Path: csiph.com!news.swapon.de!newsfeed.fsmpi.rwth-aachen.de!newsfeed.straub-nv.de!feeds.phibee-telecom.net!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!nzpost1.xs4all.net!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.013 X-Spam-Evidence: '*H*': 0.97; '*S*': 0.00; 'cc:addr:python-list': 0.09; 'scripts': 0.09; 'components,': 0.09; 'messing': 0.09; 'python': 0.10; 'subject:python': 0.14; 'encoding': 0.15; 'door,': 0.16; 'door.': 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'offering.': 0.16; 'scripts.': 0.16; 'stuff.': 0.16; 'wrote:': 0.16; '>>>': 0.20; '2015': 0.20; 'cc:2**0': 0.20; 'cc:addr:python.org': 0.20; 'prevent': 0.20; 'sep': 0.22; 'programming': 0.22; 'code,': 0.23; 'seems': 0.23; 'header:In- Reply-To:1': 0.24; 'chris': 0.26; 'message-id:@mail.gmail.com': 0.27; 'actual': 0.28; 'intellectual': 0.29; 'allows': 0.30; '15,': 0.30; 'anyone': 0.32; 'anybody': 0.32; 'language.': 0.32; 'maybe': 0.33; 'run': 0.33; 'curious': 0.33; 'idle': 0.33; 'lock': 0.33; 'right?': 0.33; 'open': 0.33; 'case,': 0.34; 'tue,': 0.34; 'file': 0.34; 'running': 0.34; 'received:google.com': 0.35; 'clear': 0.35; 'files,': 0.35; 'but': 0.36; 'pm,': 0.36; 'subject:: ': 0.37; 'really': 0.37; 'expect': 0.37; 'front': 0.38; 'means': 0.39; 'application': 0.39; 'rather': 0.39; 'questions': 0.40; 'protection': 0.60; 'your': 0.60; 'more': 0.63; 'capable': 0.65; 'subject:your': 0.75; 'protect': 0.76; 'chrisa': 0.84; 'presumably': 0.84; 'to:none': 0.91; 'edwards': 0.91 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:cc :content-type:content-transfer-encoding; bh=baWtW7ruLRGoqPB4Llhe1MhPPzUhYjlA2EB0AXzhikA=; b=VZzwb8cYdgKbd5vCw9LjaeAPS2RW17StrXJwYpJYD8FeTrSwpCJ7NxArcAE2EJk84l 1EC7Skl8fm9qYea4I7fNvDO76kI+1Y3mcPURiDZrrq8Fv2ZNP4FvZjV1pbFcbWO8/oQW GqwFC31qRHz/SiiZk1IGAYcj38EK54Sjv38o87fV7Zm9folMXhJI5YalPUoeV41OEgYX 3nfV1/9b49/ATmyNM6JE0UJe4YZ9vgBFLJhzgdnGFuDyQI6atr5SgR/lQZU48pXdCgVj dqLCu7PbF64WMuVTqik2xOQab05d9VYYBgjHB7QVQGfFwwHng68Y0UEZ5cPmqf1vhPnr z2Ew== MIME-Version: 1.0 X-Received: by 10.50.3.66 with SMTP id a2mr5985746iga.92.1442323765463; Tue, 15 Sep 2015 06:29:25 -0700 (PDT) In-Reply-To: References: <42f12eba-2504-4a97-a5bc-e7b9bfe2f1f9@googlegroups.com> Date: Tue, 15 Sep 2015 23:29:25 +1000 Subject: Re: Pyarmor, guard your python scripts From: Chris Angelico Cc: "python-list@python.org" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.20+ Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 31 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1442323774 news.xs4all.nl 23819 [2001:888:2000:d::a6]:41968 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:96633 On Tue, Sep 15, 2015 at 11:16 PM, Grant Edwards w= rote: > On 2015-09-15, Chris Angelico wrote: >> On Tue, Sep 15, 2015 at 7:21 PM, Jondy Zhao wrote= : >>> Pyarmor is dedicated to users who create their applications, components= , scripts or any file with the help of the Python programming language. You= may use this application to encrypt the files, in order to protect their c= ontent and your intellectual property, by encoding the scripts. >>> >>> The program allows you to encrypt files, but to also open and run >>> them as if no protection was applied. >> >> If they can be run as if no protection had been applied, that >> presumably means the loader is capable of decrypting them, right? So >> what's to stop anyone from reading the loader, using it to decrypt >> the actual code, and running it? > > I rather expect the answer to that questions is "laziness". > > It's like the lock on my front door. It's not going to stop anybody > who really wants to get in, but it will prevent the idle curious from > wandering in and messing about with my stuff. Maybe. It seems more like having a lock on your front door, with the key permanently inside it. But maybe that's just me. In any case, this needs to be clear about how much security it's actually offering. ChrisA