How easy managed codes be reversed engineered?

[Canon EOS]

Hi,

I am really new in .net and pocket PC development.

My background are purely C/C++/VC++. Have developed on Mobile Java for a
year and felt completely insecure with it because all codes can easily
uncompiled.

And it is why I am trying on .net for smartphone and PocketPC devices.

I am just curious on how easy .net managed codes can be reversed engineered?
As easy as Java? Or as hard as binary C?

Thanks for reading.

[Ross Presser]

On Thu, 14 Jul 2005 04:28:01 +0800, Canon EOS wrote:

Hi,

I am really new in .net and pocket PC development.

My background are purely C/C++/VC++. Have developed on Mobile Java for a
year and felt completely insecure with it because all codes can easily
uncompiled.

And it is why I am trying on .net for smartphone and PocketPC devices.

I am just curious on how easy .net managed codes can be reversed engineered?
As easy as Java? Or as hard as binary C?

As easy as Java. See Lutz Roeder's free .NET Reflector:

http://www.aisto.com/roeder/dotnet

[Canon EOS]

Thanks for the links. I just downloaded and try it...

It is still not that bad, right? I cannot view anything that is "private".

So .net managed codes are far safer than Java, right?

Anyone?

"Ross Presser" <rp******@NOSPAMgmail.com.invalid> wrote in message
news:1k*****************************@40tude.net...

On Thu, 14 Jul 2005 04:28:01 +0800, Canon EOS wrote:

Hi,

I am really new in .net and pocket PC development.

My background are purely C/C++/VC++. Have developed on Mobile Java for a
year and felt completely insecure with it because all codes can easily
uncompiled.

And it is why I am trying on .net for smartphone and PocketPC devices.

I am just curious on how easy .net managed codes can be reversed
engineered?
As easy as Java? Or as hard as binary C?

As easy as Java. See Lutz Roeder's free .NET Reflector:

http://www.aisto.com/roeder/dotnet

[Jon Skeet [C# MVP]]

Canon EOS <no****@nospam.org> wrote:

Thanks for the links. I just downloaded and try it...

It is still not that bad, right? I cannot view anything that is "private".
Yes you can. What did you try?
So .net managed codes are far safer than Java, right?

No, it's basically the same as Java.

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too

[Canon EOS]

Do you mean all codes can be reversed compiled even it is "private"?

How? Using the same problem, Reflector?

"Jon Skeet [C# MVP]" <sk***@pobox.com> wrote in message
news:MP************************@msnews.microsoft.c om...

Canon EOS <no****@nospam.org> wrote:

Thanks for the links. I just downloaded and try it...

It is still not that bad, right? I cannot view anything that is
"private".

Yes you can. What did you try?

So .net managed codes are far safer than Java, right?

No, it's basically the same as Java.

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too

[Canon EOS]

Sorry.. I was asking if using the same program (not problem), Reflector?

"Canon EOS" <no****@nospam.org> wrote in message
news:u3****************@TK2MSFTNGP12.phx.gbl...

Do you mean all codes can be reversed compiled even it is "private"?

How? Using the same problem, Reflector?

"Jon Skeet [C# MVP]" <sk***@pobox.com> wrote in message
news:MP************************@msnews.microsoft.c om...

Canon EOS <no****@nospam.org> wrote:

Thanks for the links. I just downloaded and try it...

It is still not that bad, right? I cannot view anything that is
"private".

Yes you can. What did you try?

So .net managed codes are far safer than Java, right?

No, it's basically the same as Java.

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too

[Cool Guy]

Canon EOS <no****@nospam.org> wrote:

Do you mean all codes can be reversed compiled even it is "private"?
Private class members? Sure.
How? Using the same problem, Reflector?

Yes. It might be worthwhile trying Reflector yourself in order to get a
feel of exactly what can be seen.

And take a look at <http://www.pobox.com/~skeet/csharp/obfuscation.html>
for a discussion of this topic.

[Jon Skeet [C# MVP]]

Canon EOS <no****@nospam.org> wrote:

Do you mean all codes can be reversed compiled even it is "private"?
Yes.
How? Using the same problem, Reflector?

Yes.

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too

[Canon EOS]

Many thanks for the information.

Playing with that, but yet to able to view my actual codes.... only the
declared variables.

"Jon Skeet [C# MVP]" <sk***@pobox.com> wrote in message
news:MP************************@msnews.microsoft.c om...

Canon EOS <no****@nospam.org> wrote:

Do you mean all codes can be reversed compiled even it is "private"?

Yes.

How? Using the same problem, Reflector?

Yes.

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too

[Ross Presser]

On Fri, 15 Jul 2005 03:31:04 +0800, Canon EOS wrote:

Many thanks for the information.

Playing with that, but yet to able to view my actual codes.... only the
declared variables.

Do you have the Disassembler pane up yet? (Tools/Disassembler from the
menu, then click on a method name in the left pane)

[Cool Guy]

Canon EOS <no****@nospam.org> wrote:

Playing with that, but yet to able to view my actual codes.... only the
declared variables.

1. Make sure that the disassembler pane is open (Tools->Disassembler).
2. Select a *method* declaration in the pane on the left.

You should then see high-level code if either 'C#', 'Visual Basic', or
'Delphi' is selected in the combo box at the top.

[Canon EOS]

Thanks for the links. I just downloaded and try it...

It is still not that bad, right? I cannot view anything that is "private".

So .net managed codes are far safer than Java, right?

Anyone?

"Ross Presser" <rp******@NOSPAMgmail.com.invalid> wrote in message
news:1k*****************************@40tude.net...

On Thu, 14 Jul 2005 04:28:01 +0800, Canon EOS wrote:

Hi,

I am really new in .net and pocket PC development.

My background are purely C/C++/VC++. Have developed on Mobile Java for a
year and felt completely insecure with it because all codes can easily
uncompiled.

And it is why I am trying on .net for smartphone and PocketPC devices.

I am just curious on how easy .net managed codes can be reversed
engineered?
As easy as Java? Or as hard as binary C?

As easy as Java. See Lutz Roeder's free .NET Reflector:

http://www.aisto.com/roeder/dotnet

[Jon Skeet [C# MVP]]

Canon EOS <no****@nospam.org> wrote:

Thanks for the links. I just downloaded and try it...

It is still not that bad, right? I cannot view anything that is "private".
Yes you can. What did you try?
So .net managed codes are far safer than Java, right?

No, it's basically the same as Java.

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too

[Canon EOS]

Do you mean all codes can be reversed compiled even it is "private"?

How? Using the same problem, Reflector?

"Jon Skeet [C# MVP]" <sk***@pobox.com> wrote in message
news:MP************************@msnews.microsoft.c om...

Canon EOS <no****@nospam.org> wrote:

Thanks for the links. I just downloaded and try it...

It is still not that bad, right? I cannot view anything that is
"private".

Yes you can. What did you try?

So .net managed codes are far safer than Java, right?

No, it's basically the same as Java.

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too

[Canon EOS]

Sorry.. I was asking if using the same program (not problem), Reflector?

"Canon EOS" <no****@nospam.org> wrote in message
news:u3****************@TK2MSFTNGP12.phx.gbl...

Do you mean all codes can be reversed compiled even it is "private"?

How? Using the same problem, Reflector?

"Jon Skeet [C# MVP]" <sk***@pobox.com> wrote in message
news:MP************************@msnews.microsoft.c om...

Canon EOS <no****@nospam.org> wrote:

Thanks for the links. I just downloaded and try it...

It is still not that bad, right? I cannot view anything that is
"private".

Yes you can. What did you try?

So .net managed codes are far safer than Java, right?

No, it's basically the same as Java.

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too

[Cool Guy]

Canon EOS <no****@nospam.org> wrote:

Do you mean all codes can be reversed compiled even it is "private"?
Private class members? Sure.
How? Using the same problem, Reflector?

Yes. It might be worthwhile trying Reflector yourself in order to get a
feel of exactly what can be seen.

And take a look at <http://www.pobox.com/~skeet/csharp/obfuscation.html>
for a discussion of this topic.

[Jon Skeet [C# MVP]]

Canon EOS <no****@nospam.org> wrote:

Do you mean all codes can be reversed compiled even it is "private"?
Yes.
How? Using the same problem, Reflector?

Yes.

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too

[Canon EOS]

Many thanks for the information.

Playing with that, but yet to able to view my actual codes.... only the
declared variables.

"Jon Skeet [C# MVP]" <sk***@pobox.com> wrote in message
news:MP************************@msnews.microsoft.c om...

Canon EOS <no****@nospam.org> wrote:

Do you mean all codes can be reversed compiled even it is "private"?

Yes.

How? Using the same problem, Reflector?

Yes.

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too

[Ross Presser]

On Fri, 15 Jul 2005 03:31:04 +0800, Canon EOS wrote:

Many thanks for the information.

Playing with that, but yet to able to view my actual codes.... only the
declared variables.

Do you have the Disassembler pane up yet? (Tools/Disassembler from the
menu, then click on a method name in the left pane)

[Cool Guy]

Canon EOS <no****@nospam.org> wrote:

Playing with that, but yet to able to view my actual codes.... only the
declared variables.

1. Make sure that the disassembler pane is open (Tools->Disassembler).
2. Select a *method* declaration in the pane on the left.

You should then see high-level code if either 'C#', 'Visual Basic', or
'Delphi' is selected in the combo box at the top.