ironsoul posted at 10:49PM Sat, 02 September 2017 - #4313418

Does the downloader require the user to supply privileged information like their Poser serial number or login id/password?

It needs your login and password in order to log in to your account. And technically that means that it could be programmed to send these data to a server somewhere so they could be used to login secretly to your account and collect files and serial numbers etc.. All I can do is give you my word that it doesn't.

I could make the source code public so people could check it's OK and as such I don't really have any problem with that, but there are problems with it anyway. For example, a hacker could modify the code so it sends your login data to his server, which is very simple, or implant viruses into it, and then put the modified app up for download or sell it, on a website. For the same reason all my apps are obfuscated which makes it so difficult to reverse engineer the code that it would be easier to write your own code from scratch. The downside with this is that obfuscated code often causes false positives in AV programs but that's another story.

I can make an alternative solution which logs in via Internet Explorer and let the browser collect the product data which means there's no way steal login and password, but it's still possible to collect serial numbers and other account data and send it to another server, so security wise it's not a perfect solution. Technically it's not a good solution either and I'm not sure if there is a simple way to automate download of content files that way, if any at all.