Je, nitumie electron kudevelop desktop App?

[Ultimate]

Yangu ni kumtafuta guru wa security kama hilo eneo bado hujawa master. Mlipe guru fanya sehemu yako afanye sehemu yake.
My doubt is kama tunaweza kupata window za billgate utafanya nini kuwazuia watu ambao kazi yao ni kuhack na kutumia vya wenzao.
Zingatia wazo la mdau hapo juu. Weka gharama ndogo ili hacker asishawishike maana haitamlipa.
Jambo lingine unda virus, mkuda yoyote atayefanya jaribio la kupata free access basi naye apate chake.
Hapa sina utaalamu kuwa kama ukiambatanisha virus je anaweza bypass antivirus ya user iwapo mtumiaji atakiuka licence. Sijajua vile vile kama inakubarika kisheria.
Wataalamu bobevu wanaweza changia hapa kama inakubarika na inawezekana.

Ulicho andika hapa ulisha wahi kuki apply?

 

[mathsjery]

Code Obfuscation

Ahsante kwa hii hapa nitaizingatia huko kwa c++ hapana

 

[mathsjery]

Kwanini usiiuze kwa bei/mfumo ambao mtu hatabugudhika kutamper bali ataona urahisi kulipia?

ukiuza si inakuwa yake naye anaweza kuiuza hapa nakuwa namtegenezea ajira mtu, labda unaweza kuweka nyama kidogo.
Natafuta solution nzuri japo kupunguza unyama wa wazee wa kumodify mimi naweza umia maana sitaiona faida.

Mfano mzuri, hii ____(siitaji jina) iko kwenye mahosipital ya serikali niliwahi kusimamia kama IT Aise nilikuta imehostiwa local kwenye desktop computer iliyofanywa server na inakuwa accessed on local area network. sasa iko kwenye xampp japo sikuwahi ikopi na sijui ndani ya code kukoje, je ningekopy nikawa na lengo la kumodify since kuna hosipital kibao za private ningeuza inajitosheleza kwa feature zote za hospital.

nb, sikuifatilia sana zaidi ya kiufanya kilichoniweka pale.

 

[Ivan Stepanov]

Hapo ni balance kati ya security na convenience.

The more unavyojaribu kuifanya iwe secure dhidi ya kutamper na license yako, the more inavyokuwa inconvenient kwa valid user.

Kwanini usiiuze kwa bei/mfumo ambao mtu hatabugudhika kutamper bali ataona urahisi kulipia?

Ukitengeneza customer loyalty watakutafuta kwa lolote.

Au solve a difficult problem that is core to their business such that wakuhitaji.

Binafsi nna webbased software nimeinstall kwa wateja 50 ndani na nje ya nchi without any meaningful ip protection, wanaitegemea for their core daily operations na wanalipa periodically in the name of maintenance.

Case yako ikoje mkuu?

Simple straight and clear.

 

[mathsjery]

Case yako ikoje mkuu?

cycle ya business nakoipeleka wamiliki hawataki za kuhost online wanataka watumie even offline kwenye desktop zao, Je unanisaidiaje hapa?

 

[mathsjery]

Umejiandaaje kwa hackers maana software za billgate ambazo ni fake zimejaa tele vipi umejiandaaje kuwazuia ma geneus wasipate free access?

hii hainitishi naangalia kupunguza makali yao, hata wakiweza access wawe wamechoka kama navyochoka hapa mkuu kuliko kujipigia kwa haraka wakatengeneza firm yao

 

[Cybergates]

Programming language yoyote inayo compile kwenda Byte Code afu byte codes zika run kwenye virtual environment kama ilivo Java kwa JVM na C# kwa .NET Framework, bas jua hiyo unaweza decompile kirahisi kabisa ukasoma logic ya activation code.
Huu mchezo nimeufanya sana kwenye .jar file za Java na .exe files za C-Sharp.
C-Sharp ndo maisha ni marahisi kabisa Resharper tu peke yake ina decompile code, siku hizi Jetbrains wana hadi tool ya ku decompile code.

Zingatia mdau kasema anaenda kuuza software kwenye sehemu wana IT wao.

dotPeek: Free .NET Decompiler & Assembly Browser by JetBrains

dotPeek is a free tool based on ReSharper. It can reliably decompile any .NET assembly into C# or IL code.

www.jetbrains.com

Namshauri mdau kama ata OPT for C# basi afanye kitu inaitwa Code Obfuscation, na nafikiri kuna free na paid softwares za kufanya hiki kitu.
Developers wengi wa android apps wanafanya Code ubfuscation kuzuia users wanaotaka ku develop competitive apps wasiweze kuelewa logic zao.

The only language nayojua hauwezi ku decompile bila kuwa advanced user unae elewa Assembly language ni programming language ambazo zina compile kwenda Machine code kama C++ au C.

Kwa C++ kuna framework kama Qt Framework au wxWidgets(unyama wa Stefano Mtangoo)

Kama haujawai kuwa passionate na C++ hizo frameworks za wxWidgets usiguse kabisa songa mbele na C#

Seriously???, obfuscation!

Sidhani kama ni maana sana kutumia hii method kwenye development.

obfuscation nilikua natumia kwenye malware analysis. Kote kuanzia development hadi detection kujua hii malware unafanya nini na endpoint inazotuma data ni wapi.

Principle ngumu sana hii sio rahisi kwa program nzima iwe hivyo. Labda useme sensitive file mbazo zime contain primary logic tu

 

[Njunwa Wamavoko]

Seriously???, obfuscation!

Sidhani kama ni maana sana kutumia hii method kwenye development.

obfuscation nilikua natumia kwenye malware analysis. Kote kuanzia development hadi detection kujua hii malware unafanya nini na endpoint inazotuma data ni wapi.

Principle ngumu sana hii sio rahisi kwa program nzima iwe hivyo. Labda useme sensitive file mbazo zime contain primary logic tu

Haiwi manual process mkuu.
You write code to do that for you.
Nimeona mtu anaefanya hii kitu mkuu kwa codebase ya android application nzima, siongei theoretically.

Nimewai lipia pia tool ya ku Obfuscate Desktop app ya Javax

If you cant write code, kuna tools za kulipia kwa ajili ya hii kazi.


The choice is yours mwisho wa siku unataka kuficha nini

Tafuta .exe file ya famous program inaitwa TunnelGuru, imeandikwa java, decompile uone codebase yote ilivo Obfuscated
Tafuta android app inaitwa eProxy, uone extent ya Obfuscation ilofanyika.

Kuna apps bila Obfuscation ya code expect massive competitors watakaokuja kuku overthrow kwenye market.

It all dependa logic za program yako, kama ni hizi basic CRUD operations, hauwezi kuona maana ya ku obfuscate code

 

[Cybergates]

Haiwi manual process mkuu.
You write code to do that for you.
Nimeona mtu anaefanya hii kitu mkuu kwa codebase ya android application nzima, siongei theoretically.

Nimewai lipia pia tool ya ku Obfuscate Desktop app ya Javax

If you cant write code, kuna tools za kulipia kwa ajili ya hii kazi.


The choice is yours mwisho wa siku unataka kuficha nini

Tafuta .exe file ya famous program inaitwa TunnelGuru, imeandikwa java, decompile uone codebase yote ilivo Obfuscated
Tafuta android app inaitwa eProxy, uone extent ya Obfuscation ilofanyika.

Kuna apps bila Obfuscation ya code expect massive competitors watakaokuja kuku overthrow kwenye market.

It all dependa logic za program yako, kama ni hizi basic CRUD operations, hauwezi kuona maana ya ku obfuscate code

Hamna chochote, app zote mbili monolith zipo open baadhi ya file zipo Uglify sio obfuscate. Uglify inaharibu format na kubadili variable name.


codebase iyo hapi naweza ku edit code naku clone navyotaka

 

[Njunwa Wamavoko]

View attachment 2843759
Hamna chochote, app zote mbili monolith zipo open baadhi ya file zipo Uglify sio obfuscate. Uglify inaharibu format na kubadili variable name.


codebase iyo hapi naweza ku edit code naku clone navyotaka

Ili tuwekena sawa kwanza what is Uglify and what is obfuscation? and what makes them different?
Do we use code uglification in Java/C# or its commonly used term in Javascrip code?

Bytecode Obfuscation | OWASP Foundation

Bytecode Obfuscation on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.

owasp.org

Lakini pia sijaweza ona core logic ya eProxy kwenye hiyo picha yako ambayo ni ku modify network request ya user.
how easy is it at first instance kutafuta hiyo logic wakati unaona class zina majina kama 'a', 'b' etc ?, how easy is it kuona entry point ya hicho kitu kwenye hiyo code base?
maana nachokiona hapo ww unanionesha code ya PrintStackTrace?

Ndani ya hii codebase unatakiwa uelewe pia humo humo ndo kuna logic ya ku obsfuscte code zenyewe.
ambayo yenywewe haiwi obfuscated.
Lakini pia ndani ya codebase humo ametumia OpenSource tools kama Tun2Socks, OpenVPN za android ambazo hazijawa obfuscated.

I have researched on this tool kwa mda mrefu sikuwai kuweza kuona logic yake popote na kuna version nyingine ndo ilikua balaa alikua anaship core logic yake kama .SO file ambalo alikua ana li load ndani ya app. Uki decompile unakutana na takataka tupu hauoni core logic yake.

All in all huu mjdala hautofika mwisho, nilichotaka kusema hapa ni kuwa all languages compiled to Bytecodes zinakua decompiled na reverse engineered kirahisi kabisa kushinda kitu chochote na hauwezi compaare hata na languages compiled to machine code.

One of the approach, commonly used ni code Obfuscation, if in the world, one can read assembly code, hawezi shindwa soma Obfuscated code.
Unachofanya tu ni kumtesa mtu hakose motivation ya kuendelea kusoma code zako, the moment kuna mtu kaandika Code Obfuscator kuna watu wanaandika Code Deobfuscator kuongeza readability ya code ulokua umeivuruga.

I am glad hata wewe uliesema sio rahisiI(ni complicated sana) ku reverse engineer language inayokua compiled kwenye bytecode umeweza ku decompile app na kutuwekea source code kama ushahidi wa mfano wa app inayokua compiled kuja Bytecode. Na ukasisitiza unaweza reuse code na constraint uliyoiona tu ni kitu ulichokiita uglification(ambacho utaiitaji ku research zaidi uone kama hizo code ulizoziona ziko Uglified au Obfuscated)

 

[ISO M.CodD]

ukiuza si inakuwa yake naye anaweza kuiuza hapa nakuwa namtegenezea ajira mtu, labda unaweza kuweka nyama kidogo.
Natafuta solution nzuri japo kupunguza unyama wa wazee wa kumodify mimi naweza umia maana sitaiona faida.

Mfano mzuri, hii ____(siitaji jina) iko kwenye mahosipital ya serikali niliwahi kusimamia kama IT Aise nilikuta imehostiwa local kwenye desktop computer iliyofanywa server na inakuwa accessed on local area network. sasa iko kwenye xampp japo sikuwahi ikopi na sijui ndani ya code kukoje, je ningekopy nikawa na lengo la kumodify since kuna hosipital kibao za private ningeuza inajitosheleza kwa feature zote za hospital.

nb, sikuifatilia sana zaidi ya kiufanya kilichoniweka pale.

Na mimi nimeiona pia hiyo system kwenye hospitali za serikali. Imetengenezwa na laravel.

Ultimately, ni ngumu kuuza system ya mtu as if umeitengeneza wewe. When things go to shit utaweza kuexplain na kufix? Watu wenye uwezo wa kuiuza na kuiendeleza hawana huo muda, wana mambo ya kufanya - kama wewe ulivyoiona ukaipotezea ukaendelea na mambo yako.

Unless ni system rahisi au inafanya jambo rahisi ambalo sio core wala customized kwa mteja, then somebody can sale it. But that also means it won't fetch a premium price.

Sielewi kwa case yako mimi nimesema tu muhimu ni balance kati ya security na usability nikakupa na uzoefu wangu. Nina miaka kama 8 na hii product.