|
Tnx a lot
Love is the law, love under will.
|
|
|
|
|
Hello,
I work in a company developing a massive multiplayer game. The game is a server-client app. Yesterday my boss came up to me and assigned me to the security issue in the game. saying - "think about ways hackers can break in the server trying to play, or just crash it, after u think about these issues find some solutions and come back to me".
"sweet jumpin Jesus", i was thinking to miself, "what does the dude want from me? If hackers were able to break the pentagon, how should i deel with'em"?
anyway here are some more details about the subject and some thoughts i had:
basic assumtions and facts-
1. any hacker can have the client app (executional).
2. any hacker knows the IP & port of the server.
3. the protocol is UDP based - so it is possible to send data to the server just by knowing IP+port (without listen-accept-bind process)
basic questions to be asked-
1. to which extend it is possible to re-construct the code (pseudo-code, or assembly) from the executional (the code is written in C++)?
2. what kind of malicious data is likely a hacker will try to send in order to bring down the server
3. spoofing- imposters trying to disguise as legal users- what do i have to expect
4. what other methods of crashing the server are available and how to prevent them?
As u can see there are many issues to think about...
I would like to hear more reader ideas about these problems, and where can i find articles (most important).
Thank u and may the force b with you.
|
|
|
|
|
2. Any that they think will do the job;
4. Obvious ones are buffer overruns. For example if you recv stuff from a socket, you MUST check that you won't overflow an input buffer. A common trick (and I'm not exactly giving away secrets) is to overrun a stack-frame based buffer and hence replace the return address on the stack. Won't happen if you check for overrun and stop writing to the buffer, for instance. For more examples, you might want to check out the security section on the MSDN web site.
Steve S
[This signature space available for rent]
|
|
|
|
|
You also might want to look at message authentication codes and serial numbers.
Davy
Blog for Software Testing, Bugs, Quality, Security and Stability - www.latedecember.com
News From Angus, Scotland - The Angus Blog
My Personal Blog - Homepage.
|
|
|
|
|
Does anyone know how can write an RTL enabled program such as arabic edition of many profesional programs?
How can display menu in arabic in right to left format? How can change MFC resources to show strings in arabic (standard menus like File, Edit, View, ...) also how can show dialogs with arabic labels...
Is there any tutorial or document?
A. Riazi
|
|
|
|
|
Please don't shoot me if you think this is a horrible suggestion, something that should not be included here on CP, or something that has already been written on CP.
My suggestion for an article is one on suggestions on how to set up your PC to be an excellent DEVBOX. My main thoughts right now are on suggestions of ideas (with explanations hopefully) on things like partitioning your drives, where to put system files on those drives, where to place program files on those drives and possibly even suggestions on the hardware to use. Additional tweaks for performance and even user interface enhancements are more than welcome.
Take my home machine for example (I am thinking of making a clean start on it ...):
AMD Athlon 1.4 GHz
1 Gig RAM
40 GB HardDrive
GForceII 64 Meg RAM
Mainly I am looking for input on what people have found to work for them and what makes plain sense to do when setting up a computer. The reason that I am suggesting this for an article is that I think such a collaboration could definitely help out others here on the CP too.
Wally Atkins
|
|
|
|
|
That is a very good idea. I certainly have a system that's worked for me over the years, and I also have a preferred way of laying out the VC IDE - a way that I've tweaked over the years and I think it's perfect now 
Maybe I'll write up some notes over the weekend...
--Mike--
Looks like I picked the wrong week to stop sniffing glue.
1ClickPicGrabber - Grab & organize pictures from your favorite web pages, with 1 click!
My really out-of-date homepage
Sonork-100.19012 Acid_Helm
|
|
|
|
|
hi friends,
I have been given a project to be coded in C, which has to convert a normal text file into a microsoft Word file using the MS Word's binary file format. Do anyone of you guys have the coding for doing that!.I found a document having the details about the low level data structure of the MS Word file. but due to time constraint , i am not able to finish my project  . so guys if you have the coding PLEASE HELP ME OUT. MY GRADUATION COMPLETION DEPENDS ON YOUR REPLY. Thankyou.
With luv,
Arvind
|
|
|
|
|
You can control Word as a COM object. Does your target machine have Word ? If so, passing it the text and letting IT save in Word format is probably the easiest option.
Christian
No offense, but I don't really want to encourage the creation of another VB developer.
- Larry Antram 22 Oct 2002
C# will attract all comers, where VB is for IT Journalists and managers - Michael
P Butler 05-12-2002
Again, you can screw up a C/C++ program just as easily as a VB program. OK, maybe not
as easily, but it's certainly doable. - Jamie Nordmeyer - 15-Nov-2002
|
|
|
|
|
Start with StgCreateDocfile() to create an OLE structured storage file (Word DOCs use this format) then create the storages & streams that your spec says are needed.
--Mike--
I'm bored... Episode I bored.
1ClickPicGrabber - Grab & organize pictures from your favorite web pages, with 1 click!
My really out-of-date homepage
Sonork-100.19012 Acid_Helm
|
|
|
|
|
Use OLE automation to solve your problem. You can do it with VB easily.
A. Riazi
|
|
|
|
|
Hi there,
People in learning centres, cyber cafes, etc probably have sound cards but no speakers. I'd like to be able to play samples / more complicated things then just "beep" on a Windows 9x/2K/XP machine - so I can reach these people too.
I believe it has something to do with port 61h - but I'm primarily a C++ programmer and have not delved much into the depths of assembler very much before.
An article showing how to program the system speaker would be way cool imho.
Cheers! 
/**********************************
Paul Evans, Dorset, UK.
Personal Homepage "EnjoySoftware" @
http://www.enjoysoftware.co.uk/
**********************************/
|
|
|
|
|
There is no need for assembly programming to do this. IIRC, there was an MS unsupported SPEAKER.DRV driver for Windows 3.1 that emulated a sound card with the system speaker. But it consumed too much CPU, because everytime you need to make a "click" on the speaker, you need to change a bit on the correct port (I don't recall the number). If you make 4000 clicks/second you have a 4KHz sound. And the quality sucks.
You can still find it here:
http://www.agsci.kvl.dk/~jerejej5/pcspeak.htm[^]
I see dumb people
|
|
|
|
|
Cheers dude, rewarded that msg a 5 - whatever that does.
You see dumb people? All the time?
/**********************************
Paul Evans, Dorset, UK.
Personal Homepage "EnjoySoftware" @
http://www.enjoysoftware.co.uk/
**********************************/
|
|
|
|
|
Although really I was looking for some code - but yeah I've read up some interesting stuff on this site (http://fly.cc.fer.hr/GDM/articles/sndmus/speaker1.html[^]), that seems to indicate that it does make the cpu work damn hard.
Looking into it a bit more it seems for Windows NT type operating systems you would probably have to write a kernal mode driver to do this sort'a stuff. Eeek!
Still, I may dig around a bit more. I'm sure some clever sod has already done all this in Windows NT.
Cheers,
Paul
/**********************************
Paul Evans, Dorset, UK.
Personal Homepage "EnjoySoftware" @
http://www.enjoysoftware.co.uk/
**********************************/
|
|
|
|
|
Hello all,
I need a tutorial for developing an ActiveX control for controling the license of a software!
Kindly mail reply as soon as possible!
aKela_sHEr
(akelasher@yahoo.com)
-Invincible
|
|
|
|
|
If any body can write a walkthrough article which shows how can data be fetched dynamically using 2 calender controls placed in the same form, between 2 dates from a database using VB.NET and Access or SQL Server.
I will really apprciate your help
|
|
|
|
|
Hey fellow Developers,
I'm looking for a really good tutorial on Direct3D, and if possible can it be Version 9, also I'm going to be doing most of my programing unmanaged, so i'm looking for the source to be in C++, and WIN32 not MFC. Thanks alot.
~~~~~~~~~~~~
~~NICHOLAS~~
~~~~~~~~~~~~
|
|
|
|
|
|
Cool, I'll be taking a look at these.
Roger Allen
Sonork 100.10016
WHats brown and sticky?
A stick or some smelly stuff!
|
|
|
|
|
www.gamedev.net ! there you can find all about gamedev and directX too. this site rocks! best game developer site ever
Martin Lierschof
Junior Programming Assistant
World-Direct.at eBussines Solutions GmbH
mail²: martin.lierschof@world-direct.at
|
|
|
|
|
A beginner article on MMC would be nice. All the articles are either full of references or point to an example. A step by step article would be great.
|
|
|
|
|
Hi, you should try to look at http://www.msdn.microsoft.com/msdnmag/issues/1200/TView/default.aspx
It is a very nice article on MMC.
Regards,
andrea
|
|
|
|
|
thanks man
i really appreciate it
|
|
|
|
|
In the newsgroups and message boards, you see a lot of "The only way to resolve relative urls is with a url moniker. That's doable in c# but really hard." You never see any c# code on how to do it. Lots of people give the url to the ms docs on how to do it in c++/non-.net.
I don't know com very well, I'm a java programmer. I can handle a little interop but not that much of it. I would do it if I could.
"Outside of a dog, a book is Man’s best friend. And inside of a dog, it’s too dark to read."
-Groucho Marx
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
