Re: VB6+ Article in VSM by Bill McCarthy

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Peter Young (youngpa_at_attbi.no.com.spam.please)
Date: 03/09/04 

Date: Tue, 9 Mar 2004 11:57:58 -0600

"Dan Barclay" <Dan@mvps.org> wrote in message news:%233fSXkfBEHA.3804@TK2MSFTNGP09.phx.gbl...
> "Peter Young" <youngpa@attbi.no.com.spam.please> wrote in message
> news:%23Er86ueBEHA.2888@TK2MSFTNGP09.phx.gbl...
>
> > The bigger difference and the one that matters more to me is the plain
> fact that .Net assemblies can be so easily
> > decompiled into source code. As a test, I downloaded Desaware's Licensing
> product, ran it through the Salamander .Net
> > decompiler and had C# source code. Not secure by any measure.
>
> Bingo. Now, standby for some folks to come to the defense of that by saying
> we should be using obsfuscators...

I'm pretty sure Desaware's code *is* obfuscated, based on the fact that I was not able to decompile it with a freebie
decompiler (Reflector) but instead had to use Salamander, which handles obfuscated code just fine. I know Appleman sells
an eBook on how to obfuscate, so presumably he uses it himself.

As an aside, I find it interesting that until now, the source for his products was never available, but now that .Net is
around and classic VB use is (presumably) waning, he is selling his products with source. Looks to me like a marketing
ploy for the COM stuff that nobody wants anymore, and .Net stuff which can be decompiled.

>
> Unfortunately, MS has made reliance on IL at runtime a fundamental
> architectural issue for some reason and don't seem at all interested in
> backing off that position.

They don't want people using Win32 directly. Windows 2000 is a terrific OS. Businesses don't have a compelling reason to
upgrade. If developers target a virtual machine, Win32 support can disappear and businesses will be required to upgrade.
I believe this is all a part of planned obsolescence. This is one of the ways that MS is ensuring they have a viable
revenue stream into the future.

-Pete

Relevant Pages

  • Re: String / Character Conversion Question
    ... >> But in regards to obfuscating source code, let's say if you did compile ... Or do you mean compile, ... And which decompiler would you be talking about? ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: String / Character Conversion Question
    ... >> But in regards to obfuscating source code, let's say if you did compile ... Or do you mean compile, ... And which decompiler would you be talking about? ...
    (microsoft.public.dotnet.framework)
  • Re: String / Character Conversion Question
    ... >> But in regards to obfuscating source code, let's say if you did compile ... Or do you mean compile, ... And which decompiler would you be talking about? ...
    (microsoft.public.dotnet.general)
  • Re: Reverse Engineering
    ... >executable back to the Ada source isn't possible. ... Such a tool is called a "decompiler". ... to the original source code, but it can generate source code which is ... The intent was to take existing executables, ...
    (comp.lang.ada)
  • [Announce] pyobfuscate
    ... I've written a Python source code obfuscator. ... pyobfuscate is a source code obfuscator: ... obfuscate the interface between several files. ...
    (comp.lang.python)