Click here to Skip to main content
15,897,718 members
Home / Discussions / C / C++ / MFC
   

C / C++ / MFC

 
Questioncontrol Dlg classes in 1 application Pin
Immunity1828-May-06 8:00
Immunity1828-May-06 8:00 
AnswerRe: control Dlg classes in 1 application Pin
bob1697228-May-06 8:50
bob1697228-May-06 8:50 
GeneralRe: control Dlg classes in 1 application Pin
Immunity1828-May-06 8:54
Immunity1828-May-06 8:54 
GeneralRe: control Dlg classes in 1 application Pin
bob1697228-May-06 9:36
bob1697228-May-06 9:36 
QuestionXML/Soap/HTTP Questions (help your n00b) Pin
chasetoys28-May-06 7:19
chasetoys28-May-06 7:19 
QuestionCreateProcessWithLogonW limitations? Pin
fourierman28-May-06 6:24
fourierman28-May-06 6:24 
AnswerRe: CreateProcessWithLogonW limitations? Pin
fourierman28-May-06 10:08
fourierman28-May-06 10:08 
AnswerRe: CreateProcessWithLogonW limitations? Pin
bob1697228-May-06 11:20
bob1697228-May-06 11:20 
One issue that immediately comes to mind is the concept of obfuscating the credentials. It's very tempting to attempt IT chores such as changing HKCU registry changes, changing priviledges for user/groups, etc...

However, simply right clicking on the exe and opening with Notepad allows a user to scroll down to where your string literals all get bunched together, and where all that plain text sticks out like a sore thunb amongst all that binary crud and low and behold, there's the admin's password staring back at you. Anytime a sensitive password is one shell action away from every Joe Blow on the network, (This password obviously is the same for more than one box or you wouldn't go through all this trouble to automate the action) I tend to cringe.

You can choose to obfuscate the string literal using and encryption library but the key still needs to be stored in a literal. You could create a function that generates some string and decrypt your string literals as you use them which would eliminate any unencrypted strings be stored in the exe. This only abstracts the sensitive data but since you don't know who will get a copy of this exe as it is deployed, any determined and capable person could disassemble and trace through the code to determine the key produced by the function. How important is it to you to protect your network, machines, data, company, job?

Anyway, I'm just trying to give you a friendly sober second thought to consider at least obfuscating your credentials in the exe at a minimum instead of making it easy for the power users to see those credentials.

GeneralRe: CreateProcessWithLogonW limitations? Pin
fourierman28-May-06 11:49
fourierman28-May-06 11:49 
QuestionHow i write text in a file Pin
Immunity1828-May-06 5:59
Immunity1828-May-06 5:59 
AnswerRe: How i write text in a file [modified] Pin
bob1697228-May-06 6:30
bob1697228-May-06 6:30 
GeneralRe: How i write text in a file [modified] Pin
Immunity1828-May-06 6:49
Immunity1828-May-06 6:49 
GeneralRe: How i write text in a file [modified] Pin
bob1697228-May-06 7:07
bob1697228-May-06 7:07 
GeneralRe: How i write text in a file [modified] Pin
bob1697228-May-06 7:16
bob1697228-May-06 7:16 
GeneralRe: How i write text in a file [modified] Pin
Immunity1828-May-06 7:18
Immunity1828-May-06 7:18 
QuestionSpeed up listview when adding thousands of items Pin
Master Gollom28-May-06 5:56
Master Gollom28-May-06 5:56 
AnswerRe: Speed up listview when adding thousands of items Pin
bob1697228-May-06 6:36
bob1697228-May-06 6:36 
GeneralRe: Speed up listview when adding thousands of items Pin
Master Gollom28-May-06 6:41
Master Gollom28-May-06 6:41 
GeneralRe: Speed up listview when adding thousands of items Pin
Immunity1828-May-06 9:32
Immunity1828-May-06 9:32 
AnswerRe: Speed up listview when adding thousands of items [modified] Pin
anwer_skk28-May-06 16:45
anwer_skk28-May-06 16:45 
GeneralRe: Speed up listview when adding thousands of items [modified] Pin
Master Gollom28-May-06 22:32
Master Gollom28-May-06 22:32 
QuestionDragListBox with additions Pin
Luksky28-May-06 4:30
Luksky28-May-06 4:30 
AnswerRe: DragListBox with additions Pin
Luksky28-May-06 11:57
Luksky28-May-06 11:57 
QuestionHow do i make another window w/o code Pin
Haun the 2nd28-May-06 2:51
Haun the 2nd28-May-06 2:51 
AnswerRe: How do i make another window w/o code Pin
bob1697228-May-06 7:33
bob1697228-May-06 7:33 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.