Re: Serial key Framework for cocoa?
Re: Serial key Framework for cocoa?
- Subject: Re: Serial key Framework for cocoa?
- From: Andrew Farmer <email@hidden>
- Date: Thu, 25 Jan 2007 16:16:02 -0800
On 25 Jan 07, at 09:54, Stefan wrote:
Final technical remark: Better don't use ObjC to verify a key, but
standard C
More specifically: Don't *ever* generate the key within your program
and compare the user's input against it. Schemes that work this way
are trivial to break: all an intrepid hacker has to do is find where
it's generated, interrupt your program there, and copy the output.
Come up with some other, more indirect way of checking the key's
validity.
Similarly, returning a TRUE/FALSE status from an "isRegistered"
function is asking for trouble. It's pretty trivial to replace a
complex function with a small stub that'll return a fixed value. Same
goes for checking its return value in a single location (at startup
or the like).
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden