dissonance Posted November 5, 2007 Report Posted November 5, 2007 I've never really heard of .swf files being very insecure in the dramatic way you describe. In fact, I haven't really heard of .swf security issues at all. Is it really that bad?Do you have a myspace account? Think of it this way: swf's can execute any javascript commands. They can dump cookies, sessionid's, and - if something's wrong on your end - inject and execute code. If the dev's took anything out that wasn't related to mouseovers or the like, then I wouldn't have a problem with it. If they just make a swf viewer, though, then there would be a problem. But yes, get it working properly and that would add a whole 'nother element of awesome (or awesomely cheesey =D) to HUDs. Quote
Wunderboy Posted November 5, 2007 Report Posted November 5, 2007 Do you have a myspace account? Think of it this way: swf's can execute any javascript commands. They can dump cookies, sessionid's, and - if something's wrong on your end - inject and execute code. The sky is falling! SWF is just a file format and it's pretty much open. My assumption is their going to include code to open and interact with the SWF files in game as they wouldn't be able to embed the current flash player into the engine. The game isn't a browser, there is no Javascript interpreter in it to execute Javascript for a start and I doubt things like file operations and code execution is going to work either. More than likely they'll take an open-source SWF lib and just use a sub-set of it's code to allow vector based, interactive HUD elements that communicate event's back to the engine via LUA or something. Thats's how I'd do it. Quote
dissonance Posted November 5, 2007 Report Posted November 5, 2007 Do you have a myspace account? Think of it this way: swf's can execute any javascript commands. They can dump cookies, sessionid's, and - if something's wrong on your end - inject and execute code. The sky is falling! SWF is just a file format and it's pretty much open. My assumption is their going to include code to open and interact with the SWF files in game as they wouldn't be able to embed the current flash player into the engine. The game isn't a browser, there is no Javascript interpreter in it to execute Javascript for a start and I doubt things like file operations and code execution is going to work either. More than likely they'll take an open-source SWF lib and just use a sub-set of it's code to allow vector based, interactive HUD elements that communicate event's back to the engine via LUA or something. Thats's how I'd do it.Sounds good, but in that case, why not just use SVG? It's a whole lot easier to edit. I'm down for it either way, though. Quote
Wunderboy Posted November 5, 2007 Report Posted November 5, 2007 Actually I thought SVG was a better idea too but I guess more people are familiar with SWF. Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.