Re: machine with null serial number?
Re: machine with null serial number?
- Subject: Re: machine with null serial number?
- From: Dave Hersey <email@hidden>
- Date: Sat, 29 Mar 2008 00:34:08 -0400
On Mar 29, 2008, at 12:26 AM, Graham Cox wrote:
How about using a UUID? CFUUID is very easy to use.
That and the MAC address are not recommended either, at least by
themselves.
Same link:
http://developer.apple.com/technotes/tn/tn1103.html
Neither the getifaddrs nor the CFUUID methods are suitable for DRM
purposes, especially on Mac OS X 10.3 or later. On Panther, the
ifconfig utility supports the lladdr option to set a locally-
administered MAC address for an interface. Both getifaddrs and the
CFUUID APIs will return the locally-administered MAC address if one
exists. A DRM product that relied on these APIs would be vulnerable
to an admin user using ifconfig to specify the same MAC address on
multiple machines.
Finally, it is possible for the built-in MAC address (or any I/O
Registry property for that matter) to be spoofed by knowledgeable
persons. If a more robust level of security is required, such as in
cases where the licensed assets have a high monetary value,
developers may want to investigate the numerous hardware security
tokens that are available.
- d
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden