Geek Answers Handbook

Prevent reading lines in memory from other programs

Some programs, such as ProcessExplorer, can read lines in memory (for example, my error message written in the code can easily be displayed even if it has already been compiled).

  • Imagine that in the line of memory allocated sequentially in memory, there is a password line "123456". What if hackers can get the password entered by the user? Is there a way to prevent row visibility?

  • Oh yes, also, if I had a hash password and sent it from the client to the server in order to compare the stored database hash value, the hacker will not be able to save the same hash and play it in order to access the user account? Is there a way to prevent playback?

Thank!

+5
source share
4 answers

I believe that you are mixing two things. The found ProcessExplorer parameters can also be found with the "strings" command on Unix. It simply flushes all stored lines in the executable, and not in the current memory.

If you did not compile the user password into your program, the memory intended for storing data should not be read by ProcessExplorer.

, . , . , . .

, , , . - . https://www.securecoding.cert.org/confluence/display/seccode/MEM06-C.+Ensure+that+sensitive+data+is+not+written+out+to+disk

[]

, .

, PKI. , . , . , , . , , , .

, - .

, -. PKI.

: 1. 2.

: http://en.wikipedia.org/wiki/Public_key_infrastructure

+8

, , , , , , , /.

0

More articles:


All Articles