Configuration Managment Aplication Block

From: Damian (t-damianl_at_infocorp.com.uy)
Date: 02/27/04 

Date: Fri, 27 Feb 2004 12:12:49 -0300

Hi all,

            I've read the CMAB and I don't understand one thing :

            The center of all the CMAB is the .config files but this file is
not a secure place to store all the data, is it ?

            What happen if someone get holds of the .config and modifies for
example the encryptation flag of the configProvider section ?????

             I would like to know some way to secure the .config file. Is it
possible ??? If it is not, the CMAB dose not make any sense

Relevant Pages

  • Re: Hashed password secure?
    ... that only opens up when a user logs on to ... >]store should be as safe as possible, and as resistent to brute force as ... > lock for a safe whose walls are made of paper. ... Of course I'll be begging my boss for more secure systems! ...
    (sci.crypt)
  • Re: Password Cracking
    ... An interesting thing we learned during a recent vulnerability assessment is ... that even if you have a good password hardening approach and secure that ... are not as secure. ... >Rather amazingly, computers don't store passwords*. ...
    (Security-Basics)
  • RE: Where to store application expiration date in a trial app
    ... You say "Such as the Registry" making the assumption that it is a "secure ... So where is the most secure place to store ... obj as AssemblyConfigurationAttribute; ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: reveal password fix needed
    ... circumstances no program should ever store a password. ... The secure way is to ... > The point of displaying it as asterisks is not to hide it from another ... >> Windows are not secured in anything other than plaintext unlike trusted ...
    (microsoft.public.vb.general.discussion)
  • Re: How to obscure a password
    ... that the administrator has full access to their passwords. ... banking system as they use for the little web-based community site (or ... No matter how secure you make the front end (https, ... in Javascript, etc) if you store the unencrypted password anywhere, you ...
    (comp.lang.python)