How to safely store strings (i.e. password) in a C++ application? -

How to safely store strings (i.e. password) in a C++ application? -

I am working on a wxWidgets GUI application that allows the user to upload files to an FTP server and the user name / FTP server Password is required to reach.

As far as I know, STL strings or even four * string appear to end the user, even the program is already compiled, hex editor or perhaps Like string extractors

So, is there a safe / secure way to store sensitive information inside the C ++ application?

PS I can not use .NET for this application.

It is independent of the actual programming language used.

FTP is a protocol that transmits its passwords in plain text. Any amount of ambiguity will change, and an attacker can easily block the password as if it is transmitted.

There is no other problem, no protocol will be used, this will change the fact that your application is decoding Should be enabled

Once you start looking at the secure protocol (like SFTP), then you can also get the infrastructure. For automated access to secure authentication (such as public / private key)

You are still responsible for not having the key file to be used for anyone else on the file system - which can not be enough - depending on the operating system and overall setup.

But since we are talking about an interactive application, then the easiest way is not authentication is automatically automatic, but for the user and password the user After all, they should know, should they not be inquired?

Edit: By enhancing the excellent comment by Kate Gregory, if the user accesses a normal "technical" (or anonymous) server, your app has been uploaded by Files should not be visible on the server before you make some sort of filtering. A common method of doing this is the "Upload" directory where the file can be uploaded, but can not be downloaded from. If you do not take these precautions, then people will not be able to share all kinds of illegal file to your FTP server. For use as turntable, and you are legally responsible for that.

02:22

Comments

Post a Comment

Popular Posts

r - Plot correlation matrix into a graph -

I have a matrix with some correlation values. I now want to plot in that graphic which is more like this or Looks less: Library (Latis) # Horizontal and vertical axis information please take- c (div class = "post-text" itemprop = "text"> "214", "215", "216", "224", "211", "212", "213", "223", "226", "225") & lt; - Paste ("DM1- ", Hor, sep =" ") # counterfeit co Relation matrix narokol & lt; (I 1: nrowcol) for core [i] - length (var) core & lt; - matrix (runif (nrowcol * nrowcol, min = 0.4), nrow = nrowcol, ncol = nrowcol (Color, "blue", "yellow"), space = "RGB"), levelplates (core, main = "dimnames = list (hor, ver)), I] = 1 # plot rgb. Stage 12-14 array correlation matrix ") Xlab =" ", ylab =" ", col.regions = rgb.palette (120), cut = 100, at = seq (0,1,0.01)) ...

asp.net - RegisterUser: CreateUserWizardStep -

When using CreateUserWizardStep to register a new user I'm having a problem. Help me solve this problem.I have tried to configure in the web. Provider tag for configuration & lt; Required question and answer = "wrong" & gt; Although it still does not work ... I'm using the MySQL database RegisterUser :. An IEditableTextControl is not included with the CreateUserWizardStep.ContentTemplate ID question for the security question, it is necessary that your membership provider needs a question and answer. Source error: An unrestricted exception occurred during the execution of existing web requests. Information about the origin and location of the exception can be identified using the exception stack trace below. Stack trace:. [HttpException (0x80004005): RegisterUser: CreateUserWizardStep.ContentTemplate does not include questions IEditableTextControl security question with the ID, it is necessary to require a question and answer your subscri...

Integrate flash games in android app? -

3 is a flash game that I want to integrate into a menu / list in the Android app. So when the user selects the game from the list, the game starts with the help of the Android Flash Player. Is it better or better with webwave? Is there any good tutorial? Thank you! Adobe Flash provides a good way: you can create a breeze for the Android app. Use this to create your menu and compile three games in your air app. Here are some tutorial links about how to publish AiI for Android applications and: PART1: AIR for Android, PART2: Publication for Android apps: Ai: I do not believe that the Android Flash Player can be launched with a single intention so far, so using Java Android will not solve it (now ) And and a third approach Whatever you mentioned, it should work - using the webwave.

Powered by Blogger