Mailing-List: contact user-help@cayenne.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@cayenne.apache.org
From: Adam Boyle <aboyle@valsphere.com>
To: "user@cayenne.apache.org" <user@cayenne.apache.org>
Subject: Re: Code obfuscation and the model
Thread-Topic: Code obfuscation and the model
Thread-Index: AQHRvaW/UrVrLmtbh0yEsdbvcwvek5/cb/gAgAAgfQM=
Date: Mon, 6 Jun 2016 15:34:07 +0000
Message-ID: <BY2PR06MB2133AB3B944AD676381E5A63CB5C0@BY2PR06MB2133.namprd06.prod.outlook.com>
References: <BY2PR06MB2133B62C4CD148C375046FD4CB590@BY2PR06MB2133.namprd06.prod.outlook.com>,<D52D94F2-1526-40DF-863F-5C94C0F6D1A0@objectstyle.org>
In-Reply-To: <D52D94F2-1526-40DF-863F-5C94C0F6D1A0@objectstyle.org>
Accept-Language: en-US
Content-Language: en-US
received-spf: None (protection.outlook.com: valsphere.com does not designate
 permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative;
	boundary="_000_BY2PR06MB2133AB3B944AD676381E5A63CB5C0BY2PR06MB2133namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Jun 2016 15:34:07.1241
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 552f1932-42eb-4db3-a137-fd645bffe074
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR06MB2134
archived-at: Mon, 06 Jun 2016 15:34:23 -0000

--_000_BY2PR06MB2133AB3B944AD676381E5A63CB5C0BY2PR06MB2133namp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

More than likely we want to obfuscate both client and server. Our current t=
hinking is to use concepts in the Modeler jar file to load the XML, perform=
 the renames (via the event structure you have in there), save a separate m=
odel xml file, then figure out how to incorporate it into our project all a=
s part of specific build goals when we want to build a production set of ar=
tifacts. Once the obfuscated xml is generated we should be able to remap re=
ferences to the DAOs using existing tools such as those used as part of the=
 process to decompile/deobfuscate the Minecraft jar file using the Forge Mo=
d Development Kit, something that we have some experience with.


If we come up with a working solution, we may be able to incorporate it int=
o the existing cayenne maven plugin or make a new plugin with just that pur=
pose, so we'll let you know what we come up with, although it may only be a=
 subset of a full obfuscation solution as there are some object types we ar=
en't using such as Embeddables and Queries (so far).


Semi-related question: does the client need to include the model xml in its=
 jar, or does only the server need the xml since only the server actually t=
alks to the DB?


-Adam

________________________________
From: Andrus Adamchik <andrus@objectstyle.org>
Sent: Monday, June 6, 2016 9:16:28 AM
To: user@cayenne.apache.org
Subject: Re: Code obfuscation and the model

I don't have any real life examples, but maybe we can brainstorm something.

Are you obfuscating just the client, or the server as well?

Andrus

> On Jun 3, 2016, at 9:15 PM, Adam Boyle <aboyle@valsphere.com> wrote:
>
> Have any of you ever had to tackle the problem of obfuscating a project t=
hat uses Cayenne? I'm looking to find a way to be able to obfuscate a Cayen=
ne ROP project and I'm hoping that we're not the first to attempt this.
>
>
> Our thinking is that we would write a utility/maven plugin to obfuscate t=
he project XML, generate the classes/DB, use a custom remapping utility to =
fix up any code references, then use Proguard/whatever to obfuscate the rem=
aining code.
>
>
> Thanks in advance for any advice you can provide!
>
> -Adam


--_000_BY2PR06MB2133AB3B944AD676381E5A63CB5C0BY2PR06MB2133namp_--