Obfuscation

davorg on 2003-03-14T16:38:50

Something to amuse you all over the weekend.

A commercial Perl obfuscator from Stunnix. A snip at $1879.


Especially Funny...

mir on 2003-03-14T17:13:28

Is the fact that the domain was registered 4 days ago: whois record.

In fact even the company web site seems to be unsure whether to spell it 'Stunnix' (as the domain) or Stunix (as in Stunix is a leader in providing advanced solutions for source code obfuscation for most popular scripting languages like Perl and Javascript.).

Unbreakable!

petdance on 2003-03-14T20:29:35

One of their obfuscation techniques:
adding extra parenthesis for the expressions

Wow.

The non-native English is amusing at points, too:

It requires is a working Perl version 5.8 or greater installed somewhere in your system (a so-called "interpreter for backend").

Their sample code is run against perldoc, which some might say is obfuscated already... :-)

So how long until someone comes up with a de-obfuser?

Re:Unbreakable!

davorg on 2003-03-14T20:44:55

It looked to me as though most of their obfuscation could easily be undone using perltidy and B::Deparse. The only thing that couldn't cope with would be the replacement of the symbol names. So you'd just end up with a Perl program with strange variable and function names. Hardly an unbreakable form of encryption :)

Re:Unbreakable!

petdance on 2003-03-14T21:01:29

It looked to me as though most of their obfuscation could easily be undone using perltidy and B::Deparse.

And B::Deparse is probably what they're using anyway.

Hardly an unbreakable form of encryption :)

I think it's up to us make that clear. Someone oughta take the couple hours to do the de-obfuscator and make it well-known, so that we have something to point to when the raft of "Hey, I want to hide my code, and this thing says it'll do it, is it worth $1879?" questions come in.

Re:Unbreakable!

jand on 2003-03-14T21:28:21

Look here!