Re: Protecting Source code of a perl script

From: James Willmore (jwillmore_at_remove.adelphia.net)
Date: 11/22/03


Date: Sat, 22 Nov 2003 09:23:17 GMT

On 21 Nov 2003 09:19:11 -0800
wherrera@lynxview.com (Bill) wrote:

> Ben Morrow <usenet@morrow.me.uk> wrote in message
> news:<bpku88$4q8$1@wisteria.csv.warwick.ac.uk>...
> > > Actually this is a very frequent scenario.
> > > Or would you trust your personal medical files to the admin of
> > > the hospital computer?
> >
> > I would (implicitly) trust him not to look at them unless it was
> > strictly necessary. Or I would trust the hospital to sack him if
> > he did.
>
> This is actually a situation where obscurity is useful, not to keep
> away truly prying eyes, but to keep from accidental exposure of
> confidential data. There is a reason that changing rooms and shower
> stalls have doors or curtains, even if they do not lock :). I keep
> some data on a public server encrypted, even though a determined
> administrator could crack the encryption with only a day's work. (A
> non-administrator could not crack it without years of work, we
> hope.)

You're *protecting* the data, not *obscuring* the data. So, if
someone takes your hard drive, you know there's data on the hard
drive, but can't read it because it's *protected*. You didn't *hide*
the data, you *protected* the data through encryption.

The OP wanted to *obscure* (or *hide*) the data by changing the format
of the script. Running 'strings' may yield vital information
contained in the script turned binary. So, just changing the format
of the script to *hide* the code is a weak way to *protect* the code.

It's a subtle, but important, difference.

-- 
Jim
Copyright notice: all code written by the author in this post is
 released under the GPL. http://www.gnu.org/licenses/gpl.txt 
for more information.
a fortune quote ...
The optimum committee has no members.   -- Norman Augustine 


Relevant Pages

  • Re: javascript encryption XOR, etc
    ... Ever tried 'protect javascript' as a google search term? ... I want that encryption method works ... When the protected script first starts, ...
    (comp.lang.javascript)
  • Re: Securing data to a process principal
    ... reasonable controls that protect against "casual" abuse. ... hooks into your encryption function) and you cannot prevent an admin using ... The RM analyst also uses an app that has an embedded obfuscated key (I'll ... where the secret is stored in the registry. ...
    (microsoft.public.platformsdk.security)
  • Re: encrypted source file support in jdk?
    ... Encryption is a solution to a problem. ... You want to protect your source files. ... C++ with a highly optimising compiler will do ...
    (comp.lang.java.help)
  • Re: database password and encryption
    ... I know the basic concepts about encryption. ... This database should be encrypted with a strong, ... way you can protect the database AT ALL. ... I could encrypt the key several times and hide the new, resulting, keys on ...
    (microsoft.public.platformsdk.security)
  • Re: In Child Porn Case, a Digital Dilemma - USA
    ... and civil liberties against the government's responsibility to protect ... Department officials, meanwhile, have said that encryption is allowing ... compelling Sebastien Boucher, ... what he downloads to "clean out" the child porn, ...
    (uk.legal)