Joined: 25 Jan 2006 Posts: 8588 Location: 127.0.0.1
Posted: Wed Sep 15, 2010 5:53 pm Post subject:
Burningmace wrote:
Wiccaan wrote:
Overall, just keep sensitive data out of the executable/modules that are done in .NET and use other means to store any data that is important. Use web services when you can if you need to and so on as well.
There's a few reasons why you shouldn't do that. Firstly it requires you to mix managed an unmanaged code, which is a pretty bad idea. Second, reverse engineers are often very adept at attacking C++/C binaries. Web services can be a vulnerability too, since standard framework code is easy to hook in order to find the HTTP buffer, even when HTTPS is used.
If you want to keep your strings secure, store them in a custom database format that is encrypted and read them out as and when they are needed at runtime. You can also use the SecureString class to store data in the protected storage of the OS.
I never said to mix code, I said use other means to store the data. ;P
(Which could be a database, a data file, another code base, etc.)
Sure a web service can be insecure as well, but it is a lot more secure then giving the user the ability to locally do things. Based on how the service is coded, though, it will greatly improve your security then relying on any client sided encryption or obfuscation. (This being said for an application that would actually require an internet connection. Since using a service for an app that has no need for one would be pointless.) _________________
Joined: 25 Jan 2006 Posts: 8588 Location: 127.0.0.1
Posted: Thu Sep 16, 2010 7:35 am Post subject:
Jorghi wrote:
I got an Idea! Once I thought about how to make a secure game that runs off of your PC. HOW?
Computer: Sends Keypresses to Server
Server: Sends Gif/Image to Computer to display
How are you going to hack this muiltiplayer game without attacking the server?
Main issue with things like this is server stress. Depending on how intense/big your game is, forcing the server to literally handle everything will become too much for the machine. Even more so if you are forcing the server to render what will be seen. _________________
All times are GMT - 6 Hours Goto page Previous1, 2
Page 2 of 2
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum