Hack Forums
[C#] Protect soft so it won't leak the Source Code - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] Protect soft so it won't leak the Source Code (/showthread.php?tid=5969206)

Pages: Pages 1 2 3


RE: Protect soft so it won't leak the Source Code - 0xDEAD10CC - May 17, 2019

(May 17, 2019 07:50 AM)Washi Wrote:  Instead of just saying "no I am right", actually provide a counter-argument. Now you're just making a fool out of yourself.

This is all I'm observing too at this point. I emphasized my main points yet he continues to ask the same question as though he can't see what has been posted. I will let those who want to be right believe what they want, as it isn't going to change reality. If they ever open up to the real world they will see that not everything is as they see it.


RE: Protect soft so it won't leak the Source Code - JUSTIN - May 17, 2019

(May 17, 2019 06:43 AM)Aristocles Wrote:  "i'm just letting you know that obfuscation typically wont result in a program running slower."

In general, obfuscation by renaming variables, methods, and classnames to more meaningless names does not impact performance (note that it CAN). Some vendors of obfuscation software even claim that aside from obfuscation, there is also a performance gain as much as 30%. Although I have never tested these claims, have never seen them proven, and therefore find them hard to believe.

However, do keep in mind that some software also enables flow obfuscation: adding meaningless control loops to statements so the code is harder to follow. That does have a negative effect on performance, albeit small.

I am in absolute awe that you've just plagiarized a StackOverflow post, quite literally copying it word for word: https://stackoverflow.com/a/2454559/5699643

I've already explained why this person isn't correct twice. The only methods of obfuscation which will typically have a true impact on performance are related to virtualization, which need to interpret two sets of instructions rather than one. I don't think you understand how .NET assemblies are even compiled. I recommend reading this article, even though I know you wont, since you seem to have trouble with reading: https://www.telerik.com/blogs/understanding-net-just-in-time-compilation

Even disregarding the performance implications that remote code execution has on an application, there are other reasons that it's not always the best choice.
You've made is apparent that you refuse to admit that you're wrong despite being corrected by 3 people. You also copy/pasted somebody's response from StackOverflow, which is embarrassing enough as it is. This feels like a waste of time.


RE: Protect soft so it won't leak the Source Code - 0xDEAD10CC - May 17, 2019

(May 17, 2019 07:05 PM)JUSTIN Wrote:  I am in absolute awe that you've just plagiarized a StackOverflow post, quite literally copying it word for word: https://stackoverflow.com/a/2454559/5699643

🤣

Why google any of this to write a response with unless you don't know what you're talking about? I think now it's pretty evident who is dictating web content and who is speaking from experience within this thread. Waste of time.


RE: Protect soft so it won't leak the Source Code - zrcccc - May 18, 2019

(May 17, 2019 07:39 AM)th3s3cr3t0n3 Wrote:  ConfuserEx is a pretty good tool, I've used it and automated the obfuscation by writing a batch file that runs on a build action.

It works really well and breaks any deobfuscation tool that tries to read it when you use the correct configurations. I've never asked anyone to try and reverse engineer the resultant DLLs though.

CEX is SO old and if you don't mod it A LOT will be easily cracked.


RE: Protect soft so it won't leak the Source Code - Washi - May 18, 2019

(May 17, 2019 07:05 PM)JUSTIN Wrote:  I am in absolute awe that you've just plagiarized a StackOverflow post, quite literally copying it word for word: https://stackoverflow.com/a/2454559/5699643

Lmao legendary find 🤣

This is a textbook case of "you done goofed".

Thanks for making my day 😁


RE: Protect soft so it won't leak the Source Code - Aristocles - May 18, 2019

Nothing wrong to copy an SO reply ? Again if you don't want to understand no problem, continue to show off on such forum while claiming there are only HF kids etc. Clearly OP is not coming from the profesionnal world at all. Hence why my advice is the best. No matter what you say.

Also JUSTIN I'm the owner of an obfuscator, so I know how obfuscation and MSIL compilation works. Hence why I'm right to state (SO copied) that obfuscation will, nowadays, slow your app. "The only methods of obfuscation which will typically have a true impact on performance are related to virtualization" this is absolutely false. Head over ConfuserEx, or beds github current project and apply bunch of features on a test app, you will see no virtualization-related feature yet it will make the app slower.


RE: Protect soft so it won't leak the Source Code - 0xDEAD10CC - May 18, 2019

(May 18, 2019 10:16 AM)Aristocles Wrote:  Nothing wrong to copy an SO reply ? Again if you don't want to understand no problem, continue to show off on such forum while claiming there are only HF kids etc. Clearly OP is not coming from the profesionnal world at all. Hence why my advice is the best. No matter what you say.

Also JUSTIN I'm the owner of an obfuscator, so I know how obfuscation and MSIL compilation works. Hence why I'm right to state (SO copied) that obfuscation will, nowadays, slow your app. "The only methods of obfuscation which will typically have a true impact on performance are related to virtualization" this is absolutely false. Head over ConfuserEx, or beds github current project and apply bunch of features on a test app, you will see no virtualization-related feature yet it will make the app slower.

You tried to credit it as your own words, so you can't say that there's nothing wrong with "copying" an SO reply because typically people copy to make a citation, rather than to copy and paste it as the body of their own text. You even copied it from a Java thread on SO which is pretty silly, even though the reply is still relatable.

If he's not coming from the professional world, then what makes you think he'll be able to create an appropriate back-end for a full SAAS solution, regarding scalability, security, etc. There are other challenges involved in doing this properly that you haven't mentioned. If it is freeware too, then he'd also be losing money on having a hosted service provided to his users.

Without knowing what his project specific needs are, you'd be pretty naive to claim that your solution is the best with such a lack of information. He hasn't even explained what his program does.

Lastly, being the owner of an obfuscator doesn't inherently mean you know anything, it just means you have the rights to a product (that may or may not be all your work internally). Otherwise, using your logic I could say that I know everything about websites because I created one with Wix, lol.

You fail to see the perspective that other users are taking when they reply to you saying that it may not always be the best solution, in your deluded omniscience.


RE: Protect soft so it won't leak the Source Code - Aristocles - May 18, 2019

(May 18, 2019 11:18 AM)0xDEAD10CC Wrote:  You tried to credit it as your own words, so you can't say that there's nothing wrong with "copying" an SO reply because typically people copy to make a citation, rather than to copy and paste it as the body of their own text. You even copied it from a Java thread on SO which is pretty silly, even though the reply is still relatable.

If he's not coming from the professional world, then what makes you think he'll be able to create an appropriate back-end for a full SAAS solution, regarding scalability, security, etc. There are other challenges involved in doing this properly that you haven't mentioned. If it is freeware too, then he'd also be losing money on having a hosted service provided to his users.

Without knowing what his project specific needs are, you'd be pretty naive to claim that your solution is the best with such a lack of information. He hasn't even explained what his program does.

Lastly, being the owner of an obfuscator doesn't inherently mean you know anything, it just means you have the rights to a product (that may or may not be all your work internally). Otherwise, using your logic I could say that I know everything about websites because I created one with Wix, lol.

You fail to see the perspective that other users are taking when they reply to you saying that it may not always be the best solution, in your deluded omniscience.
i never claimed it was my reply, I never took credit for it, I even inserted spaces and new lines you can clearly see its different but if you say that I took credit go for it.
Also whats wrong with java ? nothing, you are making useless proposition.

He's not comin from a profesionnal world that doesn't mean he can't afford already-existing SaaS solution for what he wants. Again, you are making useless proposotion.

I don't need to know what his program does to know my solution is the best when its a possible solution. That's what I originally stated, and you guys came with your fake argument etc.

Being the owner and main dev of an obfuscator for .NET Framework compiled programs doesn't mean I know anything about MSIL, obfuscation, yes you are right. Of course no you are not right, on the contrary you are again making some useless proposotion.

🎉 bang bang got a couple bytes from my last donation next guy to reply is gonna have full load of bytes


RE: Protect soft so it won't leak the Source Code - Jacked - May 18, 2019

(May 18, 2019 12:00 PM)Aristocles Wrote:  i never claimed it was my reply, I never took credit for it, I even inserted spaces and new lines you can clearly see its different but if you say that I took credit go for it.
Also whats wrong with java ? nothing, you are making useless proposition.

He's not comin from a profesionnal world that doesn't mean he can't afford already-existing SaaS solution for what he wants. Again, you are making useless proposotion.

I don't need to know what his program does to know my solution is the best when its a possible solution. That's what I originally stated, and you guys came with your fake argument etc.

Being the owner and main dev of an obfuscator for .NET Framework compiled programs doesn't mean I know anything about MSIL, obfuscation, yes you are right. Of course no you are not right, on the contrary you are again making some useless proposotion.

🎉 bang bang got a couple bytes from my last donation next guy to reply is gonna have full load of bytes

something related or anything


RE: Protect soft so it won't leak the Source Code - 0xDEAD10CC - May 18, 2019

(May 18, 2019 12:00 PM)Aristocles Wrote:  i never claimed it was my reply, I never took credit for it, I even inserted spaces and new lines you can clearly see its different but if you say that I took credit go for it.
Also whats wrong with java ? nothing, you are making useless proposition.

He's not comin from a profesionnal world that doesn't mean he can't afford already-existing SaaS solution for what he wants. Again, you are making useless proposotion.

I don't need to know what his program does to know my solution is the best when its a possible solution. That's what I originally stated, and you guys came with your fake argument etc.

Being the owner and main dev of an obfuscator for .NET Framework compiled programs doesn't mean I know anything about MSIL, obfuscation, yes you are right. Of course no you are not right, on the contrary you are again making some useless proposotion.

🎉 bang bang got a couple bytes from my last donation next guy to reply is gonna have full load of bytes

You really don't know how to form an educated comprehension of what others post do you? 😅 Alright, I will paraphrase, and respond to the ridiculous accusations and conclusions in your response.

>> i never claimed it was my reply, I never took credit for it, I even inserted spaces and new lines you can clearly see its different but if you say that I took credit go for it.

I don't think anything needs to be said about how senseless this reasoning is. Spaces separate words, and newlines separate paragraphs, they have never in history, implied a difference in content source.

>> Also whats wrong with java ? nothing, you are making useless proposition.

Who said there being anything wrong with Java? My point was clearly that it isn't fundamentally related to .NET, and the fact that you had to source information from a post about Java on SO for this thread, is useless.

>> I don't need to know what his program does to know my solution is the best when its a possible solution. That's what I originally stated, and you guys came with your fake argument etc.

Back to this again... That's actually not what you originally said, and all you need to do is review the first post Washi made in response to you to see that he was the first one to point out that is isn't always a possible solution. What you said was that SAAS is the modern solution, without mentioning anything else at first. What kind of game are you trying to play here? ❓ Honestly, this entire thread is self-evident that you lack comprehension and humility.

The point we were trying to make is that you don't know that it is a possible solution here within the context of all the information that has been provided so far. Do you not understand the meaning of the word "may" that both Washi and myself have been throwing around in the past dozen posts? It wasn't until after this was pointed out to you that you had started to claim that this was what you meant, and again, the thread is evidence of this.

Not sure if you're trying to fool anybody but yourself here...

>> Being the owner and main dev of an obfuscator for .NET Framework compiled programs doesn't mean I know anything about MSIL, obfuscation, yes you are right.

Yes, I'm sure that makes a big difference when the majority of the product I bet is based on someone else's creation. If you knew so much, you wouldn't have had to find a post originating from a question about Java to defend your side on .NET obfuscation or protection, so it wouldn't surprise me in the least that it isn't all of your work.

/thread?


RE: Protect soft so it won't leak the Source Code - Washi - May 18, 2019

(May 18, 2019 12:00 PM)Aristocles Wrote:  i never claimed it was my reply, I never took credit for it, I even inserted spaces and new lines you can clearly see its different but if you say that I took credit go for it.

Hey let me tell you about this cool feature that MyBB comes with. It's called quoting and it works like this:
Code
[quote=Author]Hello I am a quote[/quote]
It produces:
Author Wrote:Hello I am a quote
Pretty cool huh? Generally we quote or cite the people using this tag if we want to convey the same point they made, as it provides nice markup and a name of the original author. We, the readers, are kind of bad at distinguishing the normal whitespaces from your "quoting" whitespaces and guessing  out of thin air who was the original author (Apart from Justin, our lord and saviour who found the SO thread).

(May 18, 2019 12:00 PM)Aristocles Wrote:  Also whats wrong with java ? nothing, you are making useless proposition.

Obviously the point was not about Java...

(May 18, 2019 12:00 PM)Aristocles Wrote:  I don't need to know what his program does to know my solution is the best when its a possible solution. That's what I originally stated, and you guys came with your fake argument etc.

Could you please break it down for me, why exactly my example is a fake argument? So far you still have not given me anything on why this example is considered a fake argument, other than just "No I am right". If you missed it, scroll back a bit and look for text that is highlighted in red and type-set using very big font, should be very hard to miss 😉.

(May 18, 2019 12:00 PM)Aristocles Wrote:  Being the owner and main dev of an obfuscator for .NET Framework compiled programs doesn't mean I know anything about MSIL, obfuscation, yes you are right. Of course no you are not right, on the contrary you are again making some useless proposotion.

Great job on clicking the fork button of the ConfuserEx repository, and slightly changing one or two things. Did you know that the ConfuserEx unpackers out there pretty much work on all binaries that .NET Guard produces with just a few minor tweaks here and there?


RE: Protect soft so it won't leak the Source Code - JUSTIN - May 19, 2019

(May 18, 2019 10:16 AM)Aristocles Wrote:  Also JUSTIN I'm the owner of an obfuscator, so I know how obfuscation and MSIL compilation works. Hence why I'm right to state (SO copied) that obfuscation will, nowadays, slow your app. "The only methods of obfuscation which will typically have a true impact on performance are related to virtualization" this is absolutely false. Head over ConfuserEx, or beds github current project and apply bunch of features on a test app, you will see no virtualization-related feature yet it will make the app slower.

yes bro, ofc you're right! i must've been an idiot all along! can you please point me to the instruction set architecture that MSIL falls under?

you can sit here on HF and pretend you know what you're talking about, but in reality, you've made it more than obvious that you're pretty clueless.
you know how "obfuscation" and "MSIL compilation" works, and yet you don't understand how those instructions are processed in memory?

i typically don't dislike people for being wrong or not understanding something, but you refuse to accept you're wrong after being corrected by multiple people who are seemingly more knowledgeable than you. when somebody else makes a valid point that you don't know how to respond to, you claim they're "showing off" when they're simply trying to explain something to you.

somebody who refuses to learn and accept when they're wrong is not fit for any academic field, including programming.
this thread should've been over when you copy/pasted a response from a Java question thread on StackOverflow.


RE: Protect soft so it won't leak the Source Code - Aristocles - May 19, 2019

"this thread should've been over when you copy/pasted a response from a Java question thread on StackOverflow." so thats your mentality; SO was made to be able to find answers. I never claimed it was my text.

"blah blah blah just fork confuserex blah blah blah",

my answer to OP is : if its a possible solution, go for remote execution, your program will be safe. it will need you to rework some stuff here and there but its definitly worth a couple of hours of coding ! if its not, then its a whole other problem.

i see for instance a lot of combo checker, here you should move to a SaaS with online panel and different servers meant to actually do the combo check with different proxies. this way its impossible to get the checking source code and hackers need to bypass your auth on panel, but its if safe enough it should be ok.

if its a game hack, its a pitty. what you can do is either doing MITM from computer to your server to the game server, but its relatively hard (Dofus bot do that) so you can interfer with the data from both of the parties, or you will need to deploy cheat as an homebrow for console (works for console only...) binded with console key and psn/xbox account.

if its a program to send / receive SMS -i just guess following your previous threads- its totally ok to make an app to go to the customerr computer and have the sendSMS method online as a remote method, the original method I suggested is perfect and will work effortless in this case.


RE: Protect soft so it won't leak the Source Code - 0xDEAD10CC - May 19, 2019

(May 19, 2019 03:35 PM)Aristocles Wrote:  "this thread should've been over when you copy/pasted a response from a Java question thread on StackOverflow." so thats your mentality; SO was made to be able to find answers. I never claimed it was my text.

It must be really convenient for your argument to imply that it needs to be said that anything which is posted and doesn't come with a reference also needs to be explicit about whether or not it is your own text. 😅 (Hint: that's not how copyright works, so why should it work in your case for this logic?)

You're confusing the idea of the site, with your usage of it to benefit your side of the argument here in a very illogical way.

(Btw, this is my text - I guess I'll have to explicitly say this in every one of my posts so that people don't get me confused with a random StackOverflow member that I didn't reference. 🤣)

edit: Why haven't you just been able to admit that your argument is wrong by now? It's blatantly obvious that this is the case. The longer you prolong it, the more foolish you're going to look. Your conclusion is essentially what we've been trying to say all along, yet you make it seem like you always implied this.

Anyways - If you're not capable of doing so, there's no longer any point in arguing about this thread lol. The point has been solidified in a collection of ranting, with tons of comedic relief.


RE: Protect soft so it won't leak the Source Code - Washi - May 19, 2019

(May 19, 2019 03:35 PM)Aristocles Wrote:  "this thread should've been over when you copy/pasted a response from a Java question thread on StackOverflow." so thats your mentality;
And it seems your mentality is to ignore my very simple question about my fake argument. Did you add me to your ignore list 😭  ?

(May 19, 2019 03:35 PM)Aristocles Wrote:  SO was made to be able to find answers. I never claimed it was my text.

Yet you copied a piece of text with words such as "I have". Not sure but as far as I can tell the English language has only one meaning to the word "I". What did you expect us to think, that someone from stack-overflow wrote this? SO is for finding answers yes, and so is Google, MSDN, Wikipedia etc. I'm sure that you learnt in school that if you look something up, credits, a reference, or at least a clear indication that you did not come up with this. Should be obvious, no? Anyway this is not the most pressing question I have.

My most pressing question is why my argument is fake D:

(May 19, 2019 03:35 PM)Aristocles Wrote:  "blah blah blah just fork confuserex blah blah blah",

Correct me if I am wrong but I think I spotted an actual fake argument here. Although this does confirm you do read my posts! I'm not on the ignore list yet! 🤗