Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.python > #30375 > unrolled thread

Python source code easy to hack?

Back to article view | Back to comp.lang.python

Contents

  Python source code easy to hack? Jayden <jayden.shui@gmail.com> - 2012-09-28 04:57 -0700
    Re: Python source code easy to hack? Mark Lawrence <breamoreboy@yahoo.co.uk> - 2012-09-28 13:17 +0100
      Re: Python source code easy to hack? zig-zag <zig-zag@yahoo.com> - 2012-09-28 14:30 +0200
    Re: Python source code easy to hack? sturla@molden.no - 2012-09-28 07:18 -0700
      Re: Python source code easy to hack? Jerry Hill <malaclypse2@gmail.com> - 2012-09-28 10:38 -0400
        Re: Python source code easy to hack? sturla@molden.no - 2012-09-28 08:19 -0700
          Re: Python source code easy to hack? "Littlefield, Tyler" <tyler@tysdomain.com> - 2012-09-28 09:56 -0600
        Re: Python source code easy to hack? sturla@molden.no - 2012-09-28 08:19 -0700
    Re: Python source code easy to hack? 88888 Dihedral <dihedral88888@googlemail.com> - 2012-09-28 10:37 -0700

#30375 — Python source code easy to hack?

Dear All,

I have a concern in developing commercial code with Python. Someone told me that its program can be easily hacked to get its source code. Is it really the case? Any way to protect your source code?

Thanks a lot!

Jayden

[toc] | [next] | [standalone]

#30378

On 28/09/2012 12:57, Jayden wrote:
> Dear All,
>
> I have a concern in developing commercial code with Python. Someone told me that its program can be easily hacked to get its source code. Is it really the case? Any way to protect your source code?
>
> Thanks a lot!
>
> Jayden
>

This question has been asked on numerous occasions so if you search the 
archives you're sure to get loads of answers.

-- 
Cheers.

Mark Lawrence.

[toc] | [prev] | [next] | [standalone]

#30379

On 09/28/2012 02:17 PM, Mark Lawrence wrote:
> On 28/09/2012 12:57, Jayden wrote:
>> Dear All,
>>
>> I have a concern in developing commercial code with Python. Someone
>> told me that its program can be easily hacked to get its source code.
>> Is it really the case? Any way to protect your source code?
>>
>> Thanks a lot!
>>
>> Jayden
>>
>
> This question has been asked on numerous occasions so if you search the
> archives you're sure to get loads of answers.
>

http://stackoverflow.com/questions/261638/how-do-i-protect-python-code
http://stackoverflow.com/questions/164137/how-do-i-deploy-a-python-desktop-application

[toc] | [prev] | [next] | [standalone]

#30390

kl. 13:57:14 UTC+2 fredag 28. september 2012 skrev Jayden følgende:
> Dear All, I have a concern in developing commercial code with Python. Someone told me that its program can be easily hacked to get its source code. Is it really the case? Any way to protect your source code? Thanks a lot! Jayden


Python bytecode is not easier to hack than Java or .NET bytecodes. You don't have to distribute your source code. Dropbox and BitTorrent are written in Python. I don't think "hacking the source" is a major problem. You also have the option of compiling parts of the source code to native C DLLs using Cython. If you are very paranoid about protecting your sources, perhaps you shouldn't distribute it at all, but provide a web application?

Sturla

[toc] | [prev] | [next] | [standalone]

#30392

On Fri, Sep 28, 2012 at 10:18 AM,  <sturla@molden.no> wrote:
> Python bytecode is not easier to hack than Java or .NET bytecodes.

This is true, but both java and .net are also relatively easy to decompile.

In general though, why does it matter?  What are you trying to protect
yourself against?  If you're including secrets in your code like
encryption keys or bank account numbers, there's no way to keep them
out of the hands of a determined attacker that has access to your
file, no matter what language it may be written in.

If you must keep anyone from ever seeing how your code works, the only
way to do that is to keep all the sensitive bits running on a machine
that you control.  Typically, you would do that by distributing a
client portion of your application, and also running a web service.
Then you can have your client connect to the web service, request that
the sensitive calculations, or money transfer, or whatever, be done on
the server, and just pass back the results.

-- 
Jerry

[toc] | [prev] | [next] | [standalone]

#30401

kl. 16:38:10 UTC+2 fredag 28. september 2012 skrev Jerry Hill følgende:

> This is true, but both java and .net are also relatively easy to decompile. 

Neither of them are very "obfuscated". 


> In general though, why does it matter? 

Paranoia among managers?


> What are you trying to protect yourself against? 

Embarassment? 

Patent trolls? 

Unauthorized access to priviledged features?

Industrial espionage?


> If you must keep anyone from ever seeing how your code works, the only way to do that is to keep all the sensitive bits running on a machine that you control. 

Indeed :) 



Sturla

[toc] | [prev] | [next] | [standalone]

#30411

On 9/28/2012 9:19 AM, sturla@molden.no wrote:
> kl. 16:38:10 UTC+2 fredag 28. september 2012 skrev Jerry Hill følgende:
>
>> This is true, but both java and .net are also relatively easy to decompile.
> Neither of them are very "obfuscated".
>
>
>> In general though, why does it matter?
> Paranoia among managers?
>
>
>> What are you trying to protect yourself against?

Embarassment?

Patent trolls?

Unauthorized access to priviledged features?

Industrial espionage?

Sounds like a web solution is the best way. Use a thin client and run your NSA-level code on a server. It's worth pointing out though that even c/c++ isn't free. If someone wants to decompile or disassemble your code bad enough, it's going to happen.
  

>> If you must keep anyone from ever seeing how your code works, the only way to do that is to keep all the sensitive bits running on a machine that you control.
> Indeed :)
>
>
>
> Sturla


-- 
Take care,
Ty
http://tds-solutions.net
The aspen project: a barebones light-weight mud engine:
http://code.google.com/p/aspenmud
He that will not reason is a bigot; he that cannot reason is a fool; he that dares not reason is a slave.

[toc] | [prev] | [next] | [standalone]

#30402

kl. 16:38:10 UTC+2 fredag 28. september 2012 skrev Jerry Hill følgende:

> This is true, but both java and .net are also relatively easy to decompile. 

Neither of them are very "obfuscated". 


> In general though, why does it matter? 

Paranoia among managers?


> What are you trying to protect yourself against? 

Embarassment? 

Patent trolls? 

Unauthorized access to priviledged features?

Industrial espionage?


> If you must keep anyone from ever seeing how your code works, the only way to do that is to keep all the sensitive bits running on a machine that you control. 

Indeed :) 



Sturla

[toc] | [prev] | [next] | [standalone]

#30418

Jayden於 2012年9月28日星期五UTC+8下午7時57分14秒寫道：
> Dear All,
> 
> 
> 
> I have a concern in developing commercial code with Python. Someone told me that its program can be easily hacked to get its source code. Is it really the case? Any way to protect your source code?
> 
> 
> 
> Thanks a lot!
> 
> 
> 
> Jayden

Nowadays high priced commercial IDE software products shipped  with a 
built in interpreter with some GUI to let users customize their own
needs in designs. This also means examples in source codes to 
be provided, too.

Anyway even compiled instructions can be iced and reverse engineered
for all the flows of the software.

[toc] | [prev] | [standalone]

Back to top | Article view | comp.lang.python

csiph-web