Re: possible to detect if a loaded assembly was verified?



Sweet... that works perfectly, thanks. Now I've got a 5-line segment of code I can sprinkle throughout my apps to really minimize the chance of tampering.


Hello Nicole Calinoiu" calinoiu REMOVETHIS AT gmail DOT com,

Yes, it's possible. See
http://blogs.msdn.com/shawnfa/archive/2004/06/07/150378.aspx for
details.

"Eric Pearson" <reply@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:e3cfe93622f38c851e84c7fe8f0@xxxxxxxxxxxxxxxxxxxxxxx

Does anyone know....

is it possible to see if a loaded assembly skipped verification or
was verified?

I'd like my application code to be able to programatically verify
that a loaded dependency assembly is indeed signed properly and did
NOT use skip-verification, other than checking the verification lists
by shelling out to sn.

This way I can greatly lower the probability that a dependent
assembly was recompiled by an untrusted source.



.



Relevant Pages

  • Re: .NET is not secure
    ... | algorithm may not verify code that does not contain unsafe code. ... This matches what I know about code verification and the halting ... There's also a chance that in conjunction with stack ... that trusted code could drop its privileges to defend against being ...
    (comp.security.firewalls)
  • Re: .NET is not secure
    ... | chance that the code contains unsafe code, however, this conservative ... | algorithm may not verify code that does not contain unsafe code. ... This matches what I know about code verification and the halting ...
    (comp.security.firewalls)
  • Re: Semi-OT: This stupid new "verification" google makes you do to post
    ... 'verification' word which is always something like "ipenem" or ... "tampering" or automated stuff coming in here, ... blocks spam and is good in that respect. ... I think if you post over a certain number of excepted posts ...
    (rec.games.pinball)
  • Re: Semi-OT: This stupid new "verification" google makes you do to post
    ... 'verification' word which is always something like "ipenem" or ... "tampering" or automated stuff coming in here, ... blocks spam and is good in that respect. ... I don't see those verification codes.. ...
    (rec.games.pinball)

Quantcast