You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cocoon.apache.org by Grzegorz Goliatus TaƄczyk <go...@warsztat.pac.pl> on 2004/03/26 13:15:22 UTC

Cocoon + Java Applet security PROBLEM

Witajcie!

  First I want to explain what I want to do. I have some experiment
  simulator. It takes init data and gives two number result. Users on
  www can add new/modify init data records. Simulator at deadline
  stars processing this data and assigns result numbers to each of
  them. That is a big abstraction of that what I really want to do :-)

  Simulator is written in Java and here my simple idea starts. I want
  to put simulator in java applet which will get initdata record from
  server and send result numbers to server. I will put small rect
  somewhere on the www, and when visitor will browse ower the site he
  will automaticaly help to speed up result numbers calculation
  process. It works in simple way:
  1. applet gets unprocessed data from some address. Server marks this initdata as
  "beign externally processed".
  2. applet makes experiment simulation
  3. if he have result number he sends it with initdataID to server.
  Server marks this initdata as "processed".

  Also server makes internall simulations, but 100 visitors computers
  are better than one computer :)

  And now the PROBLEM :|

  Java Applet can be decompiled and some ugly person can modify it and
  destroy simulation process. How to avoid this situation?

  Java question: is there any way to make applet decompilation
  impossible?

  Cocoon question: How to check that request comes from java applet
  lanuched on my website?

  Need Your help! :D

-- 
Pozdrowienia,
 Grzegorz                          mailto:goliatus@warsztat.pac.pl


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@cocoon.apache.org
For additional commands, e-mail: users-help@cocoon.apache.org