Path: csiph.com!newsfeed.hal-mli.net!feeder3.hal-mli.net!newsfeed.hal-mli.net!feeder1.hal-mli.net!news.tele.dk!feed118.news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.001 X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; 'python,': 0.02; 'broken': 0.04; 'source,': 0.04; 'perl,': 0.07; 'though:': 0.07; 'bash': 0.09; 'git': 0.09; 'rewrite': 0.09; 'scripts,': 0.09; 'cc:addr :python-list': 0.11; 'python': 0.11; "wouldn't": 0.14; '.py': 0.16; "can't.": 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'hard-coded': 0.16; 'icon': 0.16; 'sees': 0.16; 'subject:python': 0.16; 'files.': 0.16; 'sat,': 0.16; 'all.': 0.16; 'wrote:': 0.18; 'code.': 0.18; 'app': 0.19; 'trying': 0.19; 'written': 0.21; 'command': 0.22; 'code,': 0.22; 'shell': 0.22; 'cc:addr:python.org': 0.22; 'certainly': 0.24; 'cc:2**0': 0.24; "i've": 0.25; 'source': 0.25; 'compiled': 0.26; 'header:In-Reply- To:1': 0.27; 'michael': 0.29; 'am,': 0.29; "doesn't": 0.30; 'message-id:@mail.gmail.com': 0.30; 'work.': 0.31; 'code': 0.31; '(although': 0.31; 'keys': 0.31; 'with,': 0.31; 'probably': 0.32; 'know.': 0.32; 'languages': 0.32; 'run': 0.32; 'open': 0.33; 'could': 0.34; 'common': 0.35; 'but': 0.35; 'received:google.com': 0.35; 'there': 0.35; 'performance': 0.37; 'security,': 0.38; 'list,': 0.38; 'expect': 0.39; '12,': 0.39; 'heard': 0.39; 'either': 0.39; 'called': 0.40; 'users': 0.40; 'even': 0.60; 'easy': 0.60; 'algorithms': 0.60; 'most': 0.60; 'full': 0.61; 'matter': 0.61; "you're": 0.61; 'soon': 0.63; 'click': 0.77; 'absolutely.': 0.84; 'ebook': 0.84; 'launches': 0.84; 'upstream': 0.84; 'absolutely': 0.87; 'care,': 0.91; 'to:none': 0.92 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:cc :content-type; bh=VMLmYz7EUQGf/Ty8Jz4YoUJQsTTCCz2QpbOhVbqh8Lg=; b=r2KJsSSkCw5T44a1VC59b+uDBANRzli7lNfV4C8pMqio5Cl/YR3V9JzPy1QtsceqLA MAdd5zEn/Om1gUUsKlj0Q0LRwyBifDpMCPII6MMhn0mUIM1ZKM7vwu6wjQaCu0Ii4FAK YsdVF7wBbB3PMCu7rgBLgqyV+MUuiowhRca2gvzcC2zyNGWs+Sm7DVwwvm3fD3+YLYUj KjPO/DWykGFTCnUqOYaK3OjP2QQTvrvapt0Ml1Ju/scjHNxlEAolzR4TvzaW3EuhWU9Q LG4dloGWSDbe9b2KUlESRh12pER/CVXIhOaWb33rZixczZ30iUhIA2ZgAw7E8VB3mcxt IQlQ== MIME-Version: 1.0 X-Received: by 10.69.25.69 with SMTP id io5mr6650042pbd.22.1397230227259; Fri, 11 Apr 2014 08:30:27 -0700 (PDT) In-Reply-To: <534807EC.3090902@gmail.com> References: <534807EC.3090902@gmail.com> Date: Sat, 12 Apr 2014 01:30:27 +1000 Subject: Re: python obfuscate From: Chris Angelico Cc: "python-list@python.org" Content-Type: text/plain; charset=UTF-8 X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 27 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1397230235 news.xs4all.nl 2873 [2001:888:2000:d::a6]:44242 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:70146 On Sat, Apr 12, 2014 at 1:19 AM, Michael Torrie wrote: > Most end users will never know or care what you build the app with, even > if you have a directory full of open .py files. 99% of the users of a > popular ebook app called Calibre never know or care that it's made of > python and that you could go in and see the code. All they care about > is they can click an icon and the program launches and runs. Absolutely. When you run "hg something_or_other", you would expect that it's all written in Python, but some of it might not be, for all you know. Certainly with git there are several languages used (some are compiled binaries, some are shell scripts, some are Perl, gitk is TCL...), and it doesn't matter at all. Who cares? I type a command and it runs. If upstream decides to rewrite bash in Lua, I won't much care, and probably wouldn't even know (although somehow I suspect performance would drop... slightly...). Adding to your list, though: If you're trying to hide your source code for security, absolutely DO NOT! This is one of the most common reasons I've heard of; either because the "cryptographic" algorithms are hand-rolled and easy to reverse-engineer if you have the source, or because the keys are hard-coded in the program. Either way, you can't. It just won't work. People can get at your crypto, and if it's broken as soon as someone sees the source code, it's weak crypto to start with. ChrisA