Cherry Audio DCO-106 v1.2.0.52 READ NFO-R2R

Problem of this system
------------------------------------------------------------------------------
1. It is not using stable computer information
After updating OS, computer info can be changed. It means BlowFish keys are
also changed. User needs to activate all again. At last you will get "you have
reached the maximum number of users for this account." at the end.
CA's FAQ, you can also find user reports about this :)

2. Takes some time to complete install / authorize.
Even one product installing takes some time. User needs to wait the server
for encrypting the PluginLoader and Plugin (and downloading all contents).

3. Virtual DLL has security vulnerability
Skilled bad cracker (who can understand how CA protection works and BlowFish
crypto) can inject malicious code to PluginData. Because it's encrypted, and
decrypted DLL will not be saved to HDD, antivirus does not work. The injected
code will run under CA apps.

MacOS has native API "NSCreateObjectFileImageFromMemory" to do VirtualDLL. But
this is deprecated 10 years ago due to the security aspect as we explained.
CA does know this problem because they listed in their FAQ:

"Most of Cherry Audio's plugins* are not compatible with Garageband under
MacOS 12 (MacOS Monterey) on computers with the Intel chip. On Macs with the
M1 chip, you are offered an option to lower the security setting for
Garageband and that will correct the issue." (Screen shot of error which
mentions NSCreateObjectFileImageFromMemory here)

------------------------------------------------------------------------------

Since we proved that crackers can manage BlowFish en/decryption in the custom
structured data, the security vulnerability is quite obvious and real. Once
it is broken by cracker, only bad expriences exist for legit users
(security issue, macOS compatibility issue, lazy installation issue, slow
loading issue etc...).

* How about going to simple JWT/RS256 verification which you already have in
the system? All current problems will go away by the easy move!

* Selling known-insecure-software is risky business. We hope users don't ask
for refund which cannot be easily refused :)