Re: Py2Exe security

2005-05-05 Thread Timothy Smith
i used to work in a place that did this exact same thing. they attempted to hide passwords in source code. there is an even bigger problem with this then security of it in source - if someone comprimises the password, how are you going to change it quickly? all those systems will have to update the

Re: Py2Exe security

2005-05-05 Thread Luciano Rodrigues da Silva
I think that encrypt with public/private key will be a solution in your case. I don't know if python has a module to do this kind of encrypt. -- http://mail.python.org/mailman/listinfo/python-list

Re: Py2Exe security

2005-05-04 Thread ech0
Keep in mind what i said, even you encrypt it the source (and decode at run time), even if compiled via c++,c, etc., it can still be decrypted if your using http as the protocol, all the person has to do is sniff the packets. So if your going to encrypt your information make sure you use a secure p

Re: Py2Exe security

2005-05-04 Thread mahasamatman
I suggest You to use base 64 encoded strings something like password = 'aGlkZGVuX3Bhc3N3b3Jk\n' password = pasword.decode("base64") -- http://mail.python.org/mailman/listinfo/python-list

Re: Py2Exe security

2005-05-03 Thread Ivan Voras
Grant Edwards wrote: > On 2005-05-03, mahasamatman <[EMAIL PROTECTED]> wrote: >>password = pasword.decode("base64") > > That will delay the attacker for a few minutes. True, but a script kiddie that only knows about the 'strings' program will be forever baffled :) Though deprecated, I think the

Re: Py2Exe security

2005-05-03 Thread Grant Edwards
On 2005-05-03, mahasamatman <[EMAIL PROTECTED]> wrote: > I suggest You to use base 64 encoded strings > something like > password = 'aGlkZGVuX3Bhc3N3b3Jk\n' > password = pasword.decode("base64") That will delay the attacker for a few minutes. -- Grant Edwards grante

Re: Py2Exe security

2005-05-03 Thread andreas
On Tue, May 03, 2005 at 06:01:33AM -0700, Terje Johan Abrahamsen wrote: > > Simon Brunning wrote: > > On 3 May 2005 05:03:00 -0700, Terje Johan Abrahamsen > <[EMAIL PROTECTED]> wrote: > > > We have created some programs in Python that are to be distributed > > > around. The programs will be made i

Re: Py2Exe security

2005-05-03 Thread Will McGugan
Terje Johan Abrahamsen wrote: >>If your program can access these details, then a suficiently >>determined attacker can access them too, regardless of what you do. > > > Yes, I assume so. Luckily it is not national secrets we are trying to > hide. But, how does py2exe compare with for example a p

Re: Py2Exe security

2005-05-03 Thread Terje Johan Abrahamsen
Simon Brunning wrote: > On 3 May 2005 05:03:00 -0700, Terje Johan Abrahamsen <[EMAIL PROTECTED]> wrote: > > We have created some programs in Python that are to be distributed > > around. The programs will be made into .exe files by py2exe. However, > > in the source there are certain webadresses,

Re: Py2Exe security

2005-05-03 Thread Simon Brunning
On 3 May 2005 05:03:00 -0700, Terje Johan Abrahamsen <[EMAIL PROTECTED]> wrote: > We have created some programs in Python that are to be distributed > around. The programs will be made into .exe files by py2exe. However, > in the source there are certain webadresses, logins and passwords that > the

Re: Py2Exe security

2005-05-03 Thread ech0
someone can sniff the client for the information it sends/receives so its possible to extract the info that way. -- http://mail.python.org/mailman/listinfo/python-list

Py2Exe security

2005-05-03 Thread Terje Johan Abrahamsen
Hello. We have created some programs in Python that are to be distributed around. The programs will be made into .exe files by py2exe. However, in the source there are certain webadresses, logins and passwords that the programs use, that we would like to keep away from the end users. They will use