Re: Does .NET detect alterations to an assembly?

From: Shawn Farkas [MS] (shawnfa@online.microsoft.com)
Date: 02/14/03


From: "Shawn Farkas [MS]" <shawnfa@online.microsoft.com>
Date: Fri, 14 Feb 2003 11:05:47 -0800


David,

    If you sign your assembly, then the framework will detect if it has been
tampered with, and refuse to load it.

-Shawn

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email directly to this alias, this alias is for newsgroup
purposes only.
"David Thom" <davidt@npsinc.com> wrote in message
news:uk8oMSD1CHA.1644@TK2MSFTNGP12...
> If an assembly were altered - say, with a hex editor - does .NET detect
the
> alteration?
>
> If, for example, we embed a string value in a .NET assembly, can it be
> changed by a hacker? (we don't care if it can be viewed, we just don't
want
> it to be  changed).
>
> I seem to recall that .NET assemblies have a "hash count/code" to protect
> against this. But I don't know if that "feature" requires code signing or
> some other overt action on the developer's/deployer's part in order to
> activate it.
>
> If I simply create a .NET assembly and do nothing else, is it protected
> against modification?  Or should I say, will the alteration at least be
> detected?
>
> Thanks!
>
> David Thom
>
>
>
>


Relevant Pages