Re: encrypted source file support in jdk?

Roedy Green wrote:
On Fri, 28 Sep 2007 08:42:41 +0200, tom forsmo <spam@xxxxxxxxxx>
wrote, quoted or indirectly quoted someone who said :

Try a little more open minded thinking next time you ask questions, dont just assume the person you are talking to is asswipe.

Quite often people want to spend huge amounts protecting software that
nobody wants to pirate. They think it is just the thing to do. There
are legal remedies as well.

First of all, when you create something you hope it will be of interest to others. So the only resonable thing to do is to protect it as best you can (unless its an open source project). If you create something that is going into a market with f.ex. intense competition and you are certain that BigDollars are going to notice and perhaps copy, then legal remedies does not help you. since the legal system is slow and by the time its finished there, they might have copied all your ideas, bundled it with their systems and marketing plans, made you spend so much money on legal stuff that you are unable to actually do something in the market or even develop the product furhter. And by the time the case is over, they have 100 million customers using their solution while you are broke and the company has next to no market share.

To explain again, what I am looking for is a way to protect the SOURCE CODE and CLASS FILES during DEVELOPMENT, that means only when the code is in-house. I am not talking about protecting class files distributed to the public.
It could perhaps be of interrest to protect the class files, but thats only relevant if I am the only one with access to the class files, for example when of I provide a web service where the class files are never distributed to the public.

Usually all you want is just to make it more expensive to crack your
code than compose it from scratch. The problem is, even with native
compilation, all you can do is slow down a determined hacker. After
all, the CPU has to crack the code to run it, so in principle all the
information needed is also available to the hacker.

To block brute force attacks you pretty well have to make the program
mutate and get fresh information frequently from the net, information
the hacker does not have in advance.

I dont agree that just because you cant get 100% security, you should abstain from any security.

regards

tom
.

Relevant Pages

  • Re: encrypted source file support in jdk?
    ... functionality of the sun java compiler/vm in jdk6, ... Encrypted files help protect ... remove excess information from class files ...
    (comp.lang.java.help)
  • encrypted source file support in jdk?
    ... I an wondering if anybody knows if its possible to extend the functionality of the sun java compiler/vm in jdk6, with for example plugins or similar? ... With encrypted files the information in the files are still protected, even in the case a trojan sends a file by email to somebody on the internet. ... Enctrypted filesystems only help protect the integrity of the local system and the disk while the system/disk is not running. ... remove excess information from class files ...
    (comp.lang.java.help)
  • Re: encrypted source file support in jdk?
    ... CODE and CLASS FILES during DEVELOPMENT, that means only when the code is in-house. ... I am not talking about protecting class files distributed to the public. ... In the mean time information comes out through various sources, market reports, announced deals, directed marketing, press release, gatherings etc. ... A big dollar company notices this and starts an investigation to protect their own business and to find what this newcomer is up to. ...
    (comp.lang.java.help)
  • Re: Is it possible!
    ... > executables. ... There are several tools in the market ... Class files can always be decompiled. ... based on encrypted class files with a custom class loader that decrypts ...
    (comp.lang.java.programmer)
  • Is it possible!
    ... I am concerned about the possibilities of reverse engineering java ... executables (.class files). ... There are several tools in the market ...
    (comp.lang.java.programmer)