Re: How can I identify a system uniquely using MFC code

"Bruno van Dooren" <bruno_nos_pam_van_dooren@xxxxxxxxxxx> wrote in message
news:ug75QYgjGHA.3440@xxxxxxxxxxxxxxxxxxxxxxx
|> I am working on a MFC application. I need to identify every
| > system which uses this application. How can I do this using MFC? Is
there
| > any unique identifier for a PC which can be retrieved using MFC?
|
| You can find the computer SID in the registry.
| More details over here:
| http://www.sysinternals.com/Utilities/NewSid.html
|
| --
|
| Kind regards,
| Bruno van Dooren
| bruno_nos_pam_van_dooren@xxxxxxxxxxx
| Remove only "_nos_pam"

This use of an SID is woefully inadequate for security, as the site you have
referenced illustrates so well; anyone can change the SID of a computer, so
how can we expect the data on our hard disk to be secure? This is just one
more example of dangerous security assumptions and coding done by the
'experts' at MSFT.

A more secure method would be to create a one-way sha-256 or AES-256 hash
of:
1.) volume ID + SN
2.) User ID
3.) User domain
4.) Machine name
5.) OSINFO
6.) User PIN or passphrase

to lock the user to the hardware in use. In the event of a hardware failure
the last element can be used to recover the ID if necessary. There is of
course more to it than this, certain code which needs to be written to
implement the hash and to later validate it as well as to recover the ID
after hardware failure or machine migration.

Point is, the SID is anything BUT secure...

-- Ed.

-----------------------------------------------------
hex->bin->b64
F9E7707A2AF502D0A899C6ACB43A2D35EB7E

.