Re: encrypted source file support in jdk?
- From: tom forsmo <spam@xxxxxxxxxx>
- Date: Sat, 29 Sep 2007 02:12:45 +0200
Roedy Green wrote:
If a hacker has access to your machine he will be able to grab the
source files or class files while in unencrypted state. This machine
ought not to live on a LAN or the Internet.
You have to think about how a hacker could go AROUND your encryption
system, rather than tackling it head on.
I know, its a complicated subject but I need to start somewhere and I have a decent understanding of how to harden the linux kernel and the running system. So thats going to help a lot to begin with. The next thing I need to do is secure the actual tools used every day compilers. IDEs etc, svn etc that may take some time, but Ill write it all down.
BTW, this is something I want to do because I want to test the concept, and the concept base scenario is to protect internal information from floating around unsecured. In terms of enterprise security, I think this is as important as having firewalls, anti-virus tools and keeping your system up to date. Without it, files can be hijacked by a directed virus attack and spread on the internet without any security. If it works I might start using it myself or set up a web page to share the information.
regards tom
regards
.
- Follow-Ups:
- Re: encrypted source file support in jdk?
- From: Roedy Green
- Re: encrypted source file support in jdk?
- References:
- encrypted source file support in jdk?
- From: Tom Forsmo
- Re: encrypted source file support in jdk?
- From: Roedy Green
- encrypted source file support in jdk?
- Prev by Date: Re: encrypted source file support in jdk?
- Next by Date: Re: encrypted source file support in jdk?
- Previous by thread: Re: encrypted source file support in jdk?
- Next by thread: Re: encrypted source file support in jdk?
- Index(es):