You are not logged in.

Tuur

Master

  • "Tuur" started this thread

Posts: 2,414

Location: Netherlands

Occupation: Virtual Tours / Photography / Musician / Recording engineer

  • Send private message

141

Tuesday, September 16th 2014, 10:23pm

Yes i love sacha too ;-)
We are in close contact..
Don't worry *thumbsup*

Tuur *thumbsup*

This post has been edited 1 times, last edit by "Tuur" (Sep 16th 2014, 10:45pm)


sachagriffin

Professional

Posts: 1,515

Occupation: Virtual Tours - Photography - Krpano developer

  • Send private message

142

Wednesday, September 17th 2014, 9:11pm

Yeah, it only took a little bit of effort.

It's 6155.

I'm helping Tuur to really protect it. Past my knowledge at least. As soon as pressing projects are finished.

2nd edition

anybody can hack it"?
Sacha?

http://www.virtualtuur.com/krpano/password/2/

Tuur *thumbsup*
KRPano Developer: Portfolio :: Facebook :: Twitter :: r/VirtualTour

jordi

Intermediate

Posts: 155

Location: Barcelona

  • Send private message

143

Thursday, September 18th 2014, 2:47pm

Did you get it by decrypting the xml or by whatching the javascript activity in the chrome dev tools ?

by the way, I love making krpano experiments also, and trying to make everything through krpano, but in this concret issue, wouldn't be better/easier/more flexible to use a php method like this one
visita3d.com advanced virtual tours
a new way to communicate

sachagriffin

Professional

Posts: 1,515

Occupation: Virtual Tours - Photography - Krpano developer

  • Send private message

144

Thursday, September 18th 2014, 4:39pm

I hooked up a voltage meter to the cpu and used some statistically analysis on the different voltages you get when pressing different numbers.
With tuurs project, I could tell it was four places, but only 3 numbers showed increased voltages. I then had to write a mouse driver script to brute force all the combinations. This took nearly 18 minutes.

With the krpano password, it'll work locally or offline on the device of your choice.
BTW, none of the above is true. It was actually brutally easy to find the password, but I'll let that knowledge remain secret so as not to compromise anymore projects.
KRPano Developer: Portfolio :: Facebook :: Twitter :: r/VirtualTour

145

Thursday, September 18th 2014, 6:22pm

Hi,

a great example, but it has still open some 'leaks' that can allow hacking and finding out the password.

But by adding this protection setting (see the krpano Protect Tool):
[x] Allow loading only privately encrypted xml and plugins files
or this:
[x] Allow loading only and plugins files from the same domain + [x] Limit Domains

and these:
[x] Disable the passing of external parameters
[x] Disable the Javascript interface

it would be absolutely safe. ;-)

Best regards,
Klaus

jordi

Intermediate

Posts: 155

Location: Barcelona

  • Send private message

146

Thursday, September 18th 2014, 8:18pm

Yes sacha you are right, having the option of making it work offline, makes it worthy to use krpano/javascript.
Ok, so now I have enough motivation to discover that "secret" way to find the hidden values of variables, I'm quite courious about that.

I was just a bit afraid there was some way to decrypt xml, but of course being able to find the value of a simple variable is nothing that can compromise any project code ...
visita3d.com advanced virtual tours
a new way to communicate

Umalo

Intermediate

Posts: 574

Location: Osijek, Croatia, EU

Occupation: PC

  • Send private message

147

Thursday, September 18th 2014, 9:06pm

You are right, but reading code, like in tuur examples case can, right?

Tuur

Master

  • "Tuur" started this thread

Posts: 2,414

Location: Netherlands

Occupation: Virtual Tours / Photography / Musician / Recording engineer

  • Send private message

148

Thursday, September 18th 2014, 10:13pm

If you know how yes!

Tuur *thumbsup*

Tuur

Master

  • "Tuur" started this thread

Posts: 2,414

Location: Netherlands

Occupation: Virtual Tours / Photography / Musician / Recording engineer

  • Send private message

149

Friday, September 19th 2014, 9:57am

@sacha hahahahahaa

@Klaus would you agree when i state that full, 100% protection, with xml only is not possible?
Just without special settings in the krpanotools to make viewer?
Keeping in mind that the owner of the tour can set and change the password.

Would making a html5 plugin make any difference here?

Tuur *thumbsup*

Tuur

Master

  • "Tuur" started this thread

Posts: 2,414

Location: Netherlands

Occupation: Virtual Tours / Photography / Musician / Recording engineer

  • Send private message

150

Saturday, September 27th 2014, 6:12pm

Something gives me the feeling that Santa comes early this year..
Tuur *thumbsup*

Umalo

Intermediate

Posts: 574

Location: Osijek, Croatia, EU

Occupation: PC

  • Send private message

151

Sunday, September 28th 2014, 12:28am

What? Is some outstanding payment to be received on your side or snow is coming to your town?

Tuur

Master

  • "Tuur" started this thread

Posts: 2,414

Location: Netherlands

Occupation: Virtual Tours / Photography / Musician / Recording engineer

  • Send private message

152

Sunday, September 28th 2014, 10:33am

Haha,
No!
...
There is only one Santa here!
*g*

Tuur *thumbsup*

Tuur

Master

  • "Tuur" started this thread

Posts: 2,414

Location: Netherlands

Occupation: Virtual Tours / Photography / Musician / Recording engineer

  • Send private message

153

Friday, October 17th 2014, 7:08pm

This post has been edited 1 times, last edit by "Tuur" (Oct 17th 2014, 8:17pm)


Umalo

Intermediate

Posts: 574

Location: Osijek, Croatia, EU

Occupation: PC

  • Send private message

154

Friday, October 17th 2014, 11:03pm

Ah that Santa, right *thumbsup*

Tuur

Master

  • "Tuur" started this thread

Posts: 2,414

Location: Netherlands

Occupation: Virtual Tours / Photography / Musician / Recording engineer

  • Send private message

155

Friday, October 24th 2014, 12:31am

i was preparing for the new garden next to the bar..
http://www.virtualtuur.com/movinghotspots2/pano1/

Tuur *thumbsup*