Re: Obfuscating a Servlet

2008-10-25 Thread Johnny Kewl
Hi Jeng, Yes it does, it can be reverse engineered and you can try it yourself, its still there but where something was "StoreNames" is now just "a". If they determined enough they will reverse engineer it, but on a large project its not easy to understand at all. Put it this way, on large pro

Re: Obfuscating a Servlet

2008-10-25 Thread Johnny Kewl
- Original Message - From: "Jeng Yu" <[EMAIL PROTECTED]> To: Sent: Friday, October 24, 2008 12:28 PM Subject: Obfuscating a Servlet Hi All, I just wanted to know if I can first obfuscate my selvlet with ProGuard before I deploy it in Tomcat environment. Will d

Re: Obfuscating a Servlet

2008-10-24 Thread Tim Funk
If someone can get your .class file - someone can reverse engineer it. Obfuscating will slow someone down, not prevent. If people only have access via web browser, then only server side code is being executed and people can never see your binaries on your server so the only way to reverse engi

Re: Obfuscating a Servlet

2008-10-24 Thread Ronald Klop
What is the risk? Do you deploy it in your own Tomcat environment where only you have access or do you distribute your class files? Ronald. Op vrijdag, 24 oktober 2008 om 12:28 uur schreef Tomcat Users List : Subject: Obfuscating a Servlet Date: Fri Oct 24 12:28:50 CEST 2008 From: Jeng Yu

Re: Obfuscating a Servlet

2008-10-24 Thread Serge Fonville
Hi, Obfuscation makes it harder to reverse engineer your code, nothing more. If your code is of interest, there a people who can reverse engineer it. If you want to make sure people can't read your code. Use a wrapper to encrypt it and decrypt it through a value you can provide through the context.

RE: Obfuscating a Servlet

2008-10-24 Thread Peter Crowther
> From: Jeng Yu [mailto:[EMAIL PROTECTED] > I just wanted to know if I can first obfuscate my > selvlet > with ProGuard before I deploy it in Tomcat > environment. As long as ProGuard doesn't hack around with the servlet interface calls, you should have no problem. However, I've never tried. >

Obfuscating a Servlet

2008-10-24 Thread Jeng Yu
Hi All, I just wanted to know if I can first obfuscate my selvlet with ProGuard before I deploy it in Tomcat environment. Will doing this really protect my servlet and make it really difficult for someone to reverse engineer or decompile it, as people seem to say? Thank you. Jeng --