The thing is, Ken, yes Blizzard and others do stuff like this ... As
do
other companies for popular games or software, but mainly games and
entertainment related stuff.
Agreed though, there's always a tradeoff.
Take care,
Sina
-----Original Message-----
From: programmingblind-bounce@xxxxxxxxxxxxx
[mailto:programmingblind-bounce@xxxxxxxxxxxxx] On Behalf Of Ken Perry
Sent: Saturday, July 11, 2009 8:42 PM
To: programmingblind@xxxxxxxxxxxxx
Subject: RE: .net:code obviscation
Well I still stand by if it is something you can do it is something
that can
be undone if you have the time the money and the will power.
Now the whole thing is though is your code that important. I mean
unless
you are writing something for the NSA what is there worth protecting
to that
level. Not even companies like Blizzard with a following of millions
worries about it to that level because they know they have the market
and it
will take more than a decompiler to over take them. Same goes for a
little
coder who makes software for the blind there is a balance to be made
between
security and difficulty in making that security. I secure my
commercial
software pretty well as Sina knows because I had him try to break it
at one
time. He of course didn't have the time to do it but I am betting
some well
placed 13 year old could do it if they had a good bag of chips and a
transformer movie to watch to keep his mind busy while working on the
small
task of my security I wrote. So just remember locks and security are
in the
world to keep honest people honest. The people who want to get in
will no
matter what you do.
Ken
-----Original Message-----
From: programmingblind-bounce@xxxxxxxxxxxxx
[mailto:programmingblind-bounce@xxxxxxxxxxxxx] On Behalf Of Sina
Bahram
Sent: Saturday, July 11, 2009 5:03 PM
To: programmingblind@xxxxxxxxxxxxx
Subject: RE: .net:code obviscation
Everything Ken said is practically true; however, there are very
complicated
ways of actually getting around this.
Technically, you can use techniques such as address space layout
randomization, jump tables, and so on which will virtually, 100%,
fool
anything out there.
Some of the approaches are dangerously close to some of the research
I'm
doing, so I can't talk about them, but it is technically possible to
fool
every single decompiler out there.
Take care,
Sina
________________________________
From: programmingblind-bounce@xxxxxxxxxxxxx
[mailto:programmingblind-bounce@xxxxxxxxxxxxx] On Behalf Of Ken Perry
Sent: Saturday, July 11, 2009 4:11 PM
To: programmingblind@xxxxxxxxxxxxx
Subject: RE: .net:code obviscation
Sorry to say but no matter how much you would rather it not be
possible it
is. It doesn't matter if you compile a c++ program or write
something in
Asm. There are programs that can decompile code and some that do it
rather
well. Remember though this is not a easy thing to do and if they
are going
to use tools like this they can hack things by hand just the same.
You can do things like encrypt your data that helps but if a person
is
determined enough they can break almost any security and uncompile
almost
any language.
The best defense against someone hacking or copying your code. is
either to
Open source it and put a good license on it or to charge a decent
price for
it. You don't see people trying to rip companies off that sell their
product at a decent cost.
Ken
Littlefield
Sent: Saturday, July 11, 2009 3:01 PM
To: programmingblind@xxxxxxxxxxxxx
Subject: .net:code obviscation
Hello,
I was wondering how you might obviscate code in .net. I know that
there are
programs out there like reflector that will disassemble it for you
and I'd
rather not have that happen.
__________
View the list's information and change your settings at
//www.freelists.org/list/programmingblind
__________
View the list's information and change your settings at
//www.freelists.org/list/programmingblind
__________
View the list's information and change your settings at
//www.freelists.org/list/programmingblind
