Re: [Pharo-users] Force headless mode

2017-09-27 Thread Cyril Ferlicot
On Wed, Sep 27, 2017 at 9:21 AM, Stephane Ducasse wrote: > What is important is to understand the ratio attacker vs. defense. > It is important not to be paranoid. > - against who are you protect yourself? > - if you do not ship source code (or if you ofuscate it) > - you

Re: [Pharo-users] Force headless mode

2017-09-27 Thread Cyril Ferlicot
On Tue, Sep 26, 2017 at 8:03 PM, Peter Uhnák wrote: > Out of curiosity... how does enforcing headlessness protects code? Wouldn't > it be still accessible via e.g. TelePharo, or startup script override, or > anything? > > Peter > > This is a first step. This is not all we will

Re: [Pharo-users] Force headless mode

2017-09-27 Thread Cyril Ferlicot
On Tue, Sep 26, 2017 at 7:04 PM, Sven Van Caekenberghe wrote: > > > Why not do as follows: > > (1) add some startup code inside the image that tests if the image is running > headless, if not exit > (2) remove some of the command line handlers (especially the ones that > execute

Re: [Pharo-users] Force headless mode

2017-09-27 Thread Stephane Ducasse
What is important is to understand the ratio attacker vs. defense. It is important not to be paranoid. - against who are you protect yourself? - if you do not ship source code (or if you ofuscate it) - you can try remove the decompiler I do not think that people will do much. Now again how much

Re: [Pharo-users] Force headless mode

2017-09-26 Thread Peter Uhnák
Out of curiosity... how does enforcing headlessness protects code? Wouldn't it be still accessible via e.g. TelePharo, or startup script override, or anything? Peter On Tue, Sep 26, 2017 at 7:04 PM, Sven Van Caekenberghe wrote: > > > On 26 Sep 2017, at 18:06, Cyril Ferlicot

Re: [Pharo-users] Force headless mode

2017-09-26 Thread Sven Van Caekenberghe
> On 26 Sep 2017, at 18:06, Cyril Ferlicot wrote: > > On Tue, Sep 26, 2017 at 5:59 PM, Esteban Lorenzano > wrote: >> >> >> it is not. >> specially on windows. >> >> vm handles the creation of host window and you will always have one. >> >>

Re: [Pharo-users] Force headless mode

2017-09-26 Thread Cyril Ferlicot
On Tue, Sep 26, 2017 at 5:59 PM, Esteban Lorenzano wrote: > > > it is not. > specially on windows. > > vm handles the creation of host window and you will always have one. > > now… if you wait one week, I will have ready the (experimental) real headless > VMs. In my tests,

Re: [Pharo-users] Force headless mode

2017-09-26 Thread Esteban Lorenzano
> On 26 Sep 2017, at 16:49, Cyril Ferlicot wrote: > > Hi, > > At Synectique we are working on the deployment of a web application > and we would like to force the headless mode. We tried to just > override the method SmalltalkImage>>#isHeadless to return true all the

Re: [Pharo-users] Force headless mode

2017-09-26 Thread Cyril Ferlicot
On Tue, Sep 26, 2017 at 5:13 PM, Christophe Demarey wrote: > Hi > > What about deploying a minimal image without UI ? > But, as you probably know, headless mode does not prevent to dump the code. > I just tried to build our tools on a minimal image but it crash when

Re: [Pharo-users] Force headless mode

2017-09-26 Thread Clément Bera
Or write a script that obfuscate the code. Not so hard to do. On Tue, Sep 26, 2017 at 5:13 PM, Christophe Demarey < christophe.dema...@inria.fr> wrote: > Hi > > What about deploying a minimal image without UI ? > But, as you probably know, headless mode does not prevent to dump the code. > >

[Pharo-users] Force headless mode

2017-09-26 Thread Cyril Ferlicot
Hi, At Synectique we are working on the deployment of a web application and we would like to force the headless mode. We tried to just override the method SmalltalkImage>>#isHeadless to return true all the time be it is not enough because the image is still opened. It is probabaly the vm that