| MHenke on Jul 30, 2008 at 7:05:52 AM (# 4462) Dito. New job, less time.
Well, at least that kind of time that puts me in the postion to practise tosh on SE to such an extent as it was back in good old days of the IT. :) sgalatis on Jul 30, 2008 at 11:57:34 AM (# 4463)Unfortunately, the latest release of Firefox + lastest build of Firebug all but kills any notion of hiding/obfuscating/encrypting JS on a page. If you look at the Script panel in firebug, every line of JS a page loads/evals is visible in plaintext...perfect for the security folk, bad for the dev who doesnt want to share his hard work with the masses.
There is one technique I found that DOES hide code, but as of yet I have not seen it mentioned anywhere. Its called: java.
Yes. a hidden java applet can 'inject' javascript into the browser, but it will NOT be visible to any form of web debugger. This will of course focus attention to the java applet, but for the not-so-tech-savvy out there, it will not be obvious. This is a viable way to hide any script. Only downside is the user must have a jre installed. I think flash can also do this, but I've yet to try it.
The idea is simple: Using LiveConnect, you can do an eval('insert javascritpt code here') from java and the script will be loaded in the browser, but it cannot be seen from firebug,venkman,microsoft script debugger/editor,view source, whatever. You can have the java applet load code from the server (same sandbox restrictions as javascript), compile scripts as encrypted data in the class file, etc. Since java supports most crypto algorithms, shouldnt be hard to transmit scripts over the wire encrypted and have the applet decrypt/eval into the browser. This works with IE and Firefox, ive not tested with safari/opera/others...
MHenke on Jul 31, 2008 at 2:48:42 AM (# 4464)You may not aware of it, sgalatis, but this thread is somewhat special. We call it the "IT", which is an acronym and has something to do with it's unboundedness. Years ago, we decided to use this place to talk for an infinite amount of time, about an infinite spectrum of crap. However, there's a single exception: Despite the title, we don't use to talk about hiding HTML/SCRIPT. ;) RobinAnn on Jul 31, 2008 at 7:39:52 AM (# 4465)
...the OFFICIAL RobinAnn Posting Style... ~ Scriptin' with RA ~
Here ye.. Here ye! A new member has joined the IT! And with this we will all rejoice at his skillful knowledge! and then laugh at his proverbial contribution!!!
sgalatis on Jul 31, 2008 at 9:03:34 AM (# 4466) This message has been edited.nevermind then. my apologies =)
saw this on a google search, just thought I'd toss in a couple coins...
on the offtopic then....anyone here play Eve? =) MHenke on Aug 1, 2008 at 2:03:41 AM (# 4467) This message has been edited.>nevermind then. my apologies =) Nevermind, indeed. And welcome to the IT, the first and only officially recognised and standardised Infinite Thread©.
>anyone here play Eve? Hm, I don't know Eve. And I'm not sure what my wife would say. ;) BikeRepairman on Aug 1, 2008 at 9:47:26 PM (# 4468) This message has been edited.Eve, come out and play....
|