Path: ...!news.mixmin.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Konstantin Kushnir <chpock@gmail.com>
Newsgroups: comp.lang.tcl
Subject: Re: ANNOUNCE: cookit v2.2.0
Date: Mon, 30 Sep 2024 15:56:14 +0300
Organization: A noiseless patient Spider
Lines: 29
Message-ID: <20240930155614.a3f1966b8c4d8fe24921cfdb@gmail.com>
References: <20240927175648.5e7873a0a6a6be4e25b4eef5@gmail.com>
	<vdduuf$262q9$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Injection-Date: Mon, 30 Sep 2024 14:56:15 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="0854eda5ad1958b9d7f7eb98db258c58";
	logging-data="1370445"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX19gytRvUJaByslZgMHAcEYo"
Cancel-Lock: sha1:siHoWtRSQGi8P/My5hLInp9dig0=
X-Newsreader: Sylpheed 3.7.0 (GTK+ 2.24.30; i686-pc-mingw32)
Bytes: 2287

On Mon, 30 Sep 2024 10:35:59 -0000 (UTC)
Losko <xefog66666@dxice.com> wrote:

> Just one question: is unwrappable or not?
> Reading the docs I can't see an option to unwrap the cookit, Can you confirm?
> And... that would be ok from my point of view, better than tclkits/starkits.
> What about the "safety" of the code obfuscation?

As for now, there is no any code obfuscation. Despite the fact that
there is no unwrap option there, but it is possible get files from the
archive in many ways. Tcl runtime and other code in it is packaged
using cookfs ( https://github.com/chpock/cookfs ). Thus it is possible
to mount executable/archive in Tcl interpretator as VFS and perform any
manipulations with files. There is also a simple cookbox utility that
demonstrates the capabilities of cookfs and allows to work with
cookfs archives with an interface similar to the tar command:
https://github.com/chpock/cookbox

However, cookfs provides strong encryption using password (here is the
annoucement for that:
https://www.rocksolidbbs.com/devel/article-flat.php?id=24392&group=comp.lang.tcl#24392
)

Thus, using cookit+cookfs, it is possible to build not obfuscated
applications, but really safe secure applications.

-- 
Best regards,
Konstantin Kushnir