Re: AppleScript feature request - encryption
Re: AppleScript feature request - encryption
- Subject: Re: AppleScript feature request - encryption
- From: Martin Orpen <email@hidden>
- Date: Tue, 15 Mar 2005 16:42:22 +0000
on 15/3/05 3:08 pm, has at email@hidden wrote:
> All you can really do is try to make cracking your scripts more
> effort than it's worth. For example, obfuscating important variable
> names and strings so they're less meaningful to anyone viewing the
> raw bytecode should at least deter casual snoopers.
Yeah, I'm thinking that variable names with more than 2 characters are going
to be avoided. I can comment the original scripts to avoid confusion if they
need amending in the future. And I'll probably break up my favourite shell
one-liners so that they're not nearly so easy to grab.
> OTOH, if your AppleScript code is particularly valuable, a reasonably
> determined cracker could reverse-engineer the AppleScript bytecode
> format and write a decompiler to convert your "read-only" compiled
> scripts back into source code. AppleScript, like other scripting
> languages, is designed for convenience, not for security.
I'm not after the *ultimate security solution*. But, rather than creating a
text file containing a bunch of AppleEvents in text format, surely it would
be fairly easy to dump the run-only files down another level so that we end
up with encrypted or binary data that cannot be interpreted without calling
on AppleScript's API?
Also, I think that we should have the option in Xcode to incorporate
AppleScripts into the C code prior to being compiled. Sticking them in a
clearly labelled folder inside an application makes them likely to attract
attention.
I've never really been bothered about hiding code - but there's something
about this project that makes me think it's a good idea...
--
Martin Orpen
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Applescript-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden