Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.python > #96645

Re: Pyarmor, guard your python scripts

Show key headers only | View raw

On Wed, Sep 16, 2015 at 2:40 AM, Grant Edwards <invalid@invalid.invalid> wrote:
> On 2015-09-15, Chris Angelico <rosuav@gmail.com> wrote:
>>
>>> I you may be underestimating the laziness and overestimating the
>>> cleverness of most people. ;)
>>
>> Heh :) But in that case, you can probably get away with just
>> zipimport. Deflation sure isn't encryption, but the code is pretty
>> thoroughly concealed anyway.
>
> I agree completely.  There are three categories of protection:
>
>   1) The program never leaves your computer.
>
>   2) Obfuscation to deter the idle curious from mucking about.
>
>   3) Put the source code on the interwebs.

Agreed. #3 is the protection that I use for most of my code, and it's
protected me several times from a threat that's far more serious (in
my mind) than someone ripping off my code: it's kept my code safe from
hard drive failures. Yeah, nothing like seeing errors spewing off a
drive that's suddenly died to make you appreciate distributed source
control! (Oh look, my private key is no longer accessible. How
terrible... I have to go to GitHub and register a new public key
before I can continue development. That's gonna set me back... five
whole minutes!)

#1 wasn't really viable until the always-on internet connection became
a normal thing, but today, it's actually pretty easy. Shove your
application up onto cheap hosting somewhere, and make it accessible
via the web... anyone can do it, and your code needs no obfuscation to
be truly secure.

> In category 2 you find the single-file/directory-app bundlers[1]
> (which IIRC mostly use something like zipimport) and various other
> "encryption" wrappers.  They all provide pretty much the same minimal
> "protection".
>
> [1] Most of which are intended to provide ease of distribution and
>     installation -- the obfuscation is mostly a side-effect.

Right. Anyone who thinks zipapp is good for security is wrong, but it
sure can be handy for packaging up a one-click "here, download and run
this" Windows .exe file. Any obfuscation should be seen as a freebie,
on par with the toy you get in a fast-food meal.

ChrisA

Back to comp.lang.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Pyarmor, guard your python scripts Jondy Zhao <jondy.zhao@gmail.com> - 2015-09-15 02:21 -0700
  Re: Pyarmor, guard your python scripts Ben Finney <ben+python@benfinney.id.au> - 2015-09-15 19:36 +1000
    Re: Pyarmor, guard your python scripts Jondy Zhao <jondy.zhao@gmail.com> - 2015-09-17 18:58 -0700
      Re: Pyarmor, guard your python scripts Chris Angelico <rosuav@gmail.com> - 2015-09-18 12:05 +1000
        Re: Pyarmor, guard your python scripts Jondy Zhao <jondy.zhao@gmail.com> - 2015-09-17 19:51 -0700
      Re: Pyarmor, guard your python scripts Ben Finney <ben+python@benfinney.id.au> - 2015-09-18 12:27 +1000
        Re: Pyarmor, guard your python scripts Jondy Zhao <jondy.zhao@gmail.com> - 2015-09-17 19:59 -0700
          Re: Pyarmor, guard your python scripts Ben Finney <ben+python@benfinney.id.au> - 2015-09-18 13:06 +1000
            Re: Pyarmor, guard your python scripts Jondy Zhao <jondy.zhao@gmail.com> - 2015-09-17 22:55 -0700
              Re: Pyarmor, guard your python scripts Chris Angelico <rosuav@gmail.com> - 2015-09-18 17:27 +1000
                Re: Pyarmor, guard your python scripts Jondy Zhao <jondy.zhao@gmail.com> - 2015-09-18 01:05 -0700
                Re: Pyarmor, guard your python scripts Chris Angelico <rosuav@gmail.com> - 2015-09-18 18:16 +1000
              Re: Pyarmor, guard your python scripts sohcahtoa82@gmail.com - 2015-10-05 12:44 -0700
  Re: Pyarmor, guard your python scripts Chris Angelico <rosuav@gmail.com> - 2015-09-15 19:48 +1000
    Re: Pyarmor, guard your python scripts Grant Edwards <invalid@invalid.invalid> - 2015-09-15 13:16 +0000
      Re: Pyarmor, guard your python scripts Chris Angelico <rosuav@gmail.com> - 2015-09-15 23:29 +1000
        Re: Pyarmor, guard your python scripts Grant Edwards <invalid@invalid.invalid> - 2015-09-15 16:20 +0000
          Re: Pyarmor, guard your python scripts Chris Angelico <rosuav@gmail.com> - 2015-09-16 02:29 +1000
            Re: Pyarmor, guard your python scripts Grant Edwards <invalid@invalid.invalid> - 2015-09-15 16:40 +0000
              Re: Pyarmor, guard your python scripts Chris Angelico <rosuav@gmail.com> - 2015-09-16 02:59 +1000
    Re: Pyarmor, guard your python scripts Jondy Zhao <jondy.zhao@gmail.com> - 2015-09-17 19:40 -0700
      Re: Pyarmor, guard your python scripts Chris Angelico <rosuav@gmail.com> - 2015-09-18 15:01 +1000
        Re: Pyarmor, guard your python scripts Jondy Zhao <jondy.zhao@gmail.com> - 2015-09-17 22:38 -0700
          Re: Pyarmor, guard your python scripts alister <alister.nospam.ware@ntlworld.com> - 2015-09-18 08:08 +0000
            Re: Pyarmor, guard your python scripts Jondy Zhao <jondy.zhao@gmail.com> - 2015-09-18 01:31 -0700
              Re: Pyarmor, guard your python scripts alister <alister.nospam.ware@ntlworld.com> - 2015-09-18 10:06 +0000
                Re: Pyarmor, guard your python scripts Jondy Zhao <jondy.zhao@gmail.com> - 2015-09-18 04:41 -0700
                Re: Pyarmor, guard your python scripts Ben Finney <ben+python@benfinney.id.au> - 2015-09-18 21:52 +1000
                Re: Pyarmor, guard your python scripts Lorenzo Sutton <lorenzofsutton@gmail.com> - 2015-09-18 15:07 +0200
                Re: Pyarmor, guard your python scripts Jondy Zhao <jondy.zhao@gmail.com> - 2015-09-18 06:57 -0700
                Re: Pyarmor, guard your python scripts Josef Pktd <josef.pktd@gmail.com> - 2015-10-05 08:55 -0700
                Re: Pyarmor, guard your python scripts Ben Finney <ben+python@benfinney.id.au> - 2015-10-06 09:25 +1100
                Re: Pyarmor, guard your python scripts Josef Pktd <josef.pktd@gmail.com> - 2015-10-06 07:35 -0700

csiph-web