MDE源码也能被反编译,你相信了吗

andymark

     如果你还坚信生成MDE后,不会被还原,不会被反编译,那就大错特错

     先是把MDE的窗体报表属性被还原,现在源码也能被反编译了。

     下面是MDE被还原后和源码的对比:

     MDB源码载图:

      


     MDE被还源后的截图:

   

     

      MDE不再是安全了，MDE也象其他软件一样，一样能被反编译....

[此贴子已经被作者于2007-2-11 18:47:05编辑过]

wuaza

涨了见识。

不过在软件界，安全问题始终是魔高一尺，道高一丈。

情比金坚

编就编呗？代码能值几个钱？

qlm

以下是引用wuaza在2007-2-11 19:02:00的发言：


涨了见识。

不过在软件界，安全问题始终是魔高一尺，道高一丈。

还真有道高一丈的,不过刚找到的,没试过。

Summary of the problem with normal MDE files created by Microsoft® Access:



Normal MDE files created by Access contain extra information that we like to call "compiler junk" - this is redundant information about variable names, data types, constants, UDTs etc that are no longer needed in a fully compiled MDE file.  

However, this "compiler junk" makes it much easier to decompileeverse-engineer the VBA code in an MDE file to a standard that is very close to the original VBA source code (including for example all variable names).  

In fact, for those that can prove ownership of their MDE files, we at EverythingAccess.com offer a service for reverse-engineering them including all VBA code.  You must be able to prove lawful ownership beyond any doubt for our service - but that is not to say that another company (or utility) won't offer a non-validated conversion service in the future.

But I thought that the VBA source code in MDE files had been stripped out?



Yes, you're quite correct.  However, the source code can be re-built with very high accuracy by using the combination of the compiled code and the "compiler junk" which is left behind by Access when creating the MDE file.

So what's the solution?



Well, if you want to better protect your VBA code, then the solution is to remove the extra "compiler junk" from the MDE file completely which makes it much harder and much less desirable to decompileeverse-engineer the source code.  By removing the "compiler junk" does not prevent decompilingeverse-engineering the VBA code, but it does make it that much harder and the result would be source code that does not look anything like the original source code (and therefore much less understandable).

myszh

是什么软件？[em04]

5988143

這個好像有了好久了哦,我帖上來給你們測試哈!

[此贴子已经被作者于2007-2-12 10:04:48编辑过]

rjacky

唉，安全问题永远是微软的神话！



但从图上看，反编译后与原来的代码差别很大啊

tz-chf

破了也没什么。互相学习嘛

poly

破不破在短期内和我没关系，我还没学懂代码

好学

这是搞开发的人的可悲啊,辛勤劳动都给了别人!!!!!!!!!!