December 4, 2010

QtK QtK
Lab Rat
1140 posts

Can QML files be obfuscated before bundling it in a sis file

Page  
1

I noticed that on opening a sis file you can get the qml files as its is. Can it be obfuscated? or is there any plans for that in future.

28 replies

December 4, 2010

xsacha xsacha
Lab Rat
517 posts

I guess it’d be the same as distributing any non binary. Use your C++ wrapper to decode the qmls. Before you load the main source.

 Signature 

- Sacha

December 4, 2010

QtK QtK
Lab Rat
1140 posts

I was wondering if this could be built in to the wrapper template provided by Qt creator.

December 4, 2010

Deleted Member # 14e8 Deleted Member # 14e8
Lab Rat
355 posts
xsacha wrote:
I guess it’d be the same as distributing any non binary. Use your C++ wrapper to decode the qmls. Before you load the main source.

Use a somewhat safe algorithm, though. And rename the file extensions.

December 4, 2010

QtK QtK
Lab Rat
1140 posts
tamhanna wrote:
xsacha wrote:
I guess it’d be the same as distributing any non binary. Use your C++ wrapper to decode the qmls. Before you load the main source.

Use a somewhat safe algorithm, though. And rename the file extensions.

Yes that option is always open. But if built in to Qt Creator everyone will benefit from it.

December 4, 2010

Deleted Member # 14e8 Deleted Member # 14e8
Lab Rat
355 posts
QtK wrote:
tamhanna wrote:
xsacha wrote:
I guess it’d be the same as distributing any non binary. Use your C++ wrapper to decode the qmls. Before you load the main source.

Use a somewhat safe algorithm, though. And rename the file extensions.

Yes that option is always open. But if built in to Qt Creator everyone will benefit from it.

But then it is also easier to break.

I wiull never forget the Astraware Superpatcher for Palm.- If every developer rolls his own scheme, well, not all of them will get hit. There is security in numbers here

December 4, 2010

QtK QtK
Lab Rat
1140 posts
tamhanna wrote:
QtK wrote:
tamhanna wrote:
xsacha wrote:
I guess it’d be the same as distributing any non binary. Use your C++ wrapper to decode the qmls. Before you load the main source.

Use a somewhat safe algorithm, though. And rename the file extensions.

Yes that option is always open. But if built in to Qt Creator everyone will benefit from it.

But then it is also easier to break.

I wiull never forget the Astraware Superpatcher for Palm.- If every developer rolls his own scheme, well, not all of them will get hit. There is security in numbers here

What if you can generate a binary out of qml files instead of just obfuscating it?

December 4, 2010

Deleted Member # 14e8 Deleted Member # 14e8
Lab Rat
355 posts

Welcome to .net – if the platform is large enough, someone will take the time to roll a decompiler.

December 4, 2010

Denis Kormalev Denis Kormalev
Lab Rat
1654 posts

As a quick solution just pack them as resource and apply some crypto on it. At loading simply uncrypto it and load as resource.
Or as quickest solution simply use as internal resources (inside binary).

December 4, 2010

Deleted Member # 14e8 Deleted Member # 14e8
Lab Rat
355 posts

Hi,
not sure if the internal resource is so save though…

December 4, 2010

QtK QtK
Lab Rat
1140 posts
Denis Kormalev wrote:
As a quick solution just pack them as resource and apply some crypto on it. At loading simply uncrypto it and load as resource. Or as quickest solution simply use as internal resources (inside binary).

Even I had thought of that but in that case I thought there might be a resource decompiler already present. But then this should work good as a quick solution. thank you.

December 4, 2010

QtK QtK
Lab Rat
1140 posts
tamhanna wrote:
Hi, not sure if the internal resource is so save though…

But still seems to be a quick and good workaround .

December 4, 2010

Deleted Member # 14e8 Deleted Member # 14e8
Lab Rat
355 posts

Well. If one is really paranoid, one could also do the internal resource plus the crypto algorithm ;)

December 4, 2010

Deleted Member # 14e8 Deleted Member # 14e8
Lab Rat
355 posts

Did a quick Google BTW – and found no decompiler…

December 4, 2010

xsacha xsacha
Lab Rat
517 posts

If it doesn’t already exist, it will soon. Where there’s a will, there is a way.
Unfortunately it seems you’re stuck in a game of cat and mouse. However, if you make it too difficult, the cat may not bother to chase.

 Signature 

- Sacha

December 5, 2010

Deleted Member # 14e8 Deleted Member # 14e8
Lab Rat
355 posts
xsacha wrote:
If it doesn’t already exist, it will soon. Where there’s a will, there is a way. Unfortunately it seems you’re stuck in a game of cat and mouse. However, if you make it too difficult, the cat may not bother to chase.

Don’t challenge me.

It would seriously be a cool project . Qt Resource Decompiler.

The only issue I see is that every compiler aligns his C arrays differently into the binary. So such a decompiler would always be limited to one or two configurations at a time.

Page  
1

  ‹‹ QML to .exe      Calling a C++ function inside a property subclass from QML ››

You must log in to post a reply. Not a member yet? Register here!