Re: socketServer questions

On Fri, 2005-10-07 at 09:17 -0700, Paul Rubinhttp: wrote:
> > 3. How do I keep people from tampering with the server? The clients
> > send strings of data to the server. All the strings start with x and
> > end with y and have z in the middle. Is requiring x at the front and
> > y at the back and z someplace in the middle enough to keep people
> > out? I'm open to suggestions.
>
> It only keeps them out if they don't know to use that x..y..z pattern
> and maybe not even then. Get a copy of "Security Engineering" by
> Ross Anderson to have an idea of what you're dealing with, especially
> if your server controls something valuable.

The server just logs data, nothing else. It's not private or important
data... just sys admin type stuff (ip, mac addy, etc.). I just don't
want some script kiddie discovering it and trying to 'hack' it. By doing
so, they'd fill the log up with crap. So, If the data doesn't contain x,
y, and z and if the data is too big or too small, I record it to a
'tamper' log and tell the leet hacker to 'go away'.

.

Relevant Pages

  • Re: Image data via Winsock
    ... I have made a simple "server" to handle transactions in an Access database, ie. accept small text strings containing an sql clause or a hard-coded command and send back the result as a delimited string. ...
    (comp.lang.basic.visual.misc)
  • Re: windows xp professional Event Viewer System Errors
    ... I am not sure what you mean with "strings"? ... w3svc - The server was unable to add the Virtual Root '/recycler' ...
    (microsoft.public.windowsxp.general)
  • Re: Cryptographic protocols, again
    ... produces thirty-six random-looking strings of the same length. ... ** If you use binary client software ... ** let the server roll directly for you right away. ... another branch of this thread the safer way is to play peer to peer. ...
    (rec.games.backgammon)
  • Re: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied.
    ... Can you show the connection string that doesn't work and the ODBC parameters ... When we moved to the new servers, we also changed the connect strings ... We added the SQL server to the hosts & lmhosts.sam files, ...
    (microsoft.public.inetserver.asp.general)
  • Re: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied.
    ... Can you show the connection string that doesn't work and the ODBC parameters ... When we moved to the new servers, we also changed the connect strings ... We added the SQL server to the hosts & lmhosts.sam files, ...
    (microsoft.public.sqlserver.programming)