“Stop reverse engineering our code”
351–358 of 358 posts
Re: “Stop reverse engineering our code”
#352Earlier quoted context omitted.
Unfortunately courts seem to not share your stance, it seems.
Courts of which country? There are a lot of countries out there, some of them allowing reverse engineering (especially in Europe for example).
I read up on some of DCMA stuff, it does seem to allow some degree of reverse engineering in U.S..
Re: “Stop reverse engineering our code”
#353Wow. Really? This single blog post is strong evidence for why you should never, ever buy an Oracle product, and if you are running anything written by them, why you should plan to migrate away. Now, the culture of consultants in the Oracle sphere of influence is pretty toxic and money-grubbing. I can imagine companies being badgered into paying security weasels big bucks to analyze software with tools that cough up a…
This is hardly a first. Oracle stuffs a bad, misspelled little poem in their DB protocols, not for any technical reason, but purely to attempt to extend copyright protection by forcing people to violate their copyrights to be compatible with Oracle. You can find a copy of it here: http://dacut.blogspot.com/2008/03/oracle-poetry.html Note the copyright statement on the mispelled, 3-line poem with no literary merit wha…
Why didn't Sega just require games to be digitally signed with their key?
Re: “Stop reverse engineering our code”
#354Earlier quoted context omitted.
The same file system that the Linux developers have tried (and failed) to clone for almost 10 years now? Yeah, must be totally unremarkable.
I didn't say it was unremarkable, Mr. Strawman. However, it wasn't the "last word" either. If it had been, there wouldn't have been so many generations of major change to it since then. It's possible for people to be good at what they do but still nowhere near as good as they think, and that pretty accurately described a lot of Sun engineers at that time. The answer to all criticism, including that which history has…
That's ridiculous. If it had not laid the foundation for all those generations of major changes to be possible at all (without substantial re-architecting), why would they have called it that?
By the way, since you're apparently a subject matter expert, what kernel would you recommend for arrogance-averse users? Certainly not Linux or OpenBSD?
Re: “Stop reverse engineering our code”
#355Earlier quoted context omitted.
This is hardly a first. Oracle stuffs a bad, misspelled little poem in their DB protocols, not for any technical reason, but purely to attempt to extend copyright protection by forcing people to violate their copyrights to be compatible with Oracle. You can find a copy of it here: http://dacut.blogspot.com/2008/03/oracle-poetry.html Note the copyright statement on the mispelled, 3-line poem with no literary merit wha…
Why didn't Sega just require games to be digitally signed with their key?
At the time, I'd guess that not many people knew anything about cryptography.
Re: “Stop reverse engineering our code”
#356Earlier quoted context omitted.
You and lawnchair are exactly right! Somehow this CSO is unaware of binary static analysis, ala Veracode. You can still get plenty of false positives from binary SAST, but it's NOT de-compilation. My question would be whether binary SAST falls under the prohibition against reverse engineering. I wouldn't think so, but that's one for the lawyers unfortunately.
This is an embarrassing subthread. I'm sorry to spoil an opportunity for people to feel like they're smarter than an executive that just wrote a lot of dumb things in a blog post, but not only does Mary Ann Davidson know about Veracode, she's semi-famous for hating on them. Meanwhile: a huge portion of everything Oracle ships is Java, and consultants absolutely do run Java security scanners on decompiled jar files fr…
[deleted]
Re: “Stop reverse engineering our code”
#357Doesn't antivirus software do static analysis?
Re: “Stop reverse engineering our code”
#358Earlier quoted context omitted.
How do you arrange your PG clusters, are you using streaming replication?
Failover pair with a primary and standby. The primary streams write-ahead log records to standby as they're generated. Some script gaffer-tape to watch for primary failure and fail over. I think we haven't ever yet actually had to invoke this though :-) This was all cobbled together following the docs. There are almost certainly better ways to do everything we've done so far. The Postgres is just 9.3 out of the Ubunt…
Sorry for late reply, thanks for the info! Interesting to see what others are doing.