|
Boost : |
Subject: Re: [boost] [encrypted strings]
From: Mathias Gaunard (mathias.gaunard_at_[hidden])
Date: 2009-04-27 13:34:21
Sid Sacek wrote:
> Does boost have any compile-time classes for string encryption? Is it
> even possible?
>
> When a hacker dumps an executable, they can see all of the strings the
> program might use, and some of those strings may contain sensitive
> information.
Obfuscation doesn't lead to security.
I suggest you change your design so that if the user of a program
shouldn't know about some information, then the program cannot know of
it either.
Boost list run by bdawes at acm.org, gregod at cs.rpi.edu, cpdaniel at pacbell.net, john at johnmaddock.co.uk