vb.net - Windows Form App Code Security -



vb.net - Windows Form App Code Security -

i'm creating windows form app , underlying code needs secure. in code database info , many equations people should not able see.

what i'm asking if install app on someone's computer, how easy them "break" application , view sensitive information? if it's not hard them find code, there ways prevent happening? appreciate input.

it's easy view code. tools ilspy or .net reflector can practically show code have written in c# or vb.net.

there possibilities, free or cheap, cost you:

obfuscation: replaces names , logic in excutable other code hardly human readable. easy , there tools confuser job, code still there , can read. it's slowing attackers down.

another alternative have evaluated myself using hardware protection in form of dongles. here whole application encrypted secret key stored on smartcard. portions of code needed decrypted on fly @ runtime , executed. since code encrypted can't read easily. solutions codemeter pretty hard beat (there no real cracks these if implemented correctly, isn't hard. not free.

you need have scope of protection in mind. want maintain getting code? average guy has used .net times , knows how google , download ilspy? obfuscate mildly , annoyed plenty leave be. other people know doing still without financial interest? utilize more drastic obfuscation code restructuring , on , not invest weeks of time finding formulas. other company willing set in financial ressources , knowhow of talented people code create profit? obfuscation not help you. maybe encryption will, maybe not.

we went dongle solution since want manage licensing in easy way customers (of have restricted online capabilities), while code protection nice additional feature.

vb.net winforms

Comments

Post a Comment

Popular posts from this blog

php - Android app custom user registration and login with cookie using facebook sdk -

php - Android app custom user registration and login with cookie using facebook sdk - i developing android application in users need register , log in using facebook. approximately, flow. open app first time, authenticate facebook, data, send info server create them business relationship in application, start session new business relationship in server, cookie perform later interactions. so far good. what need know wich info have send server, can able identify users when log in seccond time. because need start session in server , send cookie android app farther interactions. i'm using php server side language. i thinking getting getaccesstoken() in android facebook sdk, pass server on business relationship creation , storing in android app. but can't manage how login users on sec time utilize app. any suggestions ? in advance ! to uniquely identify user within app, should create request /me , user's id. guaranteed unique , remain con
Read more

django - Access session in user model .save() -

django - Access session in user model .save() - is possible access current session in user model .save()? pseudo code of want achieve: # users.models.py def save(self, *args, **kwargs): created = true if self.pk: created = false super(abstractuser, self).save(*args, **kwargs) # post-save if created: look_for_invite_in_session_and_register_if_found(self, session) seems wrong in architecture. shouldn't access request in models layer. work request must done in view. can this: user, created = abstractuser.objects.get_or_create(name=name) if created: look_for_invite_in_session_and_register_if_found(user, request.session) django session
Read more

php - .htaccess Multiple Rewrite Rules / Prioritizing -

php - .htaccess Multiple Rewrite Rules / Prioritizing - here current htaccess file: rewriteengine on rewritecond %{http_host} !^www\.website\.com [nc] rewritecond %{http_host} ([^.]+)\.website\.com [nc] rewriterule ^(.*)$ http://www.website.com/gotourl.php?urlid=?%1 [l] rewriterule ^(\w+)$ ./gotourl.php?urlid=$1 [nc,l] rewriterule ^(\w+)/$ ./gotourl.php?urlid=$1 [nc,l] the website in question url shortener i'm working on testing/developing , personal use. above code may not ideal i'm not familiar .htaccess , made via googling , testing. want url shortening aspect: http://website.com/1234 -> http://website.com/gotourl.php?urlid=1234 http://website.com/1234/ -> http://website.com/gotourl.php?urlid=1234 the problem cannot figure out how ignore directories. want specific directories go specific pages: http://website.com/img (or) http://website.com/img/ -> http://website.com/img.php http://website.com/img/1234 (or) http://website.com/
Read more