Security Posts



Key-Gen for .NET Apps! (Monday, April 13, 2009)

You all know that .NET generated application convert the high-level codes from source language (e.g. C#) and converts them to IL. Basically, if you could convert the IL code back to the high-level language, you'd have the original source code of the application, and to some extent, you can do this, but this is the story for another post. Today, I'd want to show you how your public licensing API would provide a very easy way to crack open your own application. 


Application Security : The Very Least (Sunday, October 12, 2008)

When developing applications, security measurements should be thought of upfront. Security is even a greater issue when the application exposes an online data source, transfers sensitive data across the wire, etc. But what happens when a careless developer hard-codes significant security information into the application code, without even obfuscating the application? Well, you WILL get hacked sooner or later. Your system will be misused without you even knowing it, and let's hope you have a backup strategy, because there is a change that your whole database will be erased by malign hacker. Don't you agree? Connection string is hard-coded into