Gah!! Assemblies can be viewed as plain text?!?!?!

[jmille34]

WTF?? I have database passwords hard coded into my project, but they can be viewed as plain text using the assembly viewer??!? What can I do about that? Holy crap how did I not know about this already??

 

[ThatRickGuy]

Simple fix: store your password as an array of ascii values

Slightly more complexe but safer fix: Run a code ofuscator like .Netfuscator to mutate all of the strings and names into unrecognizable characters.

-Rick

VB.Net Forum forum796 forum855 ASP.NET Forum
I believe in killer coding ninja monkeys.

 

[chiph]

Reflector is probably the best of the assembly viewers.

But yes, this has been known since .net's release. Ordinary executables can also be sent to a text editor to view embedded strings (been that way since DOS v1.0, if not before).

Chip H.


____________________________________________________________________
Donate to Katrina relief:

http://s1.amazon.com/paypage/PELYGQVJ8Q7IB/103-6821258-5919825

If you want to get the best response to a question, please read FAQ222-2244 first

 

[jfrost10]

You could also store your database connection strings in a config file...just encrypt it, and have your code decrypt it when it gets read in (.NET 2.0 has this functionality built in).

D

 

[JohnYingling]

You could also see your passwords in old fahioned DLLs. They warned you then. It is NOT anything new.

http://www.moldyoldy.com/VBComparedemo

- free online Compare/Diff of snippets