116 reputation
2
bio website
location
age
visits member for 3 years, 1 month
seen Jul 3 '13 at 15:15

Professional curmudgeon.


Jul
3
awarded  Supporter
Dec
4
comment security and the well constructed Qt plugin
Thanks for the help
Dec
3
comment security and the well constructed Qt plugin
True, but neither of those scenarios would make me liable for negligence. I can show that I used all due diligence in protecting others.
Dec
2
comment security and the well constructed Qt plugin
I don't on purpose provide any way for installing a plugin. All that would be needed to inject malicious code is to get the sample source code for a plugin from a public site, get the un-encrypted signature for my plugins from a hex dump of the existing plugins, and copy it over an existing plugin file. I think the only way to fix it would be to redo their signature test to use an encrypted signature and a hash of the binary.
Dec
2
comment security and the well constructed Qt plugin
The plugins will all be developed internally. The reason for them being plugins is so I can easily load and unload them to recover RAM when code is no longer needed. I use the Qt plugin system because it has very low overhead and abstracts away the differences between loading shared libraries/DLL's on different operating systems.
Dec
2
awarded  Student
Dec
1
comment security and the well constructed Qt plugin
That's a good start. Thanks
Dec
1
comment security and the well constructed Qt plugin
I can't protect from someone who has an ICE or debugger. I hoped to protect the application from virii installing bogus plugins or modifying an existing shared library.
Dec
1
asked security and the well constructed Qt plugin