Keeping my applet from being downloaded

Hello. I have a question. In order to put an applet in my web page, I have to link to my applet. This works great for normal people viewing my page, and they can use my applet just fine. However, I don't like the idea of people being able to look at the source code, get the link to the applet location, enter it into their browser, and then download my jar file because then they can hack into the jar, decompile, and steal my code (not that it is worth stealing, but still). How can I keep people from being able to download my jar file? My guess is to have the applet some kind of folder options that only allow web-server be able to access it if that is possible. I tried messing with the folder security settings but either the jar was still able to downloaded by entering the link in the browser, or the jar file wasn't able to be read by the web-server. Please help me out. Thank you.

Code obfuscators can help. But that would only rename the methods and fields and stuff, such that it makes the decompiled code hard to read. Anyone determined enough would figure it out.
But you should honestly ask yourself one question: Would someone really bother? Cuz it many cases, the answer is no. Except maybe for learning reasons, and not so much for theft.
Of course, certainly hackers could look for vulnerabilities in your website via your applet code, depending on what your applet does. Which is probably why most banks don't provide applet interfaces to their systems. But then again, a properly secure system would be able to publish the applet code without fear of it being hacked into.
You should absolutely not include the source itself in the compiled jar file. But otherwise, you can't hide the jar files or class files... Unless you don't want people to see the applet... in which case, don't waste time creating said applet in the first place and go fishing instead.

Similar Messages

How do I keep McAfee from being downloaded when I update Acrobat?

How do I keep McAfee from being downloaded when I update Acrobat? I'm being spamed by Acrobat!

If you are talking about this proble, the answer is in the thread:
http://forums.adobe.com/thread/1065811?tstart=120

How to protect my jar file from being downloaded

How can i protect my jar file from being downloaded by users by accessing it through the web site.
Now everybody can just type the url www.mysite.com/applets/myApplet.jar
And download it to his computer.
I realize that anybody who really wants to download it he will get it anyway, but I want to make it harder.
thanks in advance

Your browser has to download the jar file if it's going to run the applet. That's applets work. The browser downloads the classes and then runs them locally.
I suppose if you wanted to make something to make it difficult for users to explicitly download the jar, you could set some kind of permission flag when the HTML is page is rendered, and then unset it some amount of time (10 seconds?) later, and then only let the user download the jar when the flag is set. But this would be fragile and irritating and unhelpful. It would probably break more than you'd like and not prevent download very much (it wouldn't take long to figure out what was happening), and besides nobody is ever going to try to steal your code.

How do I keep my Imessages from being viewed on other devices under my apple ID?

How do I keep my Imessages from being viewed on other devices under my apple ID?

No, you can authorize any number of email addresses on your Apple Id and then select one of those to use as an alternate Send and Recieve for Messages. It isn't necessary to use seperate AppleIDs. I use my phone number on my iPhone and an email address on the iPad.

Trouble with slow Macbook Air. I have first generation MacBook Air and have a hard time keeping hard drive from being full. Right now, I have almost 5 gigs available, but mac is slow and I keep getting color wheel when I use Mail. Any suggestions?

Trouble with slow Macbook Air. I have first generation MacBook Air and have a hard time keeping hard drive from being full. After trashing many docs, I have almost 5 gigs available, but mac is slow and I keep getting color wheel when I use Mail. I'd like to install Lion, but now I'm afraid it will slow down my machine even further. Do I have enough free hard disc space? Is Mail problem related to free hard disc space? Thanks for your help!

7gb of free disc space is required to install Lion. Read this about how to free up disc space: http://pondini.org/OSX/DiskSpace.html. Also, advice on how to speed up your mac: http://www.maclife.com/article/feature/25_ways_speed_your_mac

HT4906 Is there a way to keep certain pictures from being sent to iCloud?

Is there a way to keep certain pictures from being sent to iCloud?

Sorry, I meant from my Mac. I have pictures on my Mac that I don't want sent to my other devices.

How do I protect images from being downloaded in Muse?

When creating a slideshow in Muse, how can I protect the images from being downloaded?

Essentially, you can't.
If something is available online to view, it can also be downloaded and there is little you can do to actually stop it.
There are scripts that you can add to your site to disable "right click > save image" BUT someone who really wants the image can get around this using a variety of ways, including creen caps and looking at your code to determine the source where is image is hosted on your server.
The best that you can do it watermark the images clearly and also imbed data into the image file. It won't stop anyone taking the images, but it clearly tracks the fact that you're the copyright owner. Do take note though, that someone who understands about this, can also remove these bits of data - but your average user wouldn't either know about it, or know how to remove it. This, however is one of the best ways to 'stamp' your ownership to an image.
http://www.ehow.com/how_4578212_information-digital-photos-photoshop-cs.html
http://www.photometadata.org/META-101-metadata-Q-and-A

Re: How do I keep an application from being started morethan once?

Here are some quick ideas. None of them should be too hard to implement,
although each has some drawbacks.
1. Have a login server track who is logged on, and if there is already a
logon for a given user or a given machine, then deny the application
startup. The nice thing about this is that a user will not be able to have
multiple logins even by going to another machine. Then again, this may not
be so nice, and you also get a possible single point of failure on the
login server for which you will have to prepare.
2. Drop to the operating system, and get a list of processes for the client
machine. If the name of one of them matches the name of application that
is being run, then deny startup. This avoids a network hit, but requires
some OS specific code. Also, a clever user could change the name of an
executable to get around this. Note that a user could have another login
on another machine.
3. Write to a file on the local machine. You can hide the file in some
suitable place, and can also scramble some information so that a user
cannot get around having this file present by reading from the file at
startup and then writing to it. Based on the state of your application,
the file will have some scrambled information indicating if an instance of
an application can be started. If you retain the write lock (i.e. do not
close) the file for the duration of the application, you increase your
security at the risk of a confused user if the application gets terminated
without releasing the lock. Depending on the OS where the client will run,
this could be an issue. If you like this option, perform some experiments
first on all configurations of an example client machine to determine the
behavior. Again, this only works to prevent an extra login on a single
machine, not system wide.
If you are not concerned about your users hacking around too much and don't
care about a login on another machine, I would opt for some version of
number 3. Otherwise, I would venture number 1.
Regards
CSB
At 07:47 AM 2/18/98 -0500, Martin G Nystrom wrote:
A user can launch an application, then launch it again. How do we make it so
that the user can only run one instance of the application?
Martin Nystrom
Eli Lilly and Company
([email protected])
Curtis Bragdon, Senior Consultant, Forte Software
[email protected]
Voice Mail: (510) 986-3807
Paging: (888) 687-6723
"I've seen dozens of triggering towns." - Richard Hugo

Yet another quick and dirty solution is to use local ExternalConnections.
This is a single instance per machine solution.
Example is attached.
(See attached file: TestOne.pex)
[email protected] on 02/18/98 10:01:07 PM
Please respond to [email protected]
To: [email protected]
cc: [email protected]
Subject: Re: How do I keep an application from being started more than
once?
Martin,
there are two ways to read your question
(a) no more than one instance of an application per machine
(b) no more than one instance of an application per "user"
now if a user has only one machine, and your system has "userids" and you
only want
one active "session" per "user" then the distinction is irrelevant.
However, many systems
let people share logins, so a token based thing enforcing one login will be
problematic.
The downside of #1 approach suggested by Curtis happens when a machine gets
hosed without "logging" the user off the security system, then they can't
get in until their ticket expires or a sysadmin gets involved. Should be
manageable, however. But this enforces one application
instance per user, unless you check both for the presence of an active
token for that user as well as the presence of a token tied to that
particular node name. Otherwise there is nothing to prevent the same user
from launching the app again and logging in as a different user. This is
definitely the best approach of the bunch, and can be adapted for either
(a) or (b).
Suggestion # 2 won't work unless the application is built as a compiled
client,
since the process name will be 'ftexec' and not the "name" of the
application. And it doesn't
prevent a user from launching the app from a different machine (or people
sharing logins). So again it depends on what you are trying to achieve.
#3 also only prevents multiple instances per machine, not necessarily by
user. Of course
most people don't have multiple machines. The point is that you may be
trying to
prevent your users from sharing logins. In which case the file thing won't
do it.
Some other ideas:
1. You could, however, enforce one application per machine using the
installed partition agent's ExecutingPartition instrument name. As long as
the user doesn't run the app in a different environment, you can have the
app check at startup time if there is another
ActivePartition running under the same InstalledPartition name.
(ActivePartitions are child agents
of InstalledPartitions).
2. use the ObjectLocationManager and bind a simple object into the naming
system using a naming scheme such as
/MyApplication/MyNode or
/MyApplication/MyUserId
the presence of either one would indicate that another instance of that
application is running on either that machine or that user. Of course
these have to be cleaned out, and subject to similar downside as
alternative #1. So you'd essentially be using the forte naming system as a
distributed lock manager (ouch).
3. Have the application remove the shortcut to launch it upon startup, and
recreate it when it is finished, or move it to a hidden place. There it
is - the worst idea I've ever come up with. Don't
do this!
Regards,
John
From: Curtis Bragdon <[email protected]>
Date: Wed, 18 Feb 1998 16:36:58 -0500
Subject: Re: How do I keep an application from being started more than
once?
Here are some quick ideas. None of them should be too hard to implement,
although each has some drawbacks.
1. Have a login server track who is logged on, and if there is already a
logon for a given user or a given machine, then deny the application
startup. The nice thing about this is that a user will not be able to have
multiple logins even by going to another machine. Then again, this may not
be so nice, and you also get a possible single point of failure on the
login server for which you will have to prepare.
2. Drop to the operating system, and get a list of processes for the client
machine. If the name of one of them matches the name of application that
is being run, then deny startup. This avoids a network hit, but requires
some OS specific code. Also, a clever user could change the name of an
executable to get around this. Note that a user could have another login
on another machine.
3. Write to a file on the local machine. You can hide the file in some
suitable place, and can also scramble some information so that a user
cannot get around having this file present by reading from the file at
startup and then writing to it. Based on the state of your application,
the file will have some scrambled information indicating if an instance of
an application can be started. If you retain the write lock (i.e. do not
close) the file for the duration of the application, you increase your
security at the risk of a confused user if the application gets terminated
without releasing the lock. Depending on the OS where the client will run,
this could be an issue. If you like this option, perform some experiments
first on all configurations of an example client machine to determine the
behavior. Again, this only works to prevent an extra login on a single
machine, not system wide.
If you are not concerned about your users hacking around too much and don't
care about a login on another machine, I would opt for some version of
number 3. Otherwise, I would venture number 1.
Regards
CSB
At 07:47 AM 2/18/98 -0500, Martin G Nystrom wrote:
A user can launch an application, then launch it again. How do we make itso
that the user can only run one instance of the application?
Martin Nystrom
Eli Lilly and Company
([email protected])
Curtis Bragdon, Senior Consultant, Forte Software
[email protected]
Voice Mail: (510) 986-3807
Paging: (888) 687-6723
"I've seen dozens of triggering towns." - Richard Hugo
John Jamison
Vice President of Technology
Sage IT Partners, Inc.
415 392 7243 x 306
[email protected]

I downloaded a movie to my ipad, when synced with computer, the computer is now also downloading the movie. why? and how do i stop the movie from being downloaded again

i downloaded a movie to my ipad, when synced with computer, the computer is now also downloading the movie. why? and how do i stop the movie from being downloaded again

Do you not want a backup of the iTunes content on your computer in the event the iPad is lost, stolen, or simply fails?

Stop Images from being downloaded?

I'm wondering if there is a way to stop your images from
being downloaded off your website without using Flash.
Is there another way?
Thanks
Zoe

"zoelinn" <[email protected]> wrote in
message
news:eimddr$oui$[email protected]..
> Thanks for the definitive response, exactly what I
needed.
And thanks for not arguing when they hear that definitive
answer, like most
people do!
Patty Ayers | www.WebDevBiz.com
Free Articles on the Business of Web Development
Web Design Contract, Estimate Request Form, Estimate
Worksheet

How do I protect an image from being downloaded?

I want to be in a position to prevent images from being downloaded from a muse site. Is this possible?
David

Widgets are available from a couple different sources that disable right-click mouse functions on a web page. That prevents someone from right clicking an image and choosing "save image" options. Unfortunately nothing can prevent someone from grabbing a web page image using other methods, like taking screen shots or hacking the web browser's cache.
Other alternatives:
• Watermark your images using visible and/or invisible methods.
• Limit the resolution and quality levels of the images you upload.
• Bake other visual elements or user interface elements into the images, making visitor saved images either incomplete or just screwed up. They don't get a pristine image to try selling off to some stock photography company.

Preventing Photos from being downloaded

I am looking for a way of protecting my photos from being downloaded off my web site. Does anyone have any ideas?
Cheers

Hi Ken
See this previous thread, http://discussions.apple.com/thread.jspa?messageID=1763218&#1763218
It doesn't really look to good......
Will
1GHz G4, 15" PowerBook, Airport Network, 1G iPod Mini Mac OS X (10.4.5) Updated - Get Started with iWeb (WillG4PB.com)

Is internet security required to keep my email from being hacked?

Is any type of Internet Security required to keep my email from being hacked?

No not needed for a non jailbroken apple device.

Protect child SWF from being downloaded

Hi, I've been struggling with this for a while and i cannot
find how to do this....
I have a main Flex app (main.swf) that load other pieces of
content (content.swf, content2.jpg, etc...). I want those pieces of
contents to be accessible only by using main.swf. I've tried to put
my content outside the web root and access it in main.swf using an
image container with the source :
http://www.server.com/file?content.swf&key=secret,
but anyone can access this string and download content.swf.
So, how can i protect content.swf from being downloaded...
Note that i cannot embed content.swf, content2.jpg, etc... since
there will be too many files...
Any help would be appreciated

I'm going to throw this out there and say, simply, that you
can't. Just the fact that someone is viewing the content means
that's it's already downloaded to their system, albeit buried in a
temp folder somewhere.
I think instead of stopping someone from downloading it, you
could find a way to stop it from working once it's separated from
the web server it's currently deployed on.
Someone please correct me if I'm wrong, of course...
Jon

How to provent my applet from beening downloaded by others?

i display my applet on my web-site.
is it possible to do somethings (i don't know) to provent my applet from beening downloaded by others?

i display my applet on my web-site.
is it possible to do somethings (i don't know) to
provent my applet from beening downloaded by others?Those are two mutually exclusive statements. If you have something on your web site then it's available for download to a browser or it's not very useful. Maybe you want to do something with your .htaccess file (assuming you are using Apache)
http://www.javascriptkit.com/howto/htaccess.shtml
To only provide access to properly credentialed users?
Good Luck
Lee

Keeping my applet from being downloaded

Similar Messages

Maybe you are looking for