Phoenix Network Forums

Hello, I am developing a Java applet that would require a username/password (in other words an applet that contains secure information) and am wondering if that information would really be secure and if (or how hard) it would be possible for someone to decompile my applet and see all the source code? I am using a free server so I cannot use php or perl or other languages.

Umm, I think you may want to obfuscate youre applet.
Full Version Zelix Klassmaster - http://antiyou2u.com/downloads/zelix.zip

You could just hash the passwords in the applet...that would deter people, at the very least. Depending on how secure your password is.

look on some script sites, if you are good with java programming, set up a retry limit to 3 tries every hour just incase you run into someone with a brute force password hacker, and make your password hard to guess

hashing works only if the applet have to authenticate the password received... if the applet is the client trying to authenticate in some site hashing will not work...
if your applet is the client you can write a very complicated encripting function, that uses lots of objects reading the properties one of another...
e.g.
(translate this to java... )

obj1.setprop1(0x0f0f90f XOR 0x293f)
obj2.setprop1(0x9877f XOR 734)
...
pass = substring(obj1.getprop1(), 2,4) + (obj2.getprop1 XOR obj3.classname) + ...

then even if someone decompile your script will be very very hard to discover your password...

As were speaking of java applet security. What if we need to connect to a database? Then someone could just decompile the class file and grap the password. How do I solve that problem ?

beetleflux wrote:As were speaking of java applet security. What if we need to connect to a database? Then someone could just decompile the class file and grap the password. How do I solve that problem ?

Hmzz ... juz seperate class file .. jar them upz and den embed in ur applet ... or worse case get the user to key in the password themselves and using cookies and having a guest sql user just for some generic stuffs selection in ya database ?