# \[AIR\] Are .air files really secure?

**URL:** <https://forum.kirupa.com/t/air-are-air-files-really-secure/255100>\
**Category:** flash\
**Created:** [March 19, 2008, 1:32am UTC](https://forum.kirupa.com/t/air-are-air-files-really-secure/255100 "2008-03-19T01:32:46Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rezmason](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/rezmason/32/30447_2.png) [@Rezmason](https://forum.kirupa.com/u/Rezmason)\
**Post date:** [March 19, 2008, 1:32am UTC](https://forum.kirupa.com/t/air-are-air-files-really-secure/255100/1 "2008-03-19T01:32:46Z")

</div>

I’m deploying a web app built on AIR. The app consists of a main swf, which loads smaller swfs in as modules.

When someone downloads my .air installer file, they could treat it like a zip file and explore it or decompress it as one. They could switch any one of the swfs inside with a malicious one. Couldn’t someone hypothetically download my .air file, unzip it, swap one of my modular swfs with one that does harm, rezip it and distribute it as my program? :look: