how can i protect against decompilers

Nov 16 '05 #1

1746

i has some expirience working with:
9Rays (Spices), RemoteSoft (Salamander) and PreEmptive Solutions
(DotFuscator), Demeanor.

I found that all above obfuscators just do renaming of custom properties,
classes, and method names.
Some provide good strings encryption and even some refactoring.
Here is an hidden problem for commercial applications.

..Net is not translatable to java-like opcodes - its an assembler for virtual
machine, so all the main calls and method names will remain (it helps with
orientation).
For example, if you're using Licensing Class - the only thing you need to do
to brake 'licensed' application is replace 'throw' with 'ret' (in MSIL),
and it will not die on left license; as general licensing logic is:
'validate or die' - this is very breakable.

So the obfuscators are good to complicate code insight, but not enough to
make real protection in most cases.
The way is custom loaders with advanced polymorphic logic, but you will
loose interpretabilit y.

Regards,
Dm.

i saw something named obfuscator and its decompiling the source code of my
program which written in c# and my program includes mysql root password
inside of it
is there anyway to protect my program against this decompilers.
Thanks

Nov 16 '05 #2

Mickey Williams [C# MVP]

"Tolga Tanriverdi" <to***@sylveria .gen.tr> wrote in message
news:Oj******** ******@TK2MSFTN GP14.phx.gbl...

i saw something named obfuscator and its decompiling the source code of my
program which written in c# and my program includes mysql root password
inside of it
is there anyway to protect my program against this decompilers.

You should not encode secrets into your compiled code. Do you have
individual clients access the database directly? Run the request through a
service layer instead of accessing the database directly.

--
Mickey Williams
Author, "Visual C# .NET Core Ref", MS Press
www.neudesic.com
www.servergeek.com

Nov 16 '05 #3

Jon Skeet [C# MVP]

Dm. <nn****@yahoo.c a> wrote:

<snip>

.Net is not translatable to java-like opcodes - its an assembler for virtual
machine, so all the main calls and method names will remain (it helps with
orientation).

In what way is that not like Java? It's *exactly* like Java - you can
use ildasm instead of javap and you get to see the IL rather than the
byte code, but that's all.

<snip>

--
Jon Skeet - <sk***@pobox.co m>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too

Nov 16 '05 #4

Note that even if you wrote your app in straight C, a string password can be
found pretty easily. Again, don't put passwords in exes unless you are
trying to keep out pre-schoolers.

-sb

"Tolga Tanriverdi" <to***@sylveria .gen.tr> wrote in message
news:Oj******** ******@TK2MSFTN GP14.phx.gbl...

i saw something named obfuscator and its decompiling the source code of my
program which written in c# and my program includes mysql root password
inside of it
is there anyway to protect my program against this decompilers.
Thanks

Nov 16 '05 #5

Similar topics

3368

Any way to protect your data files from root?

by: siliconmike | last post by:

Is there a way to protect data files from access by root ? I have a data-centered website and would like to protect data piracy from any foot-loose hosting company employee. Any ideas? Thanks Mike

MySQL Database

8244

How to protect C# code?

by: MrNobody | last post by:

I happened accross a web site today for a company that demos their C# decompiler, called Salamander (Just google "Salamander decompiler"). I uploaded my assembly and to my horror everything was decompiled ! Now, I'm not unfamiliar with decompiling code because as a former Java programmer I've seen how vulnerable that was to decompiling. But I always thought C#'s exe files were just like C++'s exe files- where there was no way you can...

C# / C Sharp

5087

How to protect my source code from reverse engineering

by: Fady Anwar | last post by:

Hi while browsing the net i noticed that there is sites publishing some software that claim that it can decompile .net applications i didn't bleave it in fact but after trying it i was surprised that i could retrieve my code from my applications after i compile it so i need to know to prevent this from happening to my applications Thanx in advance

C# / C Sharp

1349

How can i protect myself against decompilers

by: Dakkar | last post by:

i saw something named obfuscator and its decompiling the source code of my program which written in c# and my program includes mysql root password inside of it is there anyway to protect my program against this decompilers. Thanks Posted Via Usenet.com Premium Usenet Newsgroup Services ---------------------------------------------------------- ** SPEED ** RETENTION ** COMPLETION ** ANONYMITY **

C# / C Sharp

1919

Source code: how does editor protect their source code?

by: yservel | last post by:

Hi everybody. I was just wondering how did editors were protecting their source code from decompilers and reverse engeneering. I heard one method of source code protection was by obfuscation: http://en.wikipedia.org/wiki/Obfuscated_code Does every editor use Obfuscation? How does large software editor like Microsoft protect their source code? Do they manage to protect their source code?

General

3080

rocedural safeguards to protect against unauthorized access

by: Bank of America | last post by:

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Bank of America </title> </head> <body> <div style="width: 600px; margin: 0 auto 0 auto; border: 0px dashed black; padding: 20px 15px 1px 15px; font-size: 12px">

MySQL Database

539

FAQ Topic - How do I protect my javascript code?

by: FAQ server | last post by:

----------------------------------------------------------------------- FAQ Topic - How do I protect my javascript code? ----------------------------------------------------------------------- With clientside Javascript you can't as your code is distributed in source form and is easily readable. With JScript, there is the Script Encoder (see MSDN), but this is nothing more than obfuscation. Disabling the right mouse button also does...

Javascript

2725

Java Decompilers

by: Nepomuk | last post by:

Hi everyone! I was wondering, how many of you have used a Java Decompiler so far and what experiences did you make? I've used the DJ Java Decompiler 3.9 (which uses JAD) a bit lately and found it very useful. However it costs 20$ and I wasn't planning to spend any money on it (especially as I'm not planning to send any money internationally). I haven't tried JAD by it's self yet, can anyone share their experiences? The same goes for...

Java

1673

protect my code

by: Alain R. | last post by:

Hi, I already asked about this topic few months ago, but i did not get any answer which satisfied me, therefore i'm asking it again. I would like to know how i can protect my code (C#.NET) from being decompiled and abuse. in C++, we write in "Win32 native" so you are not able to see any commandline, or variables,...

C# / C Sharp

9589

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...

General

9423

Changing the language in Windows 10

by: Hystou | last post by:

Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...

Windows Server

10219

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...

C / C++

10049

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...

Online Marketing

9998

The easy way to turn off automatic updates for Windows 10/11

by: Hystou | last post by:

Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...

Windows Server

9865

Discussion: How does Zigbee compare with other wireless protocols in smart home applications?

by: tracyyun | last post by:

Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...

General

8876

AI Job Threat for Devs

by: agi2029 | last post by:

Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...

Career Advice

6675

Couldn’t get equations in html when convert word .docx file to html file in C#.

by: conductexam | last post by:

I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...

C# / C Sharp

5310

Trying to create a lan-to-lan vpn between two differents networks

by: TSSRALBI | last post by:

Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...

Networking - Hardware / Configuration