Re: Is obfuscation meaningful way to protect proprietary Lua code ?

[Ross Bencina <rossb-lists@...>]

On 17/09/2013 5:53 PM, Dirk Laurie wrote:
> 2013/9/17 Marc Balmer <marc@msys.ch>:
>
> > Actually development and testing is very easy,
> > and once you deploy, aou encrypt the bytecode.
>
> Do you then run that bytecode via a Lua program
> loaded by an unmodified PUC-Rio standalone interpreter?


Not sure if you guys saw the recent paper about reverse engineering the 
Drop Box client (written in Python but with encryption and a modified 
interpreter with scrambled bytecode):

https://www.usenix.org/system/files/conference/woot13/woot13-kholia.pdf

Obfuscation is hard whether or not you're executing on a standard 
interpreter.

Ross.