Simple solution:
Don't offer encryption of the templates in the first place. If you want
what the encryption TRIES to do, write compiled code in whatever flavor you
like for
COM/Java/CFX.
-----Original Message-----
From: Paris Lundis [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 08, 2001 12:57 PM
To: CF-Talk
Subject: RE: Need decryptor tag for CFUG presentation
I have been quiet on this, however, it infuriates me that MM/Allaire
have weak protection... ideally, it was a good thing early on.. when
cracked they spun it as it is to keep casual observers out and that
bundled software to client storyline...
If you use alogorithms that can be cracked, or such becomes reality, it
is your responsibility to modify the alogorithm/routine to make it
secure again. Alternatively, no longer support it and tell people to
develop there own or create a framework for third party developers.
Bad protection is bad protection.
Legalese aside... if I want to decrypt something I might run the 3rd
party utility.. I too forget passwords and similar things...
Remember, nothing is really completely secure.
-paris
[finding the future in the past, passing the future in the present]
[connecting people, places and things]
-----Original Message-----
From: [EMAIL PROTECTED] (Top-Link Tech (John Ceci))
Date: Fri, 08 Jun 2001 11:49:09 -0500
Subject: RE: Need decryptor tag for CFUG presentation
> Howie,
>
> I would agree with getting off the net is impossible, that is why I
> presented #2, change the basic encryption scheme to something
> different,
> there are plenty of methods to encrypt a file that have a
> user-defined key
> that are fast...so just change to a different method, now it might
> only take
> a week or two for someone to crack that too, but some type of effort
> by MM
> to combat this is necessary...
>
> John
>
> -----Original Message-----
> From: Howie Hamlin [mailto:[EMAIL PROTECTED]]
> Sent: Friday, June 08, 2001 9:58 AM
> To: CF-Talk
> Subject: Re: Need decryptor tag for CFUG presentation
>
>
>
> ----- Original Message -----
> From: "Top-Link Tech (John Ceci)" <[EMAIL PROTECTED]>
> To: "CF-Talk" <[EMAIL PROTECTED]>
> Sent: Friday, June 08, 2001 11:17 AM
> Subject: RE: Need decryptor tag for CFUG presentation
>
>
> > Ray,
> >
> > I would agree with your statement competely...
> >
> > BUT, since this program exists, and we have known that it exists
> for some
> > time there are a couple of things MM should have done...
> > #1. MM needs to find who wrote it and get the tag off the internet
>
> It's no secret:
>
> Matt Chapman ([EMAIL PROTECTED])
>
> And, if you search the net you'll find it all over the place
> (including
> source code) so getting it off the net is not going to
> happen. I've even seen it offered as shareware (if you can believe
> that!)
>
> > #2. MM needs to change the encryption methodology inside of CF5.0
> in the
> > first SP which will then totally take the program out of
> usefulness...
> >
>
> The problem with the cf encryption is that it needs to be fast and
> have a
> know key so this type of encrypton can be compromised.
>
> Regards,
>
> Howie
>
> > John
> >
> >
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
