security issue!

mulyinc

Dear GS Team and GS user,

I just find a not very nice bug / failure / hole in the GS MacAppStore builds. If you download a MAS GAME and take a look into the binary whats very easy to do, you can find the complete GS project file. If you open it you can view and edit the game in GS without any problem. Thats absolute not ok and in my mind a huge issue to protect our work for copy and paste.

I hope some one from GS could take care of this asap?

Greetings,

Arne

simo103

I think (because I haven't verified myself) that the project file rules are not there so it is really useless. The assets are accessible but others report that that is common in most apps not just GS. Anyway here's the original post:

http://gamesalad.com/forums/topic.php?id=17339

mulyinc

Well I can add, modify, and it seems you can also publish it. And I think this is in case an issue.

mulyinc

And yes you can`t edit everything but there is no reason for what the Project file needs to be in the compiled version. Resources like images etc. are normal. But when you write your own apps in Xcode and compile you don`t deliver the project file itself. So this is not ok.

MotherHoose

in ANY application on your desktop...
anyone can show the assets/resources...graphics, sounds, icons, and some code if it is in html/xml...
and open them in another program...
you can not access the compiled nib...nor GS engine...

and anyone who runs any app can record the sound or capture the graphics...and if they wanted, put them in a GS project...

this is computing... code is separated from assets... assets are stored in memory and accessed by code when needed.

MH

jonmulcahy

this is old news

not only is this problem ALSO evident in all iOS games, but also any game you download from the app store. You can easily extract the images from angry birds or any other game.