I'm wanting my program to pass a command to the system which will unzip a password protected zip file. How can I make this system call that will include the password without someone being able to evesdrop and obtain the password? Also, by storing the password in my program as a string, would some one be able to somehow obtain the password from the binary?
Last edited by 3saul; 06-14-2006 at 09:58 PM.
> would some one be able to somehow obtain the password from the binary?
Unless you do something to hide it, it will be trivial to find for anyone who knows what a hex editor is.
> How can I make this system call that will include the password without someone being able to evesdrop
Probably with great difficulty.
Many system calls can be traced for debugging, so naturally anything you pass will be plainly visible to anyone with the right tools.
If you dance barefoot on the broken glass of undefined behaviour, you've got to expect the occasional cut.
If at first you don't succeed, try writing your phone number on the exam paper.
