponsored Links
  #2 (permalink)  
Old 11-02-2007, 12:45 PM
John's Avatar   
John John is online now
Co-Administrator
 
Join Date: Jul 2006
Age: 19
Posts: 2,634
Last Blog:
Passwords
Rep Power: 20
John has much to be proud ofJohn has much to be proud ofJohn has much to be proud ofJohn has much to be proud ofJohn has much to be proud ofJohn has much to be proud ofJohn has much to be proud ofJohn has much to be proud of
Send a message via AIM to John
Default

Generally "Nulled" scripts are programs like vBulletin, WHMAP [crap software - never buy it] that require licenses to work. However, once the software is nulled, it does not require a license to work, and is "hacked."

Some times if a script is encoded with the Zend Guard - people can "dezend" it, and it is also nulled. To my knowledge, there is no need to null opensource software - because there is no encryption / licenses needed.
__________________
CodeCall Blog | CodeCall Wiki | Shareware | Linux Forum | My Blog
Chat with other CodeCall members on IRC; connect to irc.codecall.net and join #codecall
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 11-02-2007, 12:58 PM
Jordan's Avatar   
Jordan Jordan is offline
Administrator
 
Join Date: Nov 2005
Location: Hendersonville, NC
Age: 26
Posts: 5,857
Last Blog:
Performance or Maintai...
Rep Power: 20
Jordan has much to be proud ofJordan has much to be proud ofJordan has much to be proud ofJordan has much to be proud ofJordan has much to be proud ofJordan has much to be proud ofJordan has much to be proud ofJordan has much to be proud of
Send a message via ICQ to Jordan Send a message via AIM to Jordan Send a message via MSN to Jordan
Default

One of the most important aspects of Nulled software is that the "PhoneHome" mechanisms are removed. The Phone Home are actually bits of code that send data back to the creator of that software which can then inform them if you are using the software illegally.

As Sidewinder said, there really is no point to Null a free software.
__________________
CodeCall Blog | CodeCall Wiki | Shareware Site | Linux Forum | Write a Blog
Don't hesitate to ask any questions that you have! Check out our ASCII Calculator!
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 11-07-2007, 08:37 PM
Kaabi's Avatar   
Kaabi Kaabi is offline
Programming God
 
Join Date: Jul 2006
Posts: 884
Rep Power: 13
Kaabi is on a distinguished road
Default

Nulling I understand, and I understand why you "don't" null free software. That phone home software is interesting, though, how come more developers don't use it? It seems like they could find out who is illegally using their software and shut it down on them or something.
__________________
Cheap Airsoft Guns

If you are looking for high-quality, yet cheap, airsoft guns, then check out MrAirsoft.com
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 11-08-2007, 06:42 AM
Jordan's Avatar   
Jordan Jordan is offline
Administrator
 
Join Date: Nov 2005
Location: Hendersonville, NC
Age: 26
Posts: 5,857
Last Blog:
Performance or Maintai...
Rep Power: 20
Jordan has much to be proud ofJordan has much to be proud ofJordan has much to be proud ofJordan has much to be proud ofJordan has much to be proud ofJordan has much to be proud ofJordan has much to be proud ofJordan has much to be proud of
Send a message via ICQ to Jordan Send a message via AIM to Jordan Send a message via MSN to Jordan
Default

It only works well for applications that are online based and many PHP/ASP scripts do have phone-home functions in them. For desktop applications this isn't so practical as the user many not have internet or may have a slow internet. The transfer of information from a desktop client to a public domain on the internet without informing the user is also not considered great practice and is sometimes considered malicious.
__________________
CodeCall Blog | CodeCall Wiki | Shareware Site | Linux Forum | Write a Blog
Don't hesitate to ask any questions that you have! Check out our ASCII Calculator!
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

Sponsored Links
  #6 (permalink)  
Old 11-08-2007, 08:27 AM
John's Avatar   
John John is online now
Co-Administrator
 
Join Date: Jul 2006
Age: 19
Posts: 2,634
Last Blog:
Passwords
Rep Power: 20
John has much to be proud ofJohn has much to be proud ofJohn has much to be proud ofJohn has much to be proud ofJohn has much to be proud ofJohn has much to be proud ofJohn has much to be proud ofJohn has much to be proud of
Send a message via AIM to John
Default

Quote:
Originally Posted by Jordan View Post
It only works well for applications that are online based and many PHP/ASP scripts do have phone-home functions in them.
And for this to work, of course, the PHP/ASP would need to be encoded [using Zend or ionCube] so the user cant remove the "phone-home" software, and such encrypting software is very expensive [close to $1000] which is why most developers don't use it.

While there are online services that encrypt files for you on a pay-per-file basis, encoding a single file will let the user know "this is the file that contains the 'phone-home' software." So he sends it to a "dezender" site and for $5 he gets the file decoded - then he can go on his merry way nulling the software.
__________________
CodeCall Blog | CodeCall Wiki | Shareware | Linux Forum | My Blog
Chat with other CodeCall members on IRC; connect to irc.codecall.net and join #codecall
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #7 (permalink)  
Old 11-09-2007, 12:52 PM
TkTech TkTech is offline
 
Join Date: Jun 2006
Posts: 893
Last Blog:
Having trouble with yo...
Rep Power: 20
TkTech is on a distinguished road
Send a message via MSN to TkTech
Default

"a public domain on the internet without informing the user is also not considered great practice and is sometimes considered malicious."

Illegal in the US to send personal data gathered in a publicly available application without consent. Also, for desktop applications in todays world, opening up a port will almost instantly bring up a firewall window asking you to ignore it or allow it. All a user would have to say is "Block."
__________________
CodeCall Blog | CodeCall Wiki | Shareware | Linux Forum
Chat with other CodeCall members on IRC; connect to irc.codecall.net and join #codecall
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #8 (permalink)  
Old 11-13-2007, 05:33 PM
TcM's Avatar   
TcM TcM is offline
Moderator
 
Join Date: Aug 2006
Location: In a technologic world :p
Posts: 7,223
Rep Power: 66
TcM has much to be proud ofTcM has much to be proud ofTcM has much to be proud ofTcM has much to be proud ofTcM has much to be proud ofTcM has much to be proud ofTcM has much to be proud ofTcM has much to be proud of
Default

Yes it is not practical for desktop applications, but I bet that the 'block' could be done even from the server side, some free webhosts would not let your website communicate with other websites! (They disable some php functions) and that would block the phone-home from sending info to the creator, wouldn't it?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -5. The time now is 03:56 PM.

Contest Stats

John ........ 223.00000
dargueta ........ 168.00000
Xav ........ 164.00000
gaylo565 ........ 18.00000
WingedPanther ........ 15.00000
|pH| ........ 15.00000
Johnnyboy ........ 3.00000
navghost ........ 1.00000

Contest Rules

CodeCall Goal

Goal: 100,000 Posts
Complete: 65%

Ads