Comments on: One SWF to rule them all : The Almighty PreloadSWF

By: Snowy

Snowy — Sun, 10 Apr 2011 14:41:02 +0000

4j67Pp That’s not just the best answer. It’s the bestest answer!

By: jpauclair

jpauclair — Thu, 24 Feb 2011 12:43:55 +0000

Try the new tool, it has evolved a lot since this post:
http://jpauclair.net/flashpreloadprofiler/

By: Thomas Pujolle

Thomas Pujolle — Thu, 24 Feb 2011 11:05:55 +0000

How about in a AIR Flex App ? I cannot manage to get this event in this context…

By: Blimey! « Deceptive Resolution

Blimey! « Deceptive Resolution — Sun, 03 Oct 2010 20:43:17 +0000

[...] One SWF to rule them all : The Almighty PreloadSWF [...]

By: peace.lion

peace.lion — Thu, 30 Sep 2010 09:54:29 +0000

ok so what’s your secret ???!!! i’m following all the steps, global security and blah… but still “PreloadSwf paths must be local trusted:” !!!!! thanks in advance.

By: Flash security: Protecting against PreloadSWF (SWF Hijacking) « jpauclair

Flash security: Protecting against PreloadSWF (SWF Hijacking) « jpauclair — Thu, 30 Sep 2010 05:08:37 +0000

[...] skip some step on how preloasSWF work, if you want to know please read my previous articles: One SWF to rule them all! and FlashPreloadProfiler And for those who didn’t knew yet, the last version of FlashDevlelop [...]

By: Swf.hu 2.0 – flash és webfejlesztés » Heti link gyűjtemény 2

Swf.hu 2.0 – flash és webfejlesztés » Heti link gyűjtemény 2 — Sun, 19 Sep 2010 21:41:58 +0000

[...] fájljában amikből több is rendkívül hasznos. Innen tudjuk azt is, hogy megadható egy PreloadSWF ami képes betölteni más SWF filokat és adatokat szolgáltatni róla. Ezeket felhasználva már [...]

By: jpauclair

jpauclair — Thu, 09 Sep 2010 11:45:37 +0000

Well, you can always steal code. One way or another.
But yes this could help someone with bad intention.. and for that it’s sad. But it can also help making better tool, easier debugging, profiling and finding probems.

The FlexProfiling tool (selled by Adobe) is using that tech.

By: Enrique

Enrique — Thu, 09 Sep 2010 05:10:03 +0000

Hi, I don’t know If I’m understanding this.
Can this be used for stealing our code? even if it’s encrypted and obfuscated?

By: jpauclair

jpauclair — Fri, 27 Aug 2010 12:50:23 +0000

Sadly, it’s not.

The tool use a AS3 only event “allCompleteEvent”.
you COULD launch a SWF before an AS2swf.. but you would never receive the magical event, hence not being able to bind to the interface.

what you could do is a “trace”, “localconnection”, or socket connect profiler. But there is not much data that could be retreived by this.

You should take a look at the new version of the tool:
http://jpauclair.net/flashpreloadprofiler/

I’m also releasing a new version soon. With a LOT more stuff for profiling.