Windows Phone 7 developers – Obfuscate your app or have your source code stolen

http://www.winrumors.com/windows-phone-7-developers-obsfucate-your-app-or-have-your-source-code-stolen/

by ronnier • 16 years ago

8 11 16 years ago

winrumors.com

durbin• 16 years ago

isn't open code one of the reasons the web became the greatest achievement in history?

gpjt• 16 years ago

Indeed -- and the problem doesn't sound any worse than it is for (say) .NET or Java desktop apps.

rbanffy3• 16 years ago

Complainers will always complain.

Imagine how nasty would it be when someone decompiles their code and discover lots of, say, GPL code in there...

Is there a lot of GPL'ed C# code out there?

mquander2• 16 years ago

I completely fail to understand what the complaint is here.

It looks like users can download the application packages separately from the WP7 magic install marketplace app. OK. Once you download the package, since WP7 makes you write in .NET, anyone can just look at your executable and get the MSIL back out of it, and decompile to C# or whatever.

So...what? This has been true for every C# application written since .NET existed, on every platform. Welcome to the world of bytecode. What is Microsoft supposed to do to magically change this on Windows Phone? Even if they encrypted everything all the way down from the marketplace, as soon as someone roots the phone, they could just look at the executable on disk, right?

Why is bytecode obfuscation no longer an OK solution?

What am I missing here? I don't know anything about WP7.

EDIT: After looking around, I don't think I'm missing anything, I think it's just FUD. However, it looks like there's a different actual issue, which is that you can go download any app from the feed right now for free.

rbanffy3• 16 years ago

If by decompiling you mean turning machine-language (or bytecode) into equivalent human-readable source, it's also possible to do it in C.

contextfree2• 16 years ago

The "fidelity" is typically much higher with .NET assemblies, because of the type metadata. (Still a silly article, though.)

mquander2• 16 years ago

Yeah, but like contextfree mentions, there's enough metadata in MSIL to basically reconstruct flawless C# out of your executable, so it's a somewhat different degree of problem.

Windows Phone 7 developers – Obfuscate your app or have your source code stolen

Related Stories