Re: encrypted source file support in jdk?

On Sat, 29 Sep 2007 02:12:45 +0200, tom forsmo <spam@xxxxxxxxxx>
wrote, quoted or indirectly quoted someone who said :


I know, its a complicated subject but I need to start somewhere and I
have a decent understanding of how to harden the linux kernel and the
running system. So thats going to help a lot to begin with. The next
thing I need to do is secure the actual tools used every day compilers.
IDEs etc, svn etc that may take some time, but Ill write it all down.

I will tell one little story here. I belonged to the Apple and PC
User societies.. Every month a vendor or two would come to give a
presentation on some new interesting product. Back in the 80s, some
guys came and demonstrated a file encryption system pointing out it
would take billions of years to crack it by brute force.

During the demo I cracked it, simply by fetching data out of deleted
files. They had failed to wipe the unencrypted versions of the files.
This "Maginot Line" mentality is the bane of security systems.
Crackers will do anything to avoid a "sportmanlike" head on attack.
They will look primarily for sneaky ways AROUND your defenses.
So there is not much point super hardening your system at any one
point. You are better to keep plugging the weakest hole.
--
Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com
.