| From: | David Fetter <david(at)fetter(dot)org> |
|---|---|
| To: | Glyn Astill <glynastill(at)yahoo(dot)co(dot)uk> |
| Cc: | Merlin Moncure <mmoncure(at)gmail(dot)com>, Bruce Momjian <bruce(at)momjian(dot)us>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Bill Moran <wmoran(at)collaborativefusion(dot)com>, Greg Smith <gsmith(at)gregsmith(dot)com>, Jonathan Bond-Caron <jbondc(at)openmv(dot)com>, Postgres General List <pgsql-general(at)postgresql(dot)org> |
| Subject: | Re: Obfuscated stored procedures (was Re: Oracle and Postgresql) |
| Date: | 2008-09-24 15:05:18 |
| Message-ID: | 20080924150518.GA844@fetter.org |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general pgsql-www |
On Wed, Sep 24, 2008 at 02:12:19PM +0000, Glyn Astill wrote:
> I'm not sure what the policy is on putting stuff in the docs, but
> how about putting that in the relevant place, as well as a note
> about the other option; using C and SPI.
C is not magic obfuscation gear. Anybody with a debugger can expose
what it's doing. There have been math papers showing that it's
impossible to hide the functionality of a piece of software based only
on the ability to run it, so the entire prospect of obscuring the
software's functionality when people can send arbitrary inputs to it
is one of those "known-impossible" problems like the halting problem.
Cheers,
David.
--
David Fetter <david(at)fetter(dot)org> http://fetter.org/
Phone: +1 415 235 3778 AIM: dfetter666 Yahoo!: dfetter
Skype: davidfetter XMPP: david(dot)fetter(at)gmail(dot)com
Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Bruce Momjian | 2008-09-24 15:19:07 | Re: Obfuscated stored procedures (was Re: Oracle and Postgresql) |
| Previous Message | Lennin Caro | 2008-09-24 14:40:22 | Re: Error in ALTER DATABASE command |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Bruce Momjian | 2008-09-24 15:19:07 | Re: Obfuscated stored procedures (was Re: Oracle and Postgresql) |
| Previous Message | Devrim GÜNDÜZ | 2008-09-24 14:20:08 | Re: Binaries vs Source |