Re: How can I complain to who cracked my program?

[Maurice Zenarosa <mzenaros () tehcorner info>]

By definition, vulnerabilities are what exploits are used on. Technically the keygen is the exploit since his 
application had a vulnerability which allowed the cracker to create the keygen in the first place. I would suggest you 
find a way to improve your serial number validation. 

There are a lot of talented crackers/teams out there, you've managed to get their attention with your application. Good 
luck ;)

----- Original Message -----
From: "ichib0d crane" <themadichib0d () gmail com>
To: security-basics () securityfocus com
Sent: Monday, December 6, 2010 5:32:31 PM
Subject: Re: How can I complain to who cracked my program?

Ali Asghar Toraby Parizy <aliasghar.toraby () gmail com> wrote:
> Hi
> I created an application and have started a marketing in my site. I
> sell it using my website.
> I use fingerprint to authorize my customers and I give them specific
> serial numbers. Recently I discovered that a strange person have
> cracked my program and generated a keygen for that.  I don't know him.
> I saw that keygen in a warez site.
> How can I complain? Do I have to register my program in an association
> to pursue that person? Where do I have to prefer to criticize this
> illegal exploit?
> Thanks for any help
>
> --
> Ali Asghar Torabi

Well the thing is the illegality of it only exists in certain areas,
it may very well be legal to make a keygen for your program in his
country, and unless you know who you can't figure that out. Your best
bet is to write a better application to survive cracking attempts,
otherwise good luck.

Btw, it wasn't an exploit. A keygen is a cracking method, an exploit
is a method to gain unauthorized access to the box that runs your
application. Just so ya know :)

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------