Kruger
2nd May 2001 23:34 UTC

Hi, after looking into this nice installer it only took one byte to crack the crccheck protection!!!
To bad!!!

Kruger
;-)

justin
3rd May 2001 06:41 UTC

Uhh, yeah, what's your point? The CRC check is there to help keep you from installing corrupted data.. Of course you could modify it if you really wanted to.

-Justin

PabUK
3rd May 2001 23:37 UTC

This guy obviously has no idea what the crc check is even for.

Kruger
4th May 2001 06:23 UTC

Hi, for starters.:
I do think i know what a crc check is...
If you make a installer someone can easy rip it/alter it etc. if the protection is not strong enough.
Maybe "PsyPab" need a new way of thinking...crc check is the only thing in this installer that gives you some sort of protection!
That's my point...
Kruger

justin
4th May 2001 06:31 UTC

Umm, well you could use a really advanced encryption system, but then again, since NSIS is open source, anybody could see how it works and easily decrypt, right?
What's the point?

-J

rainwater
4th May 2001 09:03 UTC

If you are that paranoid just sign the file. Better yet, provide the MD5 checksums. I don't think installshield does anymore than a crc check either.

snowbird
4th May 2001 10:20 UTC

CRC checks are designed to detect data corruption during transfers.
Digital Signatures are designed to provide security against deliberate code manipulation. Use GPG/PGP for signatures.

Snowbird

PabUK
4th May 2001 13:45 UTC

I don't think most of us are at all worried about someone 'cracking' our installers. After all, like Justin said NSIS is open source anyway so it wouldn't be very difficult.