Re: Signatures for config files

From: Etienne Charland (mystery@golden.net)
Date: 03/15/03

  • Next message: Joseph E Shook: "Re: HowTo: Check if a password is valid for a specified NT user-id"
    From: "Etienne Charland" <mystery@golden.net>
    Date: Fri, 14 Mar 2003 22:45:41 -0500
    
    

    Keep in mind that you can't make anything local fully protected. The user
    can change the program as he wish. He can remove any security check from
    your code, or do anything else. All what you can do is make it harder to
    crack.

    As Michael said, you can use NTFS to restrict write access to the config
    file, but this can be cracked too (and quite easily). There are boot disks
    that allows to change Windows's admin password...

    Etienne

    "aagora" <aagora@yahoo.com> wrote in message
    news:074801c2e95c$0dd8a4c0$a101280a@phx.gbl...
    > Hi,
    > My goal is to protect against unwanted changes
    > configuration files.
    >
    > Is it possible to protect config files (machine.config and
    > exe.config and external config file), with a signature
    > SHA1 for example, and making a exception when the file is
    > not correct ?
    >
    > Need I do it myself or is exist something in the framework
    > which do this automatically ?
    >
    > I would appreciate something like that :
    > When the machine.config is loades by the system, the
    > signature is checked automatically by the framework.
    > And, for external config files, when I open the file with
    > a reader,n the framwork do the same thing.
    >
    > Thank you.


  • Next message: Joseph E Shook: "Re: HowTo: Check if a password is valid for a specified NT user-id"

    Relevant Pages

    • Re: Signatures for config files
      ... You certainly can do SHA1 hash checking, but you should use a protection ... > My goal is to protect against unwanted changes ... > Is it possible to protect config files (machine.config and ... > signature is checked automatically by the framework. ...
      (microsoft.public.dotnet.security)
    • Re: Serious problem with .NET Framework 1.1 Configuration: Contents of all property pages invisible
      ... On second thought this may not have anything to do with the config files. ... Something else you can try is to bring up MMC, ... > So it is impossible to configure security on this installation. ... > Installing the Framework again does not help. ...
      (microsoft.public.dotnet.security)
    • Re: Principle of Holyhood
      ... Depends on what the framework does I guess, ... a main, shell extentions don't have main, etc... ... anyting from registry settings or config files or even some contextual ... such as WebPage making it much easier on the client to extend because ...
      (comp.object)
    • Re: VS 2005
      ... > What are the BizTalk 2004 issues with Framework 2.0? ... Seriously speaking, though, it is possible to run them side by side by ... modifying the .config files for all BTS services and executables and setting ...
      (microsoft.public.biztalk.general)
    • Signatures for config files
      ... Is it possible to protect config files (machine.config and ... exe.config and external config file), ... Need I do it myself or is exist something in the framework ...
      (microsoft.public.dotnet.security)

  • Quantcast