Keep in mind that all obfuscation is still only obfuscation. If a customer can run the code, they can (eventually) reverse engineer it. If you encrypt an assembly, then the customer's computer cannot decrypt or run it. So, of course, the obfuscator includes a stub that both decrypts and runs the assembly. Which means you're giving someone a locked box, with the key taped to the side of it.
-----Original Message----- From: Discussion of advanced .NET topics. [mailto:[EMAIL PROTECTED] On Behalf Of Steve Welborn Sent: Friday, August 04, 2006 10:49 AM To: [email protected] Subject: Re: obsfucation Obsfucator is an alright but it still shows your code, just used jibberush instead of the code, but if someone really wanted your code they could still figure it out. I would suggest a program called Assembly LockBox, it uses encryption instead of standard ole' obsfucation You can find more information about Assembly Lockbox at http://alb.gibwo.com/dnn/ They actually show you the difference between the two and why it's better at the site. Check it out if you have time. Steve -----Original Message----- From: Discussion of advanced .NET topics. [mailto:[EMAIL PROTECTED] On Behalf Of Frans Bouma Sent: Friday, August 04, 2006 5:14 AM To: [email protected] Subject: Re: [ADVANCED-DOTNET] obsfucation > I've been given the dubious task of obsfucating the current > application that our team is developing. > > I've tried the obsfucator that comes with VS.2003 but it is a > nightmare to use on anything but the simplest of projects. > > Can anyone recomend another product? I use dotfuscator community edition and it's very straightforward and simple. Use these rules to get best obfuscation results: - make all classes in your .exe internal - make all public methods in your classes in the .exe internal - run NDepend or visual NDepend and every method you can make internal or private, and which isn't in a library you use elsewhere, make that method internal or private. - in dotfuscator, exclude any internal class/struct from renaming. that's it. FB =================================== This list is hosted by DevelopMentor. http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com =================================== This list is hosted by DevelopMentor(r) http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com =================================== This list is hosted by DevelopMentor® http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com
