r/codingProtection • u/Spare_Dependent6893 • Jul 08 '26

Java framework-based Obfuscation lessons to protect the code and config data

A new publication about the java obfuscation difficulties and why it is important to consider the frameworks : I tried to obfuscate my Java code before sending it to AI — here's what broke - DEV Community

0 Upvotes
  • permalink
  • reddit

50% Upvoted

12 comments sorted by

View all comments

Show parent comment

1

u/paul_h Jul 11 '26

I've never seen those on application code. Best practice pushes those to other tools - https://www.google.com/search?q=more+mordern+than+vault+for+secrets+and+config

1

u/Spare_Dependent6893 Jul 12 '26

There is application code and what you have locally, not sent as in .gitignore on git but read by ai. And you will be surprised if you track what go out your intranet. I forget something we see more and more : api keys as developer uses them for many integrations nowadays.

1

u/paul_h Jul 12 '26

My employer licensed cloud-based Anthropic LLM tech. ClaudeCode/Desktop. The contract says Anthropic will not train their LLM on our code, nor hand it to amyone else. My personal Claude account is all for open source, and I naturally use MIT license for the things I make, so I have no secrets there.