Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   IDA watermarking(s) and possibility of license file generation... (https://forum.exetools.com/showthread.php?t=12156)

ketan 03-20-2009 22:17

IDA watermarking(s) and possibility of license file generation...
 
As of IDA latest public release (ie. v5.4.0.921),
following file+folders are watermarked...

/ida.key
/ida.wll
/loaders/*.*
/procs/*.*

Above info is gathered by looking at ida.key date.

Moreover no file is packed or obfuscated in any way,
this will allow to analyze IDA itself.

The registered user name is tagged in MS-DOS STUB portion of the watermarked executables.

So there are lot of possibilities to make a cracked version of IDA.

Key Pointers
=========
- Possibility to generate legitimate ida.key files,
// 'coz recently we seen awesome winrar solution :)

- Compare 2 identical version/edition of IDA to findout exect differences

ahmadmansoor 03-21-2009 03:52

My friend ...the problem is to get 2 identical version/edition of IDA...
how would like to share his one ?????!!!!!!!!

tofu-sensei 03-21-2009 04:31

Quote:

Originally Posted by ketan (Post 62779)
- Possibility to generate legitimate ida.key files,
// 'coz recently we seen awesome winrar solution :)

now that's a non sequitur ;)

wtbw 03-22-2009 09:02

There's no reason that comparing two would be enough... could be some things common to any two different copies but not any others.

Back when versions were being leaked and people tried to patch out their IDs Pierre would quote that 98% of the watermarks were left or so. Ilfak's not stupid, I'm sure he's come up with something quite crafty and not easily resolveable to an unidentifiable but still functional version.

Disclaimer: Haven't looked at it in any detail. I'm a big IDA fan and paid up user so I don't want to hurt them ;-)

Shub-Nigurrath 03-22-2009 21:47

it's enough to hide the watermark in the instruction execution flow or in the data structure to create an almost impossible to un-watermark program, but there are hundred different ways to software watermark a program. Watermarking if properly done is one of the most efficient protection strategies (of course you must assume, like for IDA, that users can be threatened removing their licenses, if you catch their leaked copies on the net): it's easy to implement and doesn't complicate development, it's quite difficult to completely remove it.

rcer 03-24-2009 13:13

WTWB

you mentioned that you are a paid user of IDA Pro.
Which version do you have, and is it the standard or Pro one?

Because I tried to buy a license for IDA and the only option they offer for private persons is the a "IDA Pro Standard Base Named license"

RCER

Git 03-24-2009 21:41

I looked recently and it did not seem possible for a private person to buy any version of IDA, at least in the EU. VAT registration number is a mandatory part of the order form.

Git

sf42 03-24-2009 22:20

Quote:

Originally Posted by Git (Post 62857)
I looked recently and it did not seem possible for a private person to buy any version of IDA, at least in the EU. VAT registration number is a mandatory part of the order form.

Git

Creating a company and receiving a VAT number costs 65€ where I live.

wtbw 03-25-2009 07:41

rcer: I have an Advanced named license. I bought a Standard licence as a student, and upgraded to Advanced while it was still Datarescue.

Git: In the past, I've just left that blank.

Generally they're quite helpful if you e-mail them :-)

(Actually, I think I expired recently, I should probably upgrade...)

rcer 03-25-2009 19:50

Git,

VAT number is not mandatory, if you don't have one, they will still sell you IDA, but charge you an additional 18.5% VAT.

regards:D

sf42 03-26-2009 01:33

Ok, so the only thing left is to pool money and buy IDA Advanced license from Datarescue :D If for example 50 members will join the cost per person will be miniscule...

Sergey Nameless 03-27-2009 06:39

ru-board tried it before. Unfortunately people have money problems ;-)

rcer 03-27-2009 13:37

And also don't forget that the one who buys IDA and then uploads it to the forum will be blacklisted by Hexrays for the rest of his life
:D

LaBBa 03-30-2009 07:57

oh no! ;) just don't blacklist me :D


All times are GMT +8. The time now is 18:54.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX