| Thread | Last Post | Replies |
|
| Is Strong Naming is Tamper-Proof? | 30 Nov 2004 23:30 GMT | 13 |
I read one article at CodeProject (www.CodeProject.com) where the author was telling how even Strong Named assemblies can be tampered with, by using the IL code (generated from ILDASM). So, is Strong Naming really tamper-proof?
|
| Storing encrypted SQlConnection string in a XML file | 30 Nov 2004 13:41 GMT | 2 |
I would like to store my connection string encrypted in a xml file, but I have some problems figuring out the encryption. I have tried some different examples but there is always a key involved which have to be stored as plain text in my code. That does not seem very secure to ...
|
| How to use VB.NET and a password protected Access database | 29 Nov 2004 14:59 GMT | 1 |
I'm trying to use a password protected Access database with VB.NET. I've looked in the knowledgebase articles and none of them work for me. I keep getting the "Cannot start your application. The workgroup information file is missing or opened exclusively by another user." error ...
|
| Signed assemblies easily cracked? | 27 Nov 2004 15:35 GMT | 23 |
If strong name keys are so easily broken as shown in this article: http://www.codeproject.com/dotnet/NeCoder03.asp Is there really no security possible with .net assemblies in the end? Anyone could modify any .net based application if they have access to the
|
| Defining minimum permissions | 27 Nov 2004 11:09 GMT | 2 |
I'm trying to work out a minimum permission set that my app (several separate assemblies) needs. I'd like to be a good .net citizen by not requesting more permissions than I need, so I'm using the approach I found on the web an in this group to start with
|
| Using private keys to sign hash | 26 Nov 2004 15:04 GMT | 4 |
I am trying to export (use) a private key from the certificate store to sign a hash. But I am getting the error: Export of private parameters is not supported
|
| Unknown failure in RSACyptoServiceProvider.Decrypt() on Win98 | 26 Nov 2004 09:53 GMT | 4 |
I am decrypting using RSACyptoServiceProvider with a 1024 bit key and OAEP padding set to false. I load the RSA key in from an XML string (originally from a machine key store container) that is pass to this method. It works fine on WinXP, but fails on Win98, with a ...
|
| Web Admin privileges | 25 Nov 2004 18:47 GMT | 1 |
I have a multi-user web application that allows users to log in and use the features. As admin I need to have full access to these accounts and all data contained. It's not enough that I'm able to browse and delete accounts.
|
| Adding key makes solution compile very slow | 25 Nov 2004 18:25 GMT | 5 |
I am adding a strong name to my assemblies in order to work with Enterprise Services' Transactions. When I add the strong name (with sn.exe -k), my compile time for a Rebuild goes from 15 seconds to 3 minutes. This is for 1 solution with 11 projects.
|
| Security problem... | 25 Nov 2004 18:21 GMT | 1 |
I have a window based application developed using C#. In this application i am using the file operation to check whether the file is available and whether it in expected size. While doing this file operation i am getting the following error message. Please some one help me to ...
|
| CryptographicException: Unknown failure in Win98 only | 25 Nov 2004 16:52 GMT | 4 |
I am decrypting using RSACyptoServiceProvider with a 128 byte key and OAEP padding set to false. I load the RSA key in from an XML string (originally from a machine key store container). It works fine in WinXP, but fails in Win98, with a CryptographicException containing the ...
|
| MSDE does not work in Terminal Services: REQUIRES ALL USERS TO BE ADMINISTRATORS!!!!! | 25 Nov 2004 09:55 GMT | 5 |
I just had an application ported/rewritten from VFP to .net and in order to give users access to it in a Terminal Services deployment (in a one server setting) , ALL USERS MUST BE ADDED TO THE ADMINISTRATORS GROUP!!!!! My developer told me this is necessary, and is not a big deal. ...
|
| Are PassPhrases Secure Enough? | 25 Nov 2004 06:50 GMT | 6 |
I've been thinking of implementing the following and seek comments pro and con. When registering, the user provides an e-mail address and creates a password phrase question such as "What is your father's middle name?" The user also
|
| Planning active directory integration | 24 Nov 2004 16:35 GMT | 5 |
I'm Francesco and I write from Italy. we are creating a new web site in ASP.NET. In our network infrastructure we have a win 2003 domain. This web site will have a secure zone with two kinds of login groups, User and Admin, I was thinking to use active directory for the ...
|
| security exception for aspx page | 23 Nov 2004 19:58 GMT | 19 |
hi, there: I was developing a new page for a web part project. My page keeps on getting security exception whereas other pages in the same project don't. I set the security level to be WSS_MediumTrust level. I wasn't using any
|