On Wed, Sep 27, 2017 at 9:21 AM, Stephane Ducasse
wrote:
> What is important is to understand the ratio attacker vs. defense.
> It is important not to be paranoid.
> - against who are you protect yourself?
> - if you do not ship source code (or if you ofuscate it)
> - you can try remove the decomp
On Tue, Sep 26, 2017 at 8:03 PM, Peter Uhnák wrote:
> Out of curiosity... how does enforcing headlessness protects code? Wouldn't
> it be still accessible via e.g. TelePharo, or startup script override, or
> anything?
>
> Peter
>
>
This is a first step. This is not all we will do but it is a step
On Tue, Sep 26, 2017 at 7:04 PM, Sven Van Caekenberghe wrote:
>
>
> Why not do as follows:
>
> (1) add some startup code inside the image that tests if the image is running
> headless, if not exit
> (2) remove some of the command line handlers (especially the ones that
> execute or load code)
>
What is important is to understand the ratio attacker vs. defense.
It is important not to be paranoid.
- against who are you protect yourself?
- if you do not ship source code (or if you ofuscate it)
- you can try remove the decompiler I do not think that people will do much.
Now again how much tim
Out of curiosity... how does enforcing headlessness protects code? Wouldn't
it be still accessible via e.g. TelePharo, or startup script override, or
anything?
Peter
On Tue, Sep 26, 2017 at 7:04 PM, Sven Van Caekenberghe wrote:
>
> > On 26 Sep 2017, at 18:06, Cyril Ferlicot
> wrote:
> >
> > On
> On 26 Sep 2017, at 18:06, Cyril Ferlicot wrote:
>
> On Tue, Sep 26, 2017 at 5:59 PM, Esteban Lorenzano
> wrote:
>>
>>
>> it is not.
>> specially on windows.
>>
>> vm handles the creation of host window and you will always have one.
>>
>> now… if you wait one week, I will have ready the (
On Tue, Sep 26, 2017 at 5:59 PM, Esteban Lorenzano wrote:
>
>
> it is not.
> specially on windows.
>
> vm handles the creation of host window and you will always have one.
>
> now… if you wait one week, I will have ready the (experimental) real headless
> VMs. In my tests, they are working fine b
> On 26 Sep 2017, at 16:49, Cyril Ferlicot wrote:
>
> Hi,
>
> At Synectique we are working on the deployment of a web application
> and we would like to force the headless mode. We tried to just
> override the method SmalltalkImage>>#isHeadless to return true all the
> time be it is not enough
On Tue, Sep 26, 2017 at 5:13 PM, Christophe Demarey
wrote:
> Hi
>
> What about deploying a minimal image without UI ?
> But, as you probably know, headless mode does not prevent to dump the code.
>
I just tried to build our tools on a minimal image but it crash when
trying to load a github's pro
Or write a script that obfuscate the code. Not so hard to do.
On Tue, Sep 26, 2017 at 5:13 PM, Christophe Demarey <
christophe.dema...@inria.fr> wrote:
> Hi
>
> What about deploying a minimal image without UI ?
> But, as you probably know, headless mode does not prevent to dump the code.
>
> Chr
Hi,
At Synectique we are working on the deployment of a web application
and we would like to force the headless mode. We tried to just
override the method SmalltalkImage>>#isHeadless to return true all the
time be it is not enough because the image is still opened. It is
probabaly the vm that open
11 matches
Mail list logo