5

Dexguard claims a "hacker protection factor" of 35 without any explanation of where the number comes from or what it means. I figure the actual statement is meaningless, but I'm very curious to see who is assessing these protection factors.

A Google search didn't turn up anything, so I thought that the Dexguard authors probably made it up themselves. But this Twitter post implies that there are other "hacker protection factors", out there which 35 can be compared with.

Does anyone know what the deal with this is? Is it just more pointless puffery? Is there an actual group that is assigning these numbers?

3

"Hacker Protection Factor" is a geeky play of words on "Sun Protection Factor" -- how much longer can an application be attacked before being damaged. The numbers are based on empirical evidence ("Based on our experience,..."). I thought it was cute; it is not an industry standard, but it does serve as a simple indication that an application processed with ProGuard is more difficult to reverse-engineer than the original application, and an application processed with DexGuard is a lot more difficult to reverse-engineer.

(I am the developer of ProGuard and DexGuard)

6

Epic Marketing Technique!

When you look at their cheaper product you see it has it HPF of 5. Throwing with numbers or something people understand is a common trick when trying to sell something customers don't understand but want (e.g. IT security, volcano insurance).

But a rating of 35 is high. And hardly seen in the industry, other known packers like UPX, ASPack and y0da don't even have a rating of 1. So you should have a strong consideration.

  • shouldn't the sentence start "Throwing with numbers or something people don't understand"? ;) – 0xC0000022L Jul 2 '13 at 10:32
  • Oh no it should have been: "Throwing with numbers or something people think they do understand, but don't" I've also heard about "ThreatsPerSecond" or "ThreatIndex". It's great for techys to convince their manager! ;) – Stolas Jul 2 '13 at 12:48
5

It's something that their marketing team made up.

There is no such "hacker protection factor" rating in the industry.

  • 5
    Particularly in the area of software protection, vendors are wont to throw around meaningless and/or patently incorrect terminology in order to convince prospective buyers of the efficacy of their systems. It's a good source of amusement to those with the ability to break them. – Rolf Rolles Jul 1 '13 at 6:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.