MDE源碼也能被反編譯,你相信了嗎

andymark

     如果你還堅信生成MDE后,不會被還原,不會被反編譯,那就大錯特錯

     先是把MDE的窗體報表屬性被還原,現(xiàn)在源碼也能被反編譯了。

     下面是MDE被還原后和源碼的對比:

     MDB源碼載圖:

      


     MDE被還源后的截圖:

   

     

      MDE不再是安全了，MDE也象其他軟件一樣，一樣能被反編譯....

[此貼子已經(jīng)被作者于2007-2-11 18:47:05編輯過]

wuaza

漲了見識。

不過在軟件界，安全問題始終是魔高一尺，道高一丈。

情比金堅

編就編唄？代碼能值幾個錢？

qlm

以下是引用wuaza在2007-2-11 19:02:00的發(fā)言：


漲了見識。

不過在軟件界，安全問題始終是魔高一尺，道高一丈。

還真有道高一丈的,不過剛找到的,沒試過。

Summary of the problem with normal MDE files created by Microsoft® Access:



Normal MDE files created by Access contain extra information that we like to call "compiler junk" - this is redundant information about variable names, data types, constants, UDTs etc that are no longer needed in a fully compiled MDE file.  

However, this "compiler junk" makes it much easier to decompileeverse-engineer the VBA code in an MDE file to a standard that is very close to the original VBA source code (including for example all variable names).  

In fact, for those that can prove ownership of their MDE files, we at EverythingAccess.com offer a service for reverse-engineering them including all VBA code.  You must be able to prove lawful ownership beyond any doubt for our service - but that is not to say that another company (or utility) won't offer a non-validated conversion service in the future.

But I thought that the VBA source code in MDE files had been stripped out?



Yes, you're quite correct.  However, the source code can be re-built with very high accuracy by using the combination of the compiled code and the "compiler junk" which is left behind by Access when creating the MDE file.

So what's the solution?



Well, if you want to better protect your VBA code, then the solution is to remove the extra "compiler junk" from the MDE file completely which makes it much harder and much less desirable to decompileeverse-engineer the source code.  By removing the "compiler junk" does not prevent decompilingeverse-engineering the VBA code, but it does make it that much harder and the result would be source code that does not look anything like the original source code (and therefore much less understandable).

myszh

是什么軟件？[em04]

5988143

這個好像有了好久了哦,我帖上來給你們測試哈!

[此貼子已經(jīng)被作者于2007-2-12 10:04:48編輯過]

rjacky

唉，安全問題永遠是微軟的神話！



但從圖上看，反編譯后與原來的代碼差別很大啊

tz-chf

破了也沒什么。互相學習嘛

poly

破不破在短期內(nèi)和我沒關系，我還沒學懂代碼

好學

這是搞開發(fā)的人的可悲啊,辛勤勞動都給了別人!!!!!!!!!!