I found a way to hide JavaScript Code! (Full Version)

All Forums >> [Web Development] >> General Web Development



Message


Alchem30 -> I found a way to hide JavaScript Code! (3/20/2004 19:19:04)

Now that I have your attention... Of course everyone knows there's no 100% sure way to hide HTML and JavaScript short of disabling Right click, that is [;)]

I believe I have come up with a method of hiding that is far more challenging than any other you have ever seen. No one has yet to crack it.

I would like to invite you all to try and find the code at
http://hideit.siteexperts.com/




gorilla -> RE: I found a way to hide JavaScript Code! (3/20/2004 19:31:59)

IE6 only. Not impressed




LoriL1212 -> RE: I found a way to hide JavaScript Code! (3/20/2004 22:04:05)

There is no way to hide HTML or JavaScript from a determined person.

You can put in a .js file that keeps it off the viewable HTML source, but you can still browse to the .js file to see it.

The only way that code can be hidden is via dynamic creation - php/sql.

**edited to add --- OR you can build a FLASH interface. That code can't be stolen - but YUCK I say, LOL




Peppergal -> RE: I found a way to hide JavaScript Code! (3/20/2004 22:45:58)

quote:

there's no 100% sure way to hide HTML and JavaScript short of disabling Right click, that is


Surely you don't think disabling right click is 100% sure?




BobbyDouglas -> RE: I found a way to hide JavaScript Code! (3/21/2004 1:21:05)

I WIN

<html xmlns:qxf53e="urn:p55628">
	<head>
		<style>body{font:normal 9pt Verdana;}</style>
	</head>
	<body id="bod">
<A HREF="http://siteexperts.com"><IMG SRC="http://siteexperts.com/gifs/selogo.gif" WIDTH=170 HEIGHT=104 BORDER=0 ALIGN=left></A>
		This is the <A HREF="http://siteexperts.com/forums/viewConverse.asp?d_id=14549">Find the Source Code Challenge II</A>. The challenge, if you choose to accept, is to find the source code and tell us how you found it.  This challenge was issued March 12th by Chris Rickard. Learn more in the <A HREF="http://siteexperts.com/forums/viewConverse.asp?d_id=14549">SiteExperts.com Forum</A>. 

<P><EM>Good Luck!</EM>

		<p>The hidden script is now in the form of an alert. If you did not get the alert, try refreshing the page.
		<script>
			var HashEncode = 0x30ECC7E6F0934334BDB45658F10511EF;
			var EncodeHash = 0;
			for(var i=0;i<String(HashEncode).length;i++)
				EncodeHash += HashEncode%7;			
		</script>
		<script>
			bod.attachEvent("oncontextmenu",function(e){alert("This is just here to annoy you. \r\n\r\n\r\nI wonder how the 133t h4xor script kiddies protect their Scripts from Apple Users?");e.returnValue=false;});
			try{if(document.namespaces[0].urn=="urn:p55628")document.write("<scrip" + "t id='wtf' src='hidden.asp?pass=30ECC7E6F0934334BDB45658F10511EF'></scr" + "ipt>");}catch(ex){alert("Sorry, IE6 Only");}			
		</script>
	</body>
</html>




Spooky -> RE: I found a way to hide JavaScript Code! (3/21/2004 2:23:14)

So I cant get an alert - the point is?
You only want to code for IE 6? Again the point is???




ellipisces -> RE: I found a way to hide JavaScript Code! (3/21/2004 3:03:31)

quote:

The only way that code can be hidden is via dynamic creation - php/sql.
ASP?

my problem is that every time I hide something, then I forget where I put it, only to be found years later...




Peppergal -> RE: I found a way to hide JavaScript Code! (3/21/2004 8:30:30)

Well, heck, I saw that too. I thought there must have been something else; too easy to see.

Karen




Spooky -> RE: I found a way to hide JavaScript Code! (3/21/2004 14:47:07)

/* If you are seeing this, you've won. Yay! */

So its been cracked?
At the end of the day its just smoke and mirrors.
If there was a secure (and useful) reason for doing it, then it would be commonplace.

quote:

I just got done trolling various web dev forums [ I feel so dirty now :( ] to bring in some people to try and beat the challenge. Who knows maybe it will even bring in some fresh talent to SiteExperts


I tried to get in, but I couldnt crack the registration [&:]




ellipisces -> RE: I found a way to hide JavaScript Code! (3/22/2004 2:50:44)

quote:

fresh talent to SiteExperts
or some talent period....




Giomanach -> RE: I found a way to hide JavaScript Code! (3/22/2004 3:44:03)

<$0.02>

Just to throw my bit in:

JavaScript is a client side form of coding, and all processes through it are done on the users computer, therefore, even if you do hide it, they will still get it. You can't hide the script from certain people, just the older browsers.

For a script/code that is not done of the client side, and hides all of the coding, use ASP/PHP/CGI. They are server side, preprocessor scripts. Basically what this means is they process the scripting/coding, before it leaves the server and transmits a HTML document to the user as per their request.

The only way to fully hide JavaScript is:

DONT USE IT

Dan

</$0.02>




Alchem30 -> RE: I found a way to hide JavaScript Code! (3/25/2004 20:23:15)

>>There is no way to hide HTML or JavaScript from a determined person.
I know. You're preaching to the choir. Its just a game.

>>You can put in a .js file that keeps it off the viewable HTML source, but you can still browse to the .js file to see it.

True.

>>The only way that code can be hidden is via dynamic creation - php/sql.
This is kinda correct, kinda not. Server Side code like PHP gets executed on the server, with only output specifically designated as output. You can't see the server side code, but you can certainly see its results.

>>edited to add --- OR you can build a FLASH interface. That code can't be stolen - but YUCK I say, LOL
Not sure if that was sarcasm like my little right click remark. If it was, then :)

If not then sorry:
http://www.google.com/search?sourceid=navclient&ie=UTF-8&oe=UTF-8&q=flash+decompiler




Alchem30 -> RE: I found a way to hide JavaScript Code! (3/25/2004 20:24:58)

quote:

ORIGINAL: Peppergal
Surely you don't think disabling right click is 100% sure?


By no means... It was just a joke. [:)]




Alchem30 -> RE: I found a way to hide JavaScript Code! (3/25/2004 20:26:35)

Sorry that is not the answer I'm looking for...




Alchem30 -> RE: I found a way to hide JavaScript Code! (3/25/2004 20:28:34)

quote:

ORIGINAL: Spooky

So I cant get an alert - the point is?

To find the original code that made the alert. Its a game.

quote:

ORIGINAL: Spooky
You only want to code for IE 6? Again the point is???

To find the original code that made the alert. Its a game.

This message brought to you by the department of redundancy department. :)




Alchem30 -> RE: I found a way to hide JavaScript Code! (3/25/2004 20:33:26)

quote:

ORIGINAL: Spooky
At the end of the day its just smoke and mirrors.

Exactly. If it was some kind of technological breakthrough I'd be selling it instead of playing games. :)

quote:

ORIGINAL: Spooky
If there was a secure (and useful) reason for doing it, then it would be commonplace.

I agree.

quote:


I tried to get in, but I couldnt crack the registration [&:]


If that was a crack at me or SiteExperts then "Zing". If you really are having trouble registering I'm willing to help you.




Alchem30 -> RE: I found a way to hide JavaScript Code! (3/25/2004 20:37:16)

quote:

ORIGINAL: ellipisces
or some talent period....


Wow, now that just uncalled for.

"You're just a stupid head"
Now that was uncalled for too and I apologize for it.




Alchem30 -> RE: I found a way to hide JavaScript Code! (3/25/2004 20:42:42)

quote:

ORIGINAL: Giomanach

<$0.02>

Just to throw my bit in:

JavaScript is a client side form of coding, and all processes through it are done on the users computer, therefore, even if you do hide it, they will still get it. You can't hide the script from certain people, just the older browsers.

For a script/code that is not done of the client side, and hides all of the coding, use ASP/PHP/CGI. They are server side, preprocessor scripts. Basically what this means is they process the scripting/coding, before it leaves the server and transmits a HTML document to the user as per their request.

The only way to fully hide JavaScript is:

DONT USE IT

Dan

</$0.02>


Very good. You've just explained why ther'es no successful commercial software that does any kind of assured protection.

Just to throw in more random thoughts the same thing can be said about HTML, and any pictures you want to have seen on the Internet. It's also quite impossible to prevent someone from printing a web page.

By the way I have a GAME maybe you'd like to play.
http://hideit.siteexperts.com/




Peppergal -> RE: I found a way to hide JavaScript Code! (3/25/2004 21:08:48)

quote:

quote:

ORIGINAL: Peppergal
Surely you don't think disabling right click is 100% sure?



By no means... It was just a joke.


Whew...I was a little concerned there. LOL[;)]




Alchem30 -> RE: I found a way to hide JavaScript Code! (3/25/2004 21:21:27)

:)




Spooky -> RE: I found a way to hide JavaScript Code! (3/25/2004 21:42:19)

quote:

To find the original code that made the alert. Its a game.


With IE 6 I didnt get an alert at all - so to find code that doesnt exist was kind of meaningless [;)]




Giomanach -> RE: I found a way to hide JavaScript Code! (3/26/2004 3:53:39)

I'm getting annoyed at this:

quote:

Very good. You've just explained why ther'es no successful commercial software that does any kind of assured protection.

Wrong I have merely stated that there is no way to hide JavaScript from the end user. And you obviously don't know how Server Side Preprocessor script work. The web author will write a web page out of ASP/PHP/CGI, this will sit on the server and process the users requests. I will NOT show any coding to the end user, as it sends a HTML document to them, to display results, whether they be from a database or external site. The user DOES NOT see any of the coding involved, just a HTML document.

quote:

Just to throw in more random thoughts the same thing can be said about HTML, and any pictures you want to have seen on the Internet. It's also quite impossible to prevent someone from printing a web page.

They are not randomn thoughts. HTML cannot be hidden from users as it is the most basic form of Web coding, and must be downloaded to the local machine for the browser to read it and display it ina GUI. I know Images can merely be saved and downloaded, but there are ways around it. And it doesn't involve JavaScript/ASP/PHP,. it's merely watermark the image.

It is impossible to prevent users printing web pages, but what does this have to do with Hiding JavaScript?

Oh and BTW, what if the user has JavaScript turned off????? They can still view it on the HTML view




Alchem30 -> RE: I found a way to hide JavaScript Code! (3/26/2004 13:17:41)

quote:

ORIGINAL: Giomanach

I'm getting annoyed at this:


I'm sorry. I was being antagonizing and that really doesn't do anyone any good. I do agree with all that you have stated. However having said that I have created a game that makes it very difficult to get the original javascript.
quote:

And you obviously don't know how Server Side Preprocessor script work. ...

Again, not to be antagonistic (I'm really not trying to make enemies here, I promise) but I do know a thing or two about server scripting. Prior proof in fact can be seen on PostID 190533.

quote:

it's merely watermark the image

That is only effective from a legal standpoint, however in the end it is the only type of protection that has had a fair sucess rate. (Of course that also depends on the contries of the parties involved too)

quote:


It is impossible to prevent users printing web pages, but what does this have to do with Hiding JavaScript?

Nothing. I was just being annoying and I apologize. The point I was trying to make is that the fact that it is impossible to hide javascript is irrelevant to point that my game makes it very difficult.
quote:


Oh and BTW, what if the user has JavaScript turned off????? They can still view it on the HTML view

I admit I am confused by this statement. In the context of the game turning off JavaScript really only has net the effect of supressing the alert.




Alchem30 -> RE: I found a way to hide JavaScript Code! (3/26/2004 13:23:44)

quote:

ORIGINAL: Spooky
With IE 6 I didnt get an alert at all - so to find code that doesnt exist was kind of meaningless [;)]

Assuming you have JavaScript enabled :), did you try refreshing the page? There is a slight timing issue involved and refreshing usually works if you don't get it the first time.

Otherwise I would suspect that something is wrong with MS JScript or IE on your computer. A subtle corruption perhaps that often happens with IE [Now I know you'll agree with me on that stamement :) ]




ellipisces -> RE: I found a way to hide JavaScript Code! (3/28/2004 3:20:20)

well, considering that approx 10% of users have Javascript turned off, and;

the fact that Microsoft lost the lawsuit with Sun, and has two years to come up with a solution. (Read: they will never play well together again, and that's probably the cause of this "A subtle corruption perhaps that often happens with IE [Now I know you'll agree with me on that stamement :) ] ") and the fact that the Microsoft browser is used on over 90% of the computers, but that is something that an expert otta know...

Go ahead, spend your time trying to hide Javascript code!

BTW - have you actually looked at your site on a Mac???




Page: [1]

Valid CSS!




Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI
6.201172E-02