Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




fulldisclosure logo Full Disclosure mailing list archives

Re: Ioncube Encoded PHP Files
From: Joachim Schipper <j.schipper () math uu nl>
Date: Thu, 22 Dec 2005 15:22:50 +0100

On Wed, Dec 21, 2005 at 11:46:00PM -0500, Valdis.Kletnieks () vt edu wrote:
On Wed, 21 Dec 2005 13:51:14 +0100, Joachim Schipper said:
Though I wonder what the point is - it's not likely to be all that hard
to run the code on another system. The main point seems to be to prevent
administrators from making local changes, and I must admit to not seeing
a problem with people who have bought the software doing that.

You've never had to handle a support call that involved a customer that was
clever enough to fuck around with the code, have you?  That's a tech support
nightmare waiting to happen, because it's guaranteed to be a major sinkhole
of resources figuring out if the customer has hit an obscure bug in your code,
or if they simply dorked it up.

That is a valid problem, but this is a rather heavy-handed solution.
Just telling them that code that has been altered will require special
consulting services instead of regular support.

                Joachim
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]