Click here to Skip to main content
15,908,674 members
Home / Discussions / C / C++ / MFC
   

C / C++ / MFC

 
AnswerRe: How i remove a part of a string Pin
bob1697228-May-06 9:43
bob1697228-May-06 9:43 
GeneralRe: How i remove a part of a string Pin
Immunity1828-May-06 9:45
Immunity1828-May-06 9:45 
AnswerRe: How i remove a part of a string Pin
anwer_skk28-May-06 16:33
anwer_skk28-May-06 16:33 
GeneralRe: How i remove a part of a string Pin
bob1697228-May-06 16:47
bob1697228-May-06 16:47 
GeneralRe: How i remove a part of a string Pin
anwer_skk28-May-06 17:15
anwer_skk28-May-06 17:15 
GeneralRe: How i remove a part of a string Pin
bob1697228-May-06 17:33
bob1697228-May-06 17:33 
GeneralRe: How i remove a part of a string Pin
ThatsAlok28-May-06 22:54
ThatsAlok28-May-06 22:54 
QuestionCPropertyPagae Pin
ftsOne28-May-06 8:56
ftsOne28-May-06 8:56 
AnswerRe: CPropertyPagae Pin
bob1697228-May-06 10:50
bob1697228-May-06 10:50 
GeneralRe: CPropertyPagae Pin
ftsOne28-May-06 17:04
ftsOne28-May-06 17:04 
GeneralRe: CPropertyPagae Pin
bob1697228-May-06 17:57
bob1697228-May-06 17:57 
GeneralRe: CPropertyPagae Pin
ftsOne28-May-06 19:08
ftsOne28-May-06 19:08 
GeneralRe: CPropertyPagae [modified] Pin
bob1697228-May-06 19:35
bob1697228-May-06 19:35 
GeneralRe: CPropertyPagae [modified] Pin
ftsOne29-May-06 5:51
ftsOne29-May-06 5:51 
GeneralRe: CPropertyPagae [modified] Pin
bob1697229-May-06 10:13
bob1697229-May-06 10:13 
GeneralRe: CPropertyPagae [modified] Pin
ftsOne29-May-06 10:43
ftsOne29-May-06 10:43 
Questioncontrol Dlg classes in 1 application Pin
Immunity1828-May-06 8:00
Immunity1828-May-06 8:00 
AnswerRe: control Dlg classes in 1 application Pin
bob1697228-May-06 8:50
bob1697228-May-06 8:50 
GeneralRe: control Dlg classes in 1 application Pin
Immunity1828-May-06 8:54
Immunity1828-May-06 8:54 
GeneralRe: control Dlg classes in 1 application Pin
bob1697228-May-06 9:36
bob1697228-May-06 9:36 
QuestionXML/Soap/HTTP Questions (help your n00b) Pin
chasetoys28-May-06 7:19
chasetoys28-May-06 7:19 
QuestionCreateProcessWithLogonW limitations? Pin
fourierman28-May-06 6:24
fourierman28-May-06 6:24 
AnswerRe: CreateProcessWithLogonW limitations? Pin
fourierman28-May-06 10:08
fourierman28-May-06 10:08 
AnswerRe: CreateProcessWithLogonW limitations? Pin
bob1697228-May-06 11:20
bob1697228-May-06 11:20 
One issue that immediately comes to mind is the concept of obfuscating the credentials. It's very tempting to attempt IT chores such as changing HKCU registry changes, changing priviledges for user/groups, etc...

However, simply right clicking on the exe and opening with Notepad allows a user to scroll down to where your string literals all get bunched together, and where all that plain text sticks out like a sore thunb amongst all that binary crud and low and behold, there's the admin's password staring back at you. Anytime a sensitive password is one shell action away from every Joe Blow on the network, (This password obviously is the same for more than one box or you wouldn't go through all this trouble to automate the action) I tend to cringe.

You can choose to obfuscate the string literal using and encryption library but the key still needs to be stored in a literal. You could create a function that generates some string and decrypt your string literals as you use them which would eliminate any unencrypted strings be stored in the exe. This only abstracts the sensitive data but since you don't know who will get a copy of this exe as it is deployed, any determined and capable person could disassemble and trace through the code to determine the key produced by the function. How important is it to you to protect your network, machines, data, company, job?

Anyway, I'm just trying to give you a friendly sober second thought to consider at least obfuscating your credentials in the exe at a minimum instead of making it easy for the power users to see those credentials.

GeneralRe: CreateProcessWithLogonW limitations? Pin
fourierman28-May-06 11:49
fourierman28-May-06 11:49 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.