Hi Guys.
I'm wondering: why do Logos allow people to download ANY files at all through FTP? Why are not all resources, logos itself and everything else completely locked-down and protected through hashing, salting, SHA1 and you-name-it?
I know downloading the resources itself won't give you access to anything, but you are still giving the hackers an open hand by not protecting them, as that gives everyone who wants to crack this software an easy way of accessing the files. All they would need are the license file and the whole system is broken, 'cause the resource files themselves can be easily downloaded from your FTPs by anyone without any protection at all. Also, it consumes A LOT of bandwith. You are in a way hosting the files for the hackers..
All resources should be tied to a users computer the same way windows is tied to a users hardware (and music, videos etc to an itunes account), and they should also be password protected though salting and hashing so that no resources would be generic anymore, but tied to a user specifically. That way, in order for a resource to work in logos, it would first have to be verified against your logos account to see if you are entitled to that resource, then logos would check your lisence file to see if you where allowed to use the resource, then logos would check to see if the computer you use logos on is a valid computer, and if any of these steps failed, you would not be getting the resource at all.
And no hotlinking to resources through FTP. This way no one can download the files as they would have to be shared through some kind of file sharing service, or through torrents. All of them being time consuming and resource consuming ways to get the files, thus preventing the spread of them. And if the resources themselves also were tied to a users account, downloading them from some illegal place would make no sense as the hardware signature wouldn't match, and thus making more problems for them.
Now, the only thing you would need to add, is a way for users to reset their computer lock-downs from time to time, and also set a max amount of computers logos and it's resources could be tied to.
Just my 2 cents on the issue.
Chris