> Here is the situation.
>
[quoted text clipped - 49 lines]
>
> Chris
I dont know is this a valid option ? I obfusticated the code, will
that be a hinderance ? Can this be use in the case of a stong named
assembely ? and how would the recompiling affect this ?
Any pointers to tools, or procedures to accomplish this IF its a good
option would be greatly appreciated.
Chris
> Can you get around the problem by decompiling the dll, fixing the reference
> and recompiling it?
[quoted text clipped - 54 lines]
> >
> > Chris
Nevermind, the decompile hint was just what I needed, I am VERY
suprised however I can modify a assembly with a stong name assigned,
by firs decompiling it as such
ildasm Foo.dd /output:Foo.il
Then editing the associated JS Resource file, hey since I was in there
I REALLY modified it :)
Then recompiling as such ilasm /dll /debug /resource=Foo.res Fool.il
/output=Foo.dll
Note I ommited the Key
Then if I do a sn -T Foo.dll I get the PREVIOUS and ORIGINAL PKT ?!?!
I mean its really nice that I dont have to hunt around all my config
files and change that Token, but dodent doing this defeat MOST of the
purpose of the Strong Name to ensure against say a trojaned version of
a .Net assembely ?
OR is this only occuring because I am editing a resource and not the
code itself ?
I am very curious about this although in my enviroment I am not
concerned.
Thanks for the point in the right direction
Chris
> Can you get around the problem by decompiling the dll, fixing the reference
> and recompiling it?
[quoted text clipped - 54 lines]
> >
> > Chris
Christian Heide Damm - 23 Aug 2004 13:48 GMT
You should definitely not be able to defeat strong name verification.
Try to run "sn -Vl" on your system - is your Foo assembly (or its public key
token) listed there?
Christian
---
> Nevermind, the decompile hint was just what I needed, I am VERY
> suprised however I can modify a assembly with a stong name assigned,
[quoted text clipped - 84 lines]
>> >
>> > Chris
WertmanTheMad - 23 Aug 2004 21:13 GMT
Yes it is listed there and its public key is the same
Chris
> You should definitely not be able to defeat strong name verification.
>
[quoted text clipped - 93 lines]
> >> >
> >> > Chris
Christian Heide Damm - 25 Aug 2004 07:53 GMT
If "sn.exe -Vl" contains your assembly, then we have the answer. You have
registered your assembly for verification skipping, i.e., explicitly told
the CLR to not verify its strong name.
Registering an assembly for verification skipping is a security hole, but
it's often used in development when assemblies are only delay-signed.
Christian
---
> Yes it is listed there and its public key is the same
>
[quoted text clipped - 105 lines]
>> >> >
>> >> > Chris