PDA

View Full Version : Security



3saul
06-14-2006, 09:49 PM
I'm wanting my program to pass a command to the system which will unzip a password protected zip file. How can I make this system call that will include the password without someone being able to evesdrop and obtain the password? Also, by storing the password in my program as a string, would some one be able to somehow obtain the password from the binary?

Salem
06-15-2006, 01:25 AM
> would some one be able to somehow obtain the password from the binary?
Unless you do something to hide it, it will be trivial to find for anyone who knows what a hex editor is.

> How can I make this system call that will include the password without someone being able to evesdrop
Probably with great difficulty.
Many system calls can be traced for debugging, so naturally anything you pass will be plainly visible to anyone with the right tools.