bri189a Posted July 30, 2004 Posted July 30, 2004 I was reading the "Preventing Disassembly" post and have some questions for those of you doing this for a living. I want to know how these problems are dealt with. If you have a desktop app that talks to a secured database such as access, how are you suppose to connect to it without putting the password to the database in code somewhere...promt the user everytime he wants to log on? Then he knows the database password and your secured database is vulnerable to table design changes making your application useless. If you have a desktop app that talks to a sql server or some other sort of server, your connection string requires a password there too (unless your using windows authentication on the server) which leads to the same problem above; get Entriprise Manager snap in for free from Microsoft and now you can get into the companie's datbase for that program and start corrupting things. Web apps; most people put the connection string in a app key in the web config file; while this file isn't accessible for downloading are there any other sercurity precautions? Thanks! Quote
Joe Mamma Posted July 31, 2004 Posted July 31, 2004 Look a the MS whitepaper on SQL Server C2 Secuity. Definitely a good starting point!!! Quote Joe Mamma Amendment 4: The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no warrants shall issue, but upon probable cause, supported by oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized. Amendment 9: The enumeration in the Constitution, of certain rights, shall not be construed to deny or disparage others retained by the people.
neodammer Posted August 1, 2004 Posted August 1, 2004 you'll never have 100% security on this issue, at least not yet. But like stated in the previous post thats a great start. Quote Enzin Research and Development
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.