🔒 i need help to make a key validation and key generater for my python code

[mystic jetty]

its like you need a key to use the python code and you can generate keys on your pc only

[oak hound]

@mystic jetty

Python help channel opened

Remember to:

• Ask your Python question, not if you can ask or if there's an expert who can help.
• Show a code sample as text (rather than a screenshot) and the error message, if you've got one.
• Explain what you expect to happen and what actually happens.

:warning: Do not pip install anything that isn't related to your question, especially if asked to over DMs.

Closes after a period of inactivity, or when you send !close.

[mystic jetty]

can someone help me make a code for the generator for the keys and make it so it says they need a key to use my code once they launch it

[torn heath]

generate what keys for what purpose

[mystic jetty]

for my python code

like you know how you need a key once you launch a .py file and it asks for a key

like that

[shy mirage]

Do you have a database set up? I think you would need a database for this. Then you can use secrets to make the key, and requests (or something like it) to check if the key is in the database. You should also probably salt and hash the keys in the database.

Rough outline: Server makes key with secrets, then hashes and salts in database. The user gets your program you ask for the key as input it makes a request to the server and then the hash is checked against the key.

[mystic jetty]

nope could you help me im new to python

[shy mirage]

This is a pretty complicated thing to do (surprisingly enough). I would probably hold off until you become more familiar with programming in general.

unfortunately, I am a little too busy to give more than a sketch, but good luck!

[mystic jetty]

could anyone else help me that has time

[torn heath]

i never needed a key to "launch" a .py file, got no clue what u talking about

[mystic jetty]

no i want to make it so you need it to launch mine

@torn heath

[torn heath]

are u trying to sell software and trying to lock execution behind a key ?

[mystic jetty]

i want it so if my friends ever leak my stuff no one will be able to use except those with a key

@torn heath

[wary socket]

why would your friends do such a thing?

[mystic jetty]

alot of my old friends did

[ebon dove]

if they have the .py file they could just remove the validation code

you'd need to compile your code to an exe

[torn heath]

that doesnt solve issue one bit, u can still get source code inside an exe

[ebon dove]

it would sure make it a lot harder

[torn heath]

eh

[mystic jetty]

ill make it into a exe

[ebon dove]

vs just opening the file??

[mystic jetty]

do you know how to tho

[ebon dove]

pyinstaller

[wary socket]

what is the software product you aim to sell?

[torn heath]

depending on how u make it into an .exe its literally shoving the source.py together with python interpreter into an .exe and calling it a day

no clue how nuanced/complex it can get tbh

but thats gist of whats happening

[mystic jetty]

like you know how you need a key once you launch a .py file and it asks for a key

[limber oxide]

what does this software do exactly?

[ebon dove]

thats true so just be smart about it, you dont need to disregard the idea completely

[torn heath]

if u want to truly hide source code then making SaaS is a much better/easier idea

but thats not something i would recommend to some1 new at python

prob a lil too complicated

[mystic jetty]

could anyone help me get a code that is like you know how you need a key once you launch a .py file and it asks for a key (some)

[torn heath]

ur best bet is literally making ur code as an api and implementing the need of an api key but what thyrgle said above, its p complicated

[wary socket]

Sorry for repeating, but what does your software aim to achieve?

[mystic jetty]

what does my code do ?

[wary socket]

Yes

[mystic jetty]

its like a a password gen for people who want to use random passwords

[wary socket]

you mean like this one? https://www.lastpass.com/features/password-generator

accessible online, not requiring a download?

[mystic jetty]

ye something like that but in .py

[crystal lion]

there is no foolproof way to do this nor is there a reason to

[torn heath]

an api would be best way but then the hiding is 100x more complex then code u hiding

[grave ermine]

There are some recipes for generating passwords in the stdlib secrets module: https://docs.python.org/3/library/secrets.html#module-secrets

[mystic jetty]

ill prob do this

[shy mirage]

Then you're going to need to learn some library like requests to talk to the database, some database like Postgresql. Hashing and salting. And secrets for key generation. It might take a while though. You will also need to get some sort of server (which I guess could be your personal computer in theory, but I wouldn't do that)

[torn heath]

or/and fastapi

[shy mirage]

Or that too lol

ok maybe i'm making it too complicated... wouldn't be the first time. but I think that only replaces requests

[ebon dove]

there should be libraries made specifically for postgresql

[torn heath]

eh database is optional, we got no clue what kind of password generation they have so we got no clue if they storing user->generated_password or watever

[mystic jetty]

i want something easy fr

or something hard

that takes

1 day not so long

[torn heath]

the easy way is not hiding code

[mystic jetty]

but hiding code

any apis i could use

@torn heath

[grave ermine]

fastapi is server side, no? and requests is client side

(Haven't used fastapi.)

[hardy onyx]

I do not recommend helping this individual

[torn heath]

[shy mirage]

Oh, I'm not thinking about it too carefully. Point is you need a server with database to store the keys in a protected way and then you need some way to transfer using something like requests or w/e to compare to the keys in the database.

[torn heath]

huh

[wary socket]

looks like they're involved in "carding" = credit card theft

[mystic jetty]

i dont its methods

so you buy n1tro for cheap since your in turkish

and you sell for more

paypal blocked my card cause i transfered ltc to paypal

[wary socket]

so... you don't steal credit cards?

[mystic jetty]

💀

lol no

[wary socket]

do you know what carding means?

[mystic jetty]

@wary socket no those people do fraud

[mystic jetty]

no

i dont steal cards

i have my own

[crystal lion]

discord does not allow the resale of paid content like nitro

[mystic jetty]

oh 💀

i didnt know

.

everyone is doing it

[crystal lion]

You may not copy, modify, create derivative works based upon, distribute, sell, lease, or sublicense any of our software or services
discord.com terms of service section 6

you agreed to discord's terms of service when you created your account, this is not an excuse

[mystic jetty]

dam

ima just quit discord thanks yall were nice

[limber oxide]

ah yes the greatest defense

[mystic jetty]

telegram is my next option

thanks guys

for the help

no like dead ass thanks

yall were helping me

[limber oxide]

https://tenor.com/view/outta-pocket-tech-nba-gif-20743695

[mystic jetty]

@crystal lion thanks for letting me know

[crystal lion]

you should consider obtaining services legally. trying to do crap like this is not worthwhile and is just a waste of your time. hold yourself to higher standards :)

[hardy onyx]

"carding" indeed means credit card fraud.

[mystic jetty]

i dont steal cards lmao

i have my own

[hardy onyx]

why'd you reply "yes" to someone asking you if you did carding?

[mystic jetty]

show proof

rn

[hardy onyx]

^^ right here buddy

[mystic jetty]

he meant

buying

with your card

[hardy onyx]

yeah right 💀

[mystic jetty]

ill ask him rn

@hardy onyx @hardy onyx join back

[wispy kindle]

there are many caveats to this...

1. almost all python code, is always readable and available. one aspect of python, that its code is actually just plain text, interpreted into machine code during execution.
   so unless you convert it into another format, even if you've obfuscate it, the code can be easily reverse engineered; core logic and all.

2. the safest approach regarding keys and tokens, would be to host a server that'd handle all that.
   while having asymmetrical encryption/decryption

3. mind that any program that works client side, may be reverse engineered. there's no way around that, you could only take steps to slow them down.
   -# in regards to the client-side logic. not the server's.

4. Given the sensitivity of the program; think if there are any ways you can remove or reduce any confidential parts of the program.

[hardy onyx]

i ain't joining back to that sketchy ahh server bruh

don't need the FBI knocking on my door

[wispy kindle]

some more context is needed tho

[hardy onyx]

🤣

Bro needs DRM for a password generator?

[wispy kindle]

[wispy kindle]

!rules 5

[oak hound]

Rules

5. Do not provide or request help on projects that may violate terms of service, or that may be deemed inappropriate, malicious, or illegal.

[mystic jetty]

!close thanks

[oak hound]

Python help channel closed with !close

This help channel has been closed. Feel free to create a new post in #1035199133436354600. To maximize your chances of getting a response, check out this guide on asking good questions.