Tales from the Scene #6: Theory & Practice #1

Your reviewer shares some thoughts about Pirates of the Deli'burn.
Your reviewer pretends to a Captain of the British Navy studying them.

Most of them are novices, like Guybrush Threepwood, the wannabe pirate and take the easy way out on things.

Tale #1 required some explanation, so I will give examples.



Example #1: Addictive Software, spell checker.
It's easy to find non-legal copies of Addictive Spell Checker with sources. Google for:
""Addictive Spell Checker" warez"
""Addictive Spell Checker" rapidshare.com"
""Addictive Spell Checker" rapidshare.de"

This Delphi vendor uses Innosetup and Password. Download Innounp* and then extract the files. Mr. Glenn Couch, if you are reading this, please use another copy protection scheme.

* References:
innoup - http://innounp.sourceforge.net

DelphiHater gives some advice:
- Mr. Glenn Couch, you might want to consider checking your customers for "unclean" and "non-contactable" customers.
- Have you considered giving your "newer" customers a phone call or customers and watermarking files? That would greatly deter on fraudulent customers.
- Have you considered using BPL-only trials?
- Have you considered on-line activation?



Example #2: AidAim.com, Custom setups
It's easy to find non-legal copies of Accuracer. Google for:
""Accuracer" warez"
""Accuracer" rapidshare.com"
""Accuracer" rapidshare.de"

This Delphi vendor uses Custom Setup (with flaws). Mrs. Ella Pellaman, if you are reading this DelphiHater gives some advice:

- Consider checking your customers for "unclean" and "non-contactable" customers.
- This vendor uses custom-setup, with one flaw: files are not watermarked after installation.
- While AidAim contacts customers, allowing full access to their customer download site is inviting trouble, is it not? Have you considered putting serial number check before allowing access to download site?
- Have you considered using BPL-only trials?
- Have you considered on-line activation?




Example #3: AppControls.com, Innosetup
It's easy to find non-legal copies of AppControls. Google for:
""AppControls" warez"
""AppControls" rapidshare.com"
""AppControls" rapidshare.de"

This Delphi vendor uses Innosetup. Mr. Alexey K., if you are reading this DelphiHater gives some advice:

- Use another installer instead.
- Watermark files after installation.
- Have you considered using BPL-only trials?
- Have you considered on-line activation?




Example #4: RemObjects, Wise Installer
It's easy to find non-legal copies of RemObjects. Google for:
(you know...)

This Delphi vendor uses Wise Installer. Mr. Cornelius, if you are reading this DelphiHater gives some advice:

- If you use Wise unpacker, you can unpack all files. Why bother with setup?
- Use another installer instead.
- The website has flaw: You can re-construct the URL and download the setups :)
- Does not watermark files after installation.
- Mostly using XOR
- Have you considered using BPL-only trials?
- Have you considered on-line activation?




Example #5: DevExpress, custom setup.
It's easy to find non-legal copies of DevExpress.VCL. Google for:
(you know...)

This Delphi vendor uses custom setup. Mr. Julian Bucknall, if you are reading this DelphiHater gives some advice:

- Don't put all sources into 1 RAR file (the RAR password is easily found out).
- Don't use XOR (LOL)
- XOR, like XOR Machine Name,
- XOR, like XOR RAR Password
- Put a dead man's switch to prevent people from abusing the SSL activation service
Have you considered GeoIP and blocking repeat failures?
- Don't put newer downloads for non-active customers :)
- Consider watermarking files



Example #6: TMS, innosetup.
It's easy to find non-legal copies of TMS. Google for:
(you know...)

This Delphi vendor uses innosetup. Mr. Bruno, if you are reading this DelphiHater gives some advice:

- Consider using another installer. People just use innounp and extract all files. The installer cannot even watermark files yet :)
- Don't put newer downloads for non-active customers :)
- Have you considered using BPL-only trials?
- Have you considered on-line activation?




More to come...

:)