Anyone else using Keylok?

[rory]

Its really cool .. if you want me to post my own review on it let me know.
I just added it to one of my apps.

Also, anyone else using it ..?
http://www.keylok.com/index.html

Rory

[Al42]

Used something similar (or maybe even the same) years ago. The weak link is still the one line of code that does a jump if the code read in is correct. If it's changed to an unconditional jump, the protection is bypassed.

[rory]

A jump in their code or ours? I dont use any jumps in my code for it.
It just verifies the company specific validation codes.

[Al42]

The code has to be something on the order of

If CodeIsValid Then
  'do something
Else
  'do something else
Endif

That generates a couple of conditional JMP instructions (or a JMP and a conditional jump), which can be changed so that the program always follows the 'If' code, and never the 'Else' code. It's a standard hacking technique.

[rory]

No its not that simple .. they have anti softice, as well as an anti debugger running, as well as other stuff, infact its not that easy to work with as you cant run the code the same way inside the IDE as compiled, or it crashes. Plus its not just one validation code, its a whole bunch of them .. various types.. also there is other security you can add to it, inside your code, or program the dongle with added features/constants .. to compute inside your code, and at various levels of the program .. sure nothing is 100% but it beats only software security, any day of the week.

But for me personally, Im not protecting a NASA program ..