Click here to Skip to main content
15,902,784 members
Home / Discussions / COM
   

COM

 
GeneralRe: Is it necessary to Implement class factory interface Pin
Vi25-Jan-04 22:06
Vi25-Jan-04 22:06 
GeneralOut-of-proc weirdness: Case Closed Pin
Jörgen Sigvardsson4-Jan-04 23:33
Jörgen Sigvardsson4-Jan-04 23:33 
GeneralReleasing IDirectinputdevice interface Pin
Manju4-Jan-04 21:50
Manju4-Jan-04 21:50 
GeneralRe: Releasing IDirectinputdevice interface Pin
JJeffrey7-Jan-04 14:27
JJeffrey7-Jan-04 14:27 
GeneralOutlook Rule programming Pin
nightcoder4-Jan-04 7:14
nightcoder4-Jan-04 7:14 
GeneralUsing Word i nC# Pin
Stephane David3-Jan-04 5:43
Stephane David3-Jan-04 5:43 
GeneralImplentation of Pin
SiddharthAtw2-Jan-04 1:54
SiddharthAtw2-Jan-04 1:54 
GeneralRe: Implentation of Pin
Heath Stewart3-Jan-04 8:19
protectorHeath Stewart3-Jan-04 8:19 
There is no concrete way. Remember that any key you use to encrypt such information can relatively easily be extracted and used to decrypt passwords, so don't do that.

A good mechanism would be to hash the password using MD5 or SHA1 (both good hash algorithms) before transmitting across the 'net or storing. These two algorithms are mathematically proven to be irreversable. If the user has the "Remember Password" option checked, then read the value from a file or the registry - which is the password hash - and transmit it without hashing it again (which is also hingent on whether "Remember Password" is checked). This is pretty good for secure storage, as well as somewhat secure transmission.

On the server side, you simply store the password hash and compare the hash sent by the user with the hash stored in the database (or whatever).

One warning, though - sending just the hash is subject to replay attacks. If someone intercepts that hash, they merely have to send it with some program they could right and get access to the user's information. Instead, before sending the hash, request another hash that is used to hash the password hash, but that hash should be reversible. When it gets to the server, extract the original password hash and compare. This is known as a challenge-response mechanism, and there's several ways to do it. Trying googling for more details. Note: digest authentication in web browsers use this mechanism, so you could start there if you like. There is an RFC for it, so try looking at IETF RFC Page[^].

 

-----BEGIN GEEK CODE BLOCK-----
Version: 3.21
GCS/G/MU d- s: a- C++++ UL@ P++(+++) L+(--) E--- W+++ N++ o+ K? w++++ O- M(+) V? PS-- PE Y++ PGP++ t++@ 5 X+++ R+@ tv+ b(-)>b++ DI++++ D+ G e++>+++ h---* r+++ y+++
-----END GEEK CODE BLOCK-----
GeneralRe: Implentation of Pin
Anonymous3-Jan-04 19:19
Anonymous3-Jan-04 19:19 
QuestionHow to bypass login window? Pin
SiddharthAtw31-Dec-03 0:03
SiddharthAtw31-Dec-03 0:03 
AnswerRe: How to bypass login window? Pin
valikac2-Jan-04 11:48
valikac2-Jan-04 11:48 
GeneralRe: How to bypass login window? Pin
SiddharthAtw2-Jan-04 18:20
SiddharthAtw2-Jan-04 18:20 
Generalhelp in an active x control Pin
safee ullah30-Dec-03 18:52
safee ullah30-Dec-03 18:52 
GeneralRe: help in an active x control Pin
bryce30-Dec-03 19:13
bryce30-Dec-03 19:13 
GeneralRe: help in an active x control Pin
Abhishek Srivastava30-Dec-03 19:34
Abhishek Srivastava30-Dec-03 19:34 
QuestionHow to develop pluggable application? Pin
Anonymous30-Dec-03 11:06
Anonymous30-Dec-03 11:06 
AnswerRe: How to develop pluggable application? Pin
Tristan Rhodes30-Dec-03 13:46
Tristan Rhodes30-Dec-03 13:46 
GeneralPassing CRichEditCtrl pointer to COM Pin
BazM30-Dec-03 10:08
BazM30-Dec-03 10:08 
GeneralRe: Passing CRichEditCtrl pointer to COM Pin
BazM31-Dec-03 3:02
BazM31-Dec-03 3:02 
GeneralForward Defining Structures Pin
Tristan Rhodes30-Dec-03 9:22
Tristan Rhodes30-Dec-03 9:22 
QuestionWho can tell me GUIDGEN.EXE three item mean? Pin
Peng Yao29-Dec-03 21:55
sussPeng Yao29-Dec-03 21:55 
AnswerRe: Who can tell me GUIDGEN.EXE three item mean? Pin
geo_m30-Dec-03 0:24
geo_m30-Dec-03 0:24 
Generalmidl problems Pin
Tristan Rhodes28-Dec-03 6:05
Tristan Rhodes28-Dec-03 6:05 
GeneralRe: midl problems Pin
Stefan Pedersen28-Dec-03 6:19
Stefan Pedersen28-Dec-03 6:19 
GeneralRe: midl problems Pin
Tristan Rhodes28-Dec-03 6:40
Tristan Rhodes28-Dec-03 6:40 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.