How to avoid reverse code engineering of a python executable

[NicolasG]

Hi guy's,

Couple of day's ago I asked for your help on how to create a single
file of a python executable. Now I want to proceed a little bit
further asking how can I avoid (or at least make it difficult) for
some one to extract my code by using reverse code engineer techniques?
I came on pyobfuscate but I would like more suggestions and guide to
achieve the most possible security in this matter.

Regards,
Nicoals.

 

[Marc 'BlackJack' Rintsch]

Couple of day's ago I asked for your help on how to create a single
file of a python executable. Now I want to proceed a little bit
further asking how can I avoid (or at least make it difficult) for
some one to extract my code by using reverse code engineer techniques?
I came on pyobfuscate but I would like more suggestions and guide to
achieve the most possible security in this matter.

Just don't deliver the code at all but provide a webservice.

Everything else can be reverse engineered and possibly will be if it is
worth the trouble.

Ciao,
Marc 'BlackJack' Rintsch

 

[Diez B. Roggisch]

Just don't deliver the code at all but provide a webservice.

Everything else can be reverse engineered and possibly will be if it is
worth the trouble.

Most things aren't. Even if one thinks so. The efforts put into reverse
engineering software usually don't stem from the desire to rip code one
couldn't write self, but to e.g. circumvene registration keys or otherwise
locked software.

Diez

 

[Ben Finney]

Now I want to proceed a little bit further asking how can I avoid
(or at least make it difficult) for some one to extract my code by
using reverse code engineer techniques? I came on pyobfuscate but I
would like more suggestions and guide to achieve the most possible
security in this matter.

The best possible security is to examine and change the threat model.

Why are you treating the code recipient as the bad guy? In other
words, why do you care whether the recipient reverse engineers the
program? Whatever effort you put into obfuscation, you can't prevent
even a mildly interested attacker from reverse engineering a program
they have in their posession.