I am going to be creating a web service that will be passing confidential information across the network.
What would be the best way to secure the web service? how do I know if the application requesting the information is who it says it is, and it's not another application that is using another's user name and password?
I am programming a service for a company that will log valuable performance data on machines that they lease out to other companies. It is critical for them that this information is as safe as possible and that it can only be read by us (a program created by us that is). I already made a trippledes encryptor that works fine but i still have the issue that a person can delete or move or corrupt the file if he somehow manages to get out of the operation software and gain acces to it.So my question is: Can i lockdown a file and make it as good as impossible to change the file or delete it other then by being the admin or the program that is generating them?
View 1 RepliesWinFormsApp Login passes information to .php (server based) Login (provided credentials are correct) to DB to retrieve Decryption Key. WinFormsApp then uses Decryption key on Hardcoded encrypted connection string and renders application usable.This would then eliminate the necessity to encrypt/decrypt a connection string at runtime, virtually rendering any unauthorized person with a useless software.
View 1 Repliesi have a Windows service that is hosting a WCF service through net.tcp and this is working great. I have also created a WCF service application. I am trying to add the net.tcp service reference to the service application. Then I add it to the GAC that goes ok but if I try to RegAsm the WCF service application to allow it to be called from Server.CreateObject I get the error:
Warning: Type library exporter encountered a type that derives from a
generic class and is not marked as
[ClassInterface(ClassInterfaceType.None)]. Class interfaces cannot be
exposed for such types. Consider marking the type with
[ClassInterface(ClassInterfaceType.None)] and exposing an explicit
interface as the default interface to COM using the
ComDefaultInterface attribute.
It does not work. I have tried to call it through a class library but this does not work either as the end point is not set correctly.
I have a VB2008 application which can control a windows service i.e. start, stop, pause etc. This runs ok on a Windows XP machine but not on a Win 7 machine (message is - Service error cannot open <service name> service on computer '.') ( if I stop the UAC then it runs ok ). It seems to be a rights issue,
View 3 RepliesI got this warning that I don't know what it means.Warning1 The service System.ComponentModel.Design.IInheritanceService already exists in the service container.Parameter name: serviceType00
View 2 RepliesWhat is best practice for securing DLL's for projects you are working on? Certain DLL's I am interested in developing will have data access layer (DAL) and business logic layer (BLL) functionality. There may be several apps that can eventually hit these DLL's to perform business specific functions. What is the best way to secure these DLL's so they can only be used by only creator's applications?Security for both blocking unauthorized use of the DLL's and security against possible decompilation are both desirable.
View 4 RepliesI am trying to communicate with a Windows service on a remote machine on the network but i keep getting an exception saying the following: "System.InvalidOperationException: Cannot open Service Control Manager on computer 'machine001'. This operation might require other priviledges. ---> System.ComponentModel.Win32Exception: Access is denied.
[Code]...
Is it possible to have a dotnet windows service which monitor other services and upon stop of any service, the monitoring service would be able to start the stopped service.
View 4 RepliesThis is a bit of unusual problem that I'm experiencing, but recently one of the users of a production application started reporting errors in the system. These were traced to a 503 Service Unavailable error when making a call to a web service used by the application.
Now here's the odd part, only the one user is affected by this issue. Other users of the application have not reported any errors. When the user logged on to a different machine that worked for another user, they still received the error.
i was trying to make my service act dynamically... i have set time for my service about for 2 min ,if suppose it was doin huge amount of work means it will exceeds that 2 min time limit then we need to check the service condition if work is pending means we need to run that instance until upto finish.
public static void StartService(string serviceName, int timeoutMilliseconds)
{
ServiceController service = new ServiceController(serviceName);[code]............
In the past I had the indexing service installed on a Windows Server 2003 and used it to index files for my website. I did this by executing an OleDbCommand with a query and a connection string.How do I accomplish the same thing with the new "Windows Search Service" (Windows Server 2008) by using VB.NET? Does this work the same way so that I only need to change the Provider name which has been "MSIDXS.1" up to now? Case true, what is the new Provider name?
View 1 RepliesI had a problem getting a VB.NET web service client to receive the response object from a Java web service.In the process of posting this question someone from another department volunteered some code written for a similar situation.I couldn't find this anywhere on the net so I'm completing my question to help others out.[code]The web service is Apache CXF with some Spring elements mixed in.
View 1 RepliesI have one Database : ManageSell.mdb (Microsoft Access) with password is:P@ssW0rd..In database, i have table User with two column : Username and password. I create value: admin + admin..Then , i create form Login in vb.net 2005 with code below.[code]If user type three password trust , it will successfull, else note error
View 1 RepliesI have made a simple program which makes CV in english. this program is now beta version but i wanna develop it but i need some secure . I want people to not copy my program and give it without premission. I want to give that program to 10 people but i want to make secure like for CD-key but i dont know how .
View 2 RepliesI'm using Visual Studio 2010 and .NET3.5. I've created a WCF service application. I'm including two DLLs that contain the types I'm returning. The first method I wrote works both in WCF Test Client and also in a console application I created to test. When I move on to the next method that returns a generic list of a type. It works great in WCF Test Client, but when I update the service reference it acts as if the service is unavailable. All my objects say can't find reference, and I can no longer see it in the object browser. It's like it just disappears. I can still see it in the Service Reference folder. If I go back to the WCF app and comment out the contract and implementation of that one method it work again. I created a local class very similar to the class I'm using from the dll, and the it works. Is there something I'm missing here? Can someone point me in the right direction?
View 1 RepliesWhen you create a Windows Service, you create a list of the services you want to start. The default is this:
ServicesToRun = New System.ServiceProcess.ServiceBase() {New Service}
Can you have multiple instances of the same Service class (that bind to different addresses or ports), like this?
ServicesToRun = New System.ServiceProcess.ServiceBase() {New Service("Option1"), New Service("Option2")}
Or will that cause problems? Should we use two different classes instead?
I want to built an application using VB.NET so USB drive can be enabled/disabled [without OS Restart] to secure from file being copied without owner's permission! Before putting - or down vote, write your reason to do so
View 1 RepliesI have login form, and it works. but only if passwords are not MD5. I would like to ask how to improve my code, so my application can use MD5 instead of normal text password stored in my MYSQL database.
This is the code I;m using now.
Dim mMySQLConnectionString As String = E3MCEncrypter.Decrypt(My.Settings.MySetting)
Dim MyADOConnection As New MySqlConnection
MyADOConnection.ConnectionString = mMySQLConnectionString
[Code]...
I'm developing a VB.Net and SQL Server 2005 Express application.Q: How to encrypt string values in the database to secure them from the one using my software and from DBAs (people who have access to the DB Server)? Here is what I tried:First, I used a Symmetric Encryption provided by the .Net Framework. But I noticed that I could not make partial searches (LIKE keyword). So, this is not working.
Then, I used a logic similar to the ROT13 to hide text. Although this logic works fine from VB.Net, once data has been stored in the database, the logic fails to decrypt data correctly. After some tries, I thought that the reason the logic failed was the Collation of the database (I do not know much about Collation topic).So, the first way doesn't allow partial searches, and the second way is not secure and also does not work because of the Collation or maybe another reason.I want to encrypt data. I've successfully hidden the schema by giving meaningless names to tables and columns.
I need to ftp collection of files through secure ftp
1.i need to open connection then transfer all files and close connection, the connection should open only once
2.The FTP should be secure
I don't want my programs to be cracked. I have this simple authorization system that prompts my users to enter their forum credentials (I have a forum and the users must be registered members to use the programs).So I made a php script that will take in 3 strings sent in by my applications and it will check against the database if that user exists and is of the proper group and it will display a message on the page and my application then looks for the response in the page source which says if this particular user is allowed to use the program or not.
View 4 RepliesI have a VB.Net exe application that has a function in it that contains my encryption method that is used through out my application. This function is used to generate all my encrypted passwords and files etc. therefore for obvious reasons I do not want this to be visible to end users. In my application this is fine as it is compiled as a .exe. However I want to now create a ASP.Net web based version of my application.
Now here comes the question, if I was to create a web version of my application then this function would be visible to the end users along with a large number of other functions that if edited could bypass security and license control.I would like to know what is the best way to keep my ASP.Net webbased version secure from tampering, or is ASP.Net not the best for this?
I am interested in making a simple budget program that retrieves current transactions from my bank account and categorizes them appropriately. Is the proper way to do this:
1)Automatically log into the website
2)Read and parse the data
3)Place in correct category?
Is there anything special I would need to do when handling the login/password or should I just do this manually?I'm assuming that is how popular prgrams like Quicken do it.
How can i make sure that any upgrade that i will make in my system cannot be able to install/add in other computer?
the system i have originally has licensing...but i only want security on my updated forms.
A group of senior Computer Science students here has a problem with their thesis which is about securing a folder/file, that is, the only allowed person to access (read,modify,delete) the file is the one who is currently log-in to (I supposed) the program they will make.
View 2 RepliesIve been around the hacking block where I see people able to pull out email passwords and ftp details out of programs and I was wondering whats the best bet to protect those details while not crypting my vb.net program.
View 2 RepliesI recently made a small app for a friend and then made it a public app, in doing so I forgot that it connects to my MS SQL DB and checks for values. Someone used Red Gate .Net Reflector to get my password and destroy it all. I've contacted their ISP and they are looking into it, apparently this person has a static ip with them.So this is a lesson learned at a heavy price for me. How can I prevent this from happening again? How can I get away from the unsafe connection string they were able to use?
View 5 Repliesprocedure to create multiple secure user sessions in ASP.net.
View 1 RepliesWhat is the best and most secure way to license software? Is there an existing program for doing so? I want to sell a script of mine, but I want to make sure that users cannot redistribute or sell it themselves (of course, if they deactivate the registration on their own computer and choose to resell, that is their choice).
The software language is VB.net.
Since I am not sure whether or not I could host a registration database of any sort, is there any way to keep licensing self-contained securely? I would like the user to be able to download the demo and be able to upgrade to the full version somehow.