Commercial obfuscators allow you to choose which methods/classes to
obfuscate, including method names.
So say you have a bean that's supported by a set of utility classes. How
many entry points does that bean have from the JSP pages? Whatever they
are, you can choose to not obfuscate the method/class names. And then you
can freely obfuscate all non-public methods and classes in that bean and its
supporting classes.
However, the fact is that if anyone wants to decompile your byte code and
figure it out, they can (with the help of other tools), but who's going to
go through the effort? Do you suspect your client would be willing to
violate your license agreement and steal your stuff? I guess you've got to
consider it on a per-client evaluation.
Obfuscating code makes debugging in the field difficult. Consider that in
your decision. My personal inclincation is to say, consider whether your
intellectual property is worth the effort and cost to try to protect it
(other than through licensing). There are only so many ways to skin a cat
in a Web-app or J2EE app, and it's all based on open APIs.
Scott Stirling
-----Original Message-----
From: [EMAIL PROTECTED]
To: JRun-Talk
Sent: 3/23/01 11:26 PM
Subject: RE: RE: Scrambling Code
THe problem with that is that it will scramble the class names and the
function names, etc, so how can you use those in your jsp pages?
Travis
---- Original Message ----
From: Sanjay Acharya <[EMAIL PROTECTED]>
Sent: 2001-03-23 18:38:55.0
To: JRun-Talk <[EMAIL PROTECTED]>
Subject: RE: Scrambling Code
yup!! thats right...put all ur sensitive code in beans and u can
scramble
the bean class byte codes.....there are tools available to do that....
check this site out
http://www.condensity.com/
Sanjay Acharya
-----Original Message-----
From: Matthew L. Wright [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 23, 2001 5:19 PM
To: JRun-Talk
Subject: Re: Scrambling Code
What code are you trying to scramble? Code within the JSP or code
within a
class? Why not put all sensitive code within a class and at that point
all
is well.
Matt
Matthew L. Wright
Java Internet Programmer
Jupiter One
Web World Studios West Coast
www.jupiterone.com
(818) 763-2927
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: "JRun-Talk" <[EMAIL PROTECTED]>
Sent: Friday, March 23, 2001 3:01 PM
Subject: Scrambling Code
> Serious question here:
>
> I know this was brought up recently, but I don't think there were any
good
answers and now we are facing the same problem. A customer wants to buy
our
product and host it in house, but we don't really want to give away our
code. So how can you scramble, but still access it using jsp?
>
> Travis Reeder
> Chief Software Architect
> ThinkVirtual
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
