Re: Security issue with compiled DLL Files

"Hu" <Hu@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:24AA1247-6ABA-4ACB-AEBA-7336538BC210@xxxxxxxxxxxxxxxx
>I have a small VB 6.0 ActiveX DLL project 1 class + 1 module. I have
>declared
> a password Constant in the bas module. If I open the compiled DLL with
> notepad I can read the password in plain text! I have tried moving it to
> the
> class file as well as adding a resource file to the project and hiding the
> string in there. I can still read the string plain as day in notepad.
> Help!
> How do I hide the password?

This is not a bug and is the exact same thing you'd see with any dll, or
exe, written in any language. Just pick any Windows DLL or EXE and look at
it in a hex editor.

It's up to the developer to encrypt any sensitive information. There are
literally hundreds of ways to do this. Here's one....

Another encryption prog - accurate & very FAST!
http://www.planetsourcecode.com/vb/scripts/ShowCode.asp?txtCodeId=43280&lngWId=1

If you don't like that one, search for that site for Encryption... you
should get over 500 samples.


--
Ken Halter - MS-MVP-VB - http://www.vbsight.com
DLL Hell problems? Try ComGuard - http://www.vbsight.com/ComGuard.htm
Please keep all discussions in the groups..


.

Relevant Pages

  • Re: Managed EXE DLL Injection
    ... encryption is one of the most inefficient forms of code obfuscation? ... Wang are two most active obfuscation researchers, ... > way that the encrypted DLL will stay independent. ... > loader do the same verification done by 'peverifier.exe' I have tried the ...
    (microsoft.public.dotnet.framework.clr)
  • Re: Could a hacker achieve this?
    ... Stealing the DLL is one task and probably the hardest. ... Now if we assume that the hacker has gained entry to your machine and can ... it was encrypted on, with DPAPI ... So you could either use DPAPI for all your encryption needs or just to ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: How to use ADO fast?
    ... >> There are other protection mechanisms like encryption. ... >> Blog: http://cs.rthand.com/blogs/blog_with_righthand/ ... >>> than it is in my opinion harder to get the connectionstring from the DLL ... >>> however not for security reason but for deployment reason. ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: How to use ADO fast?
    ... > There are other protection mechanisms like encryption. ... >> than it is in my opinion harder to get the connectionstring from the DLL ... >> with a lot of work) the configstring somewhere between that ILS code. ... >> however not for security reason but for deployment reason. ...
    (microsoft.public.dotnet.framework.adonet)
  • Problems passing structures from VB.Net to C DLL
    ... The functions in the DLL typically require that structures be passed to ... Encryption Encrypt; ... } AddressHost; ... code in one project and with the C++ DLL source code in another project. ...
    (microsoft.public.dotnet.framework.interop)