Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Any tips on electron build tools to secure Electron apps that have proprietary logic like this seems like it would have? I saw your posts and was curious since this seems like it would have a lot of proprietary JS to protect against cracking. I've seen Bytenode and asarmor but they don't seem as though they're very well maintained or ready for primetime.

I'm working towards releasing my first Electron app now and this has been a concern for me.



There’s an entire philosophy behind any anti-piracy strategy. For me, it’s about adding enough obfuscation to make it challenging for a pirate while simultaneously keeping the price low enough so that cracking isn’t a juicy target. Most users want to support you, but they won’t put up with much purchase friction.

The wild thing about electron, and my app specifically, is that it relies on a handful of native modules and at least one WASM “binary” - and let me tell you, if you think you understand how it works in both dev and prod, I don’t believe you… because it’s incredibly complex and confusing. Throw in cross platform code signing, notarization, start praying.

But for everything else there’s webpack “optimizations” via uglify or similar to mangle variables and function names. Feel free to email if you’re looking for specific configs or recommendations. I’m sure there’s room for improvement on what I’ve created. Good luck!


Thanks for the insight! I think you've convinced me that it's not a huge deal. I was mostly shocked at the ease of reverse engineering my "MVP", but it would be unlikely for my specific targeted niche.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: