SShortSingh.
Back to feed

Developer uses GraalVM Advanced Obfuscation to protect IP in open-source Quarkus platform

0
·5 views

A developer building Backbone, a SaaS platform bootstrap, has documented how to use GraalVM 25's Advanced Obfuscation (AO) feature to distribute runnable Quarkus services publicly without exposing proprietary source code. AO replaces meaningful class, method, and package names with opaque symbols in native binaries, raising the bar beyond simply shipping a JAR file whose bytecode can be easily inspected. The developer open-sourced a Backbone Community edition intended for local development, while keeping core service implementations closed behind a commercial licence. Getting AO to work with a CDI-heavy Quarkus stack proved non-trivial, as the native build initially crashed with a partially obfuscated stack trace inside SmallRye Fault Tolerance. The developer noted that AO is experimental, Oracle GraalVM-specific, and not a security or DRM solution, but serves as a practical distribution boundary for commercial open-source products.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingHacker News ·

Anthropic's Claude AI Models Experience Elevated Error Rates

Anthropic's Claude AI platform reported an incident involving elevated error rates affecting multiple models. The issue was documented on the official Claude status page. The disruption impacted users relying on various Claude model versions simultaneously. Anthropic acknowledged the incident through its status tracking system, indicating awareness and likely ongoing investigation. No further details on the root cause or resolution timeline were immediately available.

0
ProgrammingDEV Community ·

TypeSafe CEO Diogo Almeida on Jev Model, System-One Architecture, and AI Automation Gap

TypeSafe CEO Diogo Almeida discussed the launch of Jev, the company's new AI model, in a wide-ranging podcast interview, describing it as a 'System-One' programmable model optimized for intelligence per dollar rather than human-facing chat. He argued that mainstream RLHF training causes mode collapse, making models overly conservative and poorly calibrated for programmatic use cases. Almeida criticized embedding safety refusals at the API layer, comparing a reliable AI model to a database that should not unpredictably reject downstream developer calls. He emphasized that model capability stems primarily from carefully curated data rather than raw compute, and that TypeSafe's proprietary RLCD training objective is designed to remove humans from the automation loop. Almeida expressed confidence that Jev's release marks a turning point for programmable AI, noting the model entered real production workloads within its first week and that Discord community membership has already reached 100,000 users.

0
ProgrammingDEV Community ·

Guide: How to Test Risky PostgreSQL Migrations Safely Using Volume Cloning

Database migrations that pass in development can still break production, particularly when adding a NOT NULL column without a default to a table that already contains rows. A new technical guide demonstrates how to build a multi-tenant Go API backed by PostgreSQL on Unikraft Cloud, then safely test dangerous migrations by cloning the live database's persistent volume. The cloned volume is used to boot a separate, disposable Postgres instance where the risky migration runs first, ensuring failures are caught before they reach production. The guide deliberately uses Unikraft Cloud's broadly available volume-cloning mechanism rather than its enterprise-only instance branching feature, making the approach accessible without a special license. Tools used include Go, pgx, and the Goose migration library, with the workflow designed to address the shortcomings of staging databases and slow pg_dump restore cycles.

0
ProgrammingDEV Community ·

Vocabloot uses shared Kotlin code to power Android, iOS, and its JavaScript website

Vocabloot is a vocabulary-learning app that lets users identify real-world objects via camera and also offers downloadable word decks covering greetings and themed topics across ten languages. As the team built a web-based deck page, they faced a challenge: the website needed the same word-parsing and highlighting logic already written in Kotlin for the mobile apps. Rather than rewriting those rules in JavaScript, the developers used Kotlin Multiplatform to compile the shared logic for the web as well. Across the entire codebase, 85% of the Kotlin — over 79,000 lines — is now shared among Android, iOS, and the website. This approach ensures consistent behaviour, such as word highlighting during audio playback and tap-to-define functionality, across all three platforms.