New Website

[Jeff]

Yesterday I checked out a few of your sites and really liked them. Especially JeF4y's.

Thanks Ray  ;D  www.cbr600rr.com was a large step ahead of www.cbr600f4.com.  F4.com I started in 99 and wrote almost all of the HTML in notepad.  RR.com I have been using dreamweaver.

In my humble opinion, flash is something which is best in moderation.  A whole flash-based site can get big and slow.  Additionally there are a lot of people who refuse to load flash on their PCs, so your site would be totally useless to them.

The only other comment I'd make would be to publish your reports in HTML, PHP or something OTHER than .PDF.  .PDF sucks for web text.  It's slow as can be and makes surfing/browsing annoying.  i.e., I read your winter letter, but since it was in .pdf and took longer (opening the plugin, etc) I skipped your spring writeup.  If they were htm/php/etc, I would have probably read both.

Other than that? Keep up the GOOD WORK!  Keep the site as fresh as you can and update often...  They grow quite fast!  Right now, cbr600rr.com gets over 100,000 hits per DAY, and both sites have over 1Gig of content...

[Jeff]

and when you publish the flash movie make sure you check off "protect from import" under publish settings.

so these hacks can't criticize what you did or didnt do  ;D

LOL... it takes about 3 (SMALL) lines of html code in a notepad doc to pull down any .swf for hacking...

[1fastmofo]

Thanks Jeff,

I was bored at work the other day and checked out your site. I read all your race reports. It helps pass the time at work, plus I can daydream about racing while it's snowing outside my window.

PDF wasn't my choice either. I sent the write ups to my friend in word format. But, I guess it was easier for him to do it that way. I haven't written anyting in html in a long time.

I sent him the link to this site so he can check out the comments for himself. I can't complain though. He did a great job in a short amount of time, and he works for free.  ;D Thanks Guzzo!

[ecumike]

and when you publish the flash movie make sure you check off "protect from import" under publish settings.

so these hacks can't criticize what you did or didnt do  ;D

HEHEHE.. that won't do anything. I can still 'hack' it using this software I have. I can tell you all the actions used, frames, symbols and everything about any .SWF file

Oh, and don't try the fake movie front that imports another movie...I can find that also using the log window of my proxy software :)

[smoke]

HEHE..  your a bad boy. :o  Once I get my site up I will email u to see if u can get into my swf file. I have a few tricks   ;D I too have a few tricks  ;)

[ecumike]

A'ight.. IT'S ON!  

;D

[r6_philly]

HEHEHE.. that won't do anything. I can still 'hack' it using this software I have. I can tell you all the actions used, frames, symbols and everything about any .SWF file

Oh, and don't try the fake movie front that imports another movie...I can find that also using the log window of my proxy software :)

well you if you ever noticed, you would see how I rarely use any flash?  ;D

I would like to see you crack the source codes of my pages... I would probably pay you if you could ;)

does all the swf files get cached? if so why would you even need to see the log, just dig it out from the cache directory... if it doesn't get cached then I got a way to stop ya ;)

[ecumike]

I would like to see you crack the source codes of my pages... I would probably pay you if you could ;)

Where is Flash on your site? I couldn't find any

does all the swf files get cached? if so why would you even need to see the log, just dig it out from the cache directory... if it doesn't get cached then I got a way to stop ya ;)

Yes, .SWFs get cached but that doesn't matter,  it's easier to look in the code or my log window and find the SWF file requested. Technically, there is no way to stop someone from finding a .SWF movie/file, unless you know a trick I don't. ;)

[r6_philly]

if I can make your system not cache the file, then I can have the server not serve the file if requested from your browser. I can have it that only a script on the server side can request the file.

but it is just going to get cached and you can fish it out of your temp. file directory anyway.

what they need is server side flash ;)

Or... you can have the server side script act as the main flash movie, to serve up clips. That way you will never get to see the scripting and interactions behind the main movie, just a thought....

but secure app's are rarely done with flash anyway, so why protect the source?

or, how about, the movie in the browser must receive keys from server side to function... session based. so once session expires the movie won't run. and new session can only be initiated by the server side.

just thinking and talking... you can figure out what I do for a living now can't you ;) hahaha

[ecumike]

That kinda doesn't make sense.

To get all technical...
Once I request the HTML page, the browser/HTML code will request the embedded Flash.. I can see ANY and ALL requests from my browser, since I have a proxy software.

So going on that.. once I have the Flash file in my browser window (loaded) then to make any communication back to the server it has to send a request... well guess what.. I'll see that request.

So once that original Flash file is loaded in my browser.. there's no way out :)

[r6_philly]

no you not getting what I mean...

I can create a flash file that won't play without server input.

so you load up the flash file in your brower, and each time you make a request, the server will process it and return a response. The response will contain the instruction for the flash movie to play.

But the server will only process and return a response if the session is directly initiated from the server. which means, you requested and received the movie from the server right before you played it. If the movie is cached and played afterwards without a continuous session (lets say after you turn your computer off and back on) the session expires and the server will not respond to your requests and the movie won't play.

So even if you hack the file and see what the structure the movie have, you will never figure out how it suppose to work.

And some vector symbols can be drawn on the fly with script instructions, and I can have the server send the instruction only "in-session". So you will not be able see those "dynamic" symbols. and the dynamic instructions wont be saved with the swf file so those symbols would just be missing.

it seem like a lot of trouble, but it can be done... if I ever need to make a movie that can't be hacked, or re-used (more importantly), that would be the way to go.

but since I deal with non-flash stuff most of the time, the interaction on the server is secure enough. you can see the output, but never the mechenism...

[r6_philly]

remember, I make web applications, not web sites... I refuse to make anything that is static and not dynamic anymore ...  ;D