hi there;
may i know how to protect my jar file? meaning i dun allow other ppl to de-jar it?
is there smth like build in w/ pwd mechanism ?? when the person will try to de-jar it?
thanks ;)
-
protect jar file (5 messages)
- Posted by: Tan Yoke Yew
- Posted on: June 18 2004 01:59 EDT
Threaded Messages (5)
- protect jar file by Jeroen Wenting on June 18 2004 02:16 EDT
- Re: protect jar file by fumitada hattori on June 18 2004 03:50 EDT
- Re: protect jar file by Tan Yoke Yew on June 18 2004 04:25 EDT
-
Its all in the signature... by Matthew Wilson on June 22 2004 12:40 EDT
- Its all in the signature...Is it? by rajneesh jindia on June 23 2004 06:26 EDT
-
Its all in the signature... by Matthew Wilson on June 22 2004 12:40 EDT
- Re: protect jar file by Tan Yoke Yew on June 18 2004 04:25 EDT
-
protect jar file[ Go to top ]
- Posted by: Jeroen Wenting
- Posted on: June 18 2004 02:16 EDT
- in response to Tan Yoke Yew
THINK!
How would the JVM extract the jar on reading it if it were password protected?
It would need the password in clear text somewhere (in a config file most likely) which would make the password protection useless.
Or maybe have the password included as the first or last X bytes of the jar itself. Would still make it very easy to get the password out, just read those bytes yourself.
And if you'd have the JVM have a built-in password it's only a matter of a very short time to figure out what it is.
If you don't trust your users, don't give them your software. Go for an ASP model and host the software yourself letting the customers access it as a remote service only. -
Re: protect jar file[ Go to top ]
- Posted by: fumitada hattori
- Posted on: June 18 2004 03:50 EDT
- in response to Tan Yoke Yew
Create ur own classloader which has the ability to authenticate the jar file.
But if someone decompiles ur classloader (since the classloader class is out of the jar file), ur authenticate mechanism will be busted. It's obviously going to checken-and-egg problem. :( -
Re: protect jar file[ Go to top ]
- Posted by: Tan Yoke Yew
- Posted on: June 18 2004 04:25 EDT
- in response to fumitada hattori
10s folk for ur suggestion ;) -
Its all in the signature...[ Go to top ]
- Posted by: Matthew Wilson
- Posted on: June 22 2004 12:40 EDT
- in response to Tan Yoke Yew
Take a look at: http://java.sun.com/docs/books/tutorial/jar/sign/signing.html -
Its all in the signature...Is it?[ Go to top ]
- Posted by: rajneesh jindia
- Posted on: June 23 2004 06:26 EDT
- in response to Matthew Wilson
Hi
I feel that digital signature mechanism with private/public key combinations verify that the origin of code is authentic and does not anyhow prevent a malicious hacker to extract your class files and decomplie and tweak around.
This query had been brewing in my mind too.Like Microsoft which gives out a black box stuff for all apps,does java has some similar option.
If any body is aware, please enlighten our souls.
Sincerely
Rajneesh