On Sun, 2008-07-06 at 22:23 -0700, phlee wrote: > Thanks, all > > I didn't know that by just decompiling bytecode, the source code could > be easily derived > > Will this fact be a limitation for Python apps on embedded systems? I > think source code protection seems to be a great concern when > deploying apps on embedded systems.
This is a limitation for all languages on any system, embedded or otherwise. Ask any vendor who has had their firmware disassembled. At any rate, usually source code for embedded devices is specific enough that protecting code is almost moot, since the code will only run on a particular device. There are better ways to protect code on embedded devices, such as using secure media to store the software (encryption keys can be stored in firmware). Further, firmware can validate code checksums, so that even if someone obtains the code from the device you can ensure that they can't run a modified version of the code on the same device. Of course, assuming any of these devices make it into anyone's possession, a determined hacker will almost certainly break whatever scheme you come up with. It's mostly a question of how determined and skilled they will have to be. Sometimes this type of security is required (by law or PHB's), but most people who ask this sort of question are simply following a cargo-cult mentality of believing that source code must be kept secret, without much thought as to why and what the risks/benefits really are. If your code is so unique as to be worth protecting this way then it's probably worth patenting whatever amazing algorithm it contains. If it's not worth the few thousand dollars you'll spend applying for a patent, then it's probably not worth the few thousand dollars of development time you'll spend trying (almost certainly unsuccessfully) to protect your code by technological means. Cliff --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/pylons-discuss?hl=en -~----------~----~----~----~------~----~------~--~---
