From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.3 required=5.0 tests=BAYES_00,INVALID_MSGID autolearn=no autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 1108a1,12f4d07c572005e3 X-Google-Attributes: gid1108a1,public X-Google-Thread: 10db24,12f4d07c572005e3 X-Google-Attributes: gid10db24,public X-Google-Thread: 103376,12f4d07c572005e3 X-Google-Attributes: gid103376,public X-Google-Thread: f43e6,12f4d07c572005e3 X-Google-Attributes: gidf43e6,public X-Google-Thread: ff6c8,12f4d07c572005e3 X-Google-Attributes: gidff6c8,public From: dewar@cs.nyu.edu (Robert Dewar) Subject: Re: Ada News Brief - 96-05-24.txt [1/1] Date: 1996/06/03 Message-ID: #1/1 X-Deja-AN: 158214517 references: <4o56db$p66@ns1.sw-eng.falls-church.va.us> <31B0BD25.188F@mcs.com> organization: Courant Institute of Mathematical Sciences newsgroups: comp.lang.ada,comp.sw.components,comp.object,comp.software-eng,comp.edu Date: 1996-06-03T00:00:00+00:00 List-Id: Mike says "JBC is *very* easily decompiled. All class member names are directly accessible in the class file, as are all classes and symbols referenced from that class. These names are exposed to support Java's run-time binding; a moment's reflection makes it very clear that this cannnot be otherwise. You don't have to take my word on this; the details are in the Java Virtual Machine spec, particularly section 2, the class file format. It was less than a week's effort to extract use, dependency, and structure graphs from Java class files. The only information not directly available are local variable names. " Unconvincing. Of course the names of standard classes are exposed, this is no different from seeing the name SQRT in a Fortran program (where SQRT is in a dynamic link library). But you can shroud the names of your own classes if you are interested in obfuscation, just as you would shroud variable names in other circumstances.