473,700 Members | 2,842 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Decompiling C#?!?!? Where is the privacy?

I found a few days ago that was possible to decompile any program developed
in C#

That is a huge failure.... It's not aceptable that a company that pays a lot
for visual studio and pays to the employees to develop new product, and then
all the code is exposed....

I found that the decompilers are pretty good, and have options like
deObfuscate....

There is any solution to this..., Isn't there a way to dificult the access
to the source code?

Hope that this will be a hot topic here in the news groups because it's a
poblem that will affect all of us
Dec 16 '05 #1
18 1800
"Diogo Alves - Software Developer"
<Di************ *************@d iscussions.micr osoft.com> a écrit dans le
message de news: 7C************* *************** **...icrosof t.com...

| Hope that this will be a hot topic here in the news groups because it's a
| poblem that will affect all of us

This has been discussed a lot already. Using a *good* obfuscator is the only
real solution IMO. There are several on the market.

Joanna

--
Joanna Carter [TeamB]
Consultant Software Engineer
Dec 16 '05 #2
You may be over-exagerating the problem... or rather, imaging that it is
specific to C#.

The reply to the following post (which started the same as this, but about
Java) explains how this applies equally to every single programming
language, compiler, etc on the market. To be honest, though, in any moderate
sized company you're probably at just as much risk of a disgruntled employee
taking the source out on a CD and uploading it somewhere...

http://forum.java.sun.com/thread.jsp...311&tstart=150

If you concern is intellectual property, then yep; the best you can do is to
buy a good obfuscator and make it damed hard (but not impossible).

If your concern is security algorithms, then the answer is to use a proper
security algorithm where knowledge of the exact implementation does not
allow access to the data (encrypt rather than cypher).

Marc

"Diogo Alves - Software Developer"
<Di************ *************@d iscussions.micr osoft.com> wrote in message
news:7C******** *************** ***********@mic rosoft.com...
I found a few days ago that was possible to decompile any program developed
in C#

That is a huge failure.... It's not aceptable that a company that pays a
lot
for visual studio and pays to the employees to develop new product, and
then
all the code is exposed....

I found that the decompilers are pretty good, and have options like
deObfuscate....

There is any solution to this..., Isn't there a way to dificult the access
to the source code?

Hope that this will be a hot topic here in the news groups because it's a
poblem that will affect all of us

Dec 16 '05 #3
tjb
<Di************ *************@d iscussions.micr osoft.com> wrote:
I found a few days ago that was possible to decompile any program developed
in C#


<snip>

Here's an article on the topic:
<http://www.pobox.com/~skeet/csharp/obfuscation.htm l>.
Dec 16 '05 #4
You are finding out now that it is possible to decompile ANY program
developed in ANY language on ANY platform. There are decompiler programs out
there that will do this. Bottom line is, if the computer can read it (to
execute it), so can you.

--
HTH,

Kevin Spencer
Microsoft MVP
..Net Developer
You can lead a fish to a bicycle,
but it takes a very long time,
and the bicycle has to *want* to change.

"Diogo Alves - Software Developer"
<Di************ *************@d iscussions.micr osoft.com> wrote in message
news:7C******** *************** ***********@mic rosoft.com...
I found a few days ago that was possible to decompile any program developed
in C#

That is a huge failure.... It's not aceptable that a company that pays a
lot
for visual studio and pays to the employees to develop new product, and
then
all the code is exposed....

I found that the decompilers are pretty good, and have options like
deObfuscate....

There is any solution to this..., Isn't there a way to dificult the access
to the source code?

Hope that this will be a hot topic here in the news groups because it's a
poblem that will affect all of us

Dec 16 '05 #5
Hi,

Diogo Alves - Software Developer wrote:
I found a few days ago that was possible to decompile
any program developed in C#
Any program, developed, in anything, can be decompiled / disassembled. The
ease of doing so and the resemblance of the reversed code to the original
may vary some, but anything that can be interpreted by a computer in order
to execute can also be interpreted by humans to see how it works.
That is a huge failure.... It's not aceptable that a company that
pays a lot for visual studio and pays to the employees to develop
new product, and then all the code is exposed....


....and what? :) Are you sure your code is all that interesting? It is the
whole product and the effort to put it together that has value, not any of
the thousands of lines of code taken out of context and usually containing
techniques that are well documented elsewhere. If you have invented a new,
valuable algorithm that you wish to protect and license -- patent it.

--
Chris Priede
Dec 16 '05 #6
Remember too if someone does copy your code, you'll be able to tell as
well by decompiling theirs ;)

Dec 16 '05 #7
I hate to be so blunt, but if your company already bought Visual Studio
and dedicated yourself to .NET without knowing this, then that is an error
on your part. The fact that assemblies are in IL is a basic tenant of .NET,
and is difficult to overlook, let alone miss completely.

--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Diogo Alves - Software Developer"
<Di************ *************@d iscussions.micr osoft.com> wrote in message
news:7C******** *************** ***********@mic rosoft.com...
I found a few days ago that was possible to decompile any program developed
in C#

That is a huge failure.... It's not aceptable that a company that pays a
lot
for visual studio and pays to the employees to develop new product, and
then
all the code is exposed....

I found that the decompilers are pretty good, and have options like
deObfuscate....

There is any solution to this..., Isn't there a way to dificult the access
to the source code?

Hope that this will be a hot topic here in the news groups because it's a
poblem that will affect all of us

Dec 16 '05 #8

"Nicholas Paldino [.NET/C# MVP]" <mv*@spam.guard .caspershouse.c om> wrote in
message news:ue******** ******@tk2msftn gp13.phx.gbl...
I hate to be so blunt, but if your company already bought Visual Studio
and dedicated yourself to .NET without knowing this, then that is an error
on your part. The fact that assemblies are in IL is a basic tenant of
.NET, and is difficult to overlook, let alone miss completely.


I wonder how many people will have missed this. I know I did ;)
Dec 17 '05 #9
Doug H wrote:
Remember too if someone does copy your code, you'll be able to tell as
well by decompiling theirs ;)


<snigger> don't most EULAs stipulate that you are not allowed to reverse
engineer the code?

I sold a product once that allowed users to add their own help into MSDN
library (the VS6 version). My company released it to the internet as a
beta product. A few weeks later a competitor (about 100,000 times bigger
than us) released a beta product of their own, doing the same thing as
our product. It was funny, the same mistakes in the XML that we produced
also appeared in theirs, we didn't have to resort to decompiling or
disassembling to determine what code had influenced theirs <g>.

We got in touch with president of that company and after a few long
phone calls he expressed an interest in licencing our technology. Then a
few weeks later Microsoft announced that they would use a different
technology in their next version of MSDN library and our dreams of pot
loads of cash disappeared. :-(

Richard
--
Fusion Tutorial: http://www.grimes.demon.co.uk/workshops/fusionWS.htm
Security Tutorial:
http://www.grimes.demon.co.uk/workshops/securityWS.htm
Dec 17 '05 #10

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

5
1774
by: P. Obbard | last post by:
Hi all, How can I create a privacy policy for a cookie? I have an invisible image loading on a 3rd-party hosted site to help me watch traffic, but the cookie I'm using is being rejected by IE6 browsers on their default Security setting because I lack a privacy policy. How can I add a privacy policy to the cookie I'm creating (with ASP)? Thanks!
3
1573
by: Gree | last post by:
A question to those of you who design sites... What is a good online resource for getting legal disclaimers and privacy policies for a web site? ...and are they necessary? Can I just copy-n-paste from another site? I'm trying to find out what i can here before spending a heap of cash on a lawyer (if i even need one) Thanks.
11
1908
by: Deano | last post by:
Just wondering if there is a tool or method that will allow me to compare the state of my database before and after I decompile it. The last time I decompiled a few fields lost default values and some event code wasn't firing anymore. I know that sounds unusual but this was definitely the case. I would like to decompile again but am reluctant to do so if it causes any more problems. I would like to test what the decompile does to my...
10
1823
by: Hermit Dave | last post by:
Hi, Depending upon their security settings some users can not login due to their machine's Privacy Settings some how blocking the cookie (no privacy policy available)... which is encrypted... what i would like is someone to tell me how to set privacy policy for the cookie.. i know its probably not related to asp.net but googling didnt help much.. even on msdn wasnt helpful much... maybe i was searching with the wrong keywords... any...
6
3308
by: MLH | last post by:
Can decompiling an A97 mdb result in fixing minor nasties that may be responsible for some premature terminations of A97 (We are sorry. MS Access 97 needs to close.... messages). I've found the following recommendation and was wondering if any of you have used the technique and why you did? To decompile start Access with the /decompile switch. To do this from windows do a Start, Run and then where it asks for the name of the program to...
6
3182
by: Zytan | last post by:
I ran through the VB Guided Tour some time ago. In particular, the "Managing Your Records: Using Data in Your Program" section: http://msdn2.microsoft.com/en-us/library/t25kbx0s(VS.80).aspx This explains how to create a SQL database, which is stored as an .mdf file: http://msdn2.microsoft.com/en-us/library/ms172599(VS.80).aspx It is just 4 or 5 addresses being stored. However, the database is 2,240 KB in size! To store 5 addresses? ...
8
4345
by: Torben Laursen | last post by:
Hi I need to be sure that my C# code is as hard as possible to decompile. Can anyone tell what is the best tool for that job? Also will this be a part of Visual Studio 2008? It seems natural to me that the .net framework came with a solution so other people could not see your source code
14
1815
by: Grant | last post by:
I've seen a couple of articles on the internet that VB.NET applications can be decompiled very easy. For those who have had experience with this, is it true? What steps can be taken to avoid this? I am using VB.NET Express but am willing to buy something (within reason) to prevent easy decompiling. Any suggestions are much appreciated.
8
2151
bilibytes
by: bilibytes | last post by:
Hi everyone, I'm facing a database design problem. I want to make a sort of networking solution for the clients of my site in which they would be able to share or keep private some of their contact information. so if i have a table like this: CREATE TABLE `users_retailers_account_info` ( `id` bigint(15) unsigned NOT NULL auto_increment, `email` varchar(255) NOT NULL default 'N/A',
0
8714
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8641
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
9060
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
0
8912
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
5897
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
4396
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
4650
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
2
2379
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
3
2021
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.