Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-14 Thread Mark Morgan Lloyd
Lukasz Sokol wrote: On 13/07/16 08:31, Mark Morgan Lloyd wrote: Michael Van Canneyt wrote: On Tue, 12 Jul 2016, Mark Morgan Lloyd wrote: Please excuse one of my regular silly questions. Elsewhere, a (former) Delphi programmer is uneasy having found that his binaries have had embedded SQL

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-13 Thread Mark Morgan Lloyd
Tony Whyman wrote: What's interested me is how this thread has almost looped back to a recent thread on that steaming heap of brown stuff know as GTK and the attitude of the programmers behind it. It wasn't intentional :-) They make the point here that GTK is (too) complex and difficult to

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-13 Thread Tony Whyman
What's interested me is how this thread has almost looped back to a recent thread on that steaming heap of brown stuff know as GTK and the attitude of the programmers behind it. I had a similar problem a few years ago whiich I wanted to solve by putting the passwords in an external file and

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-13 Thread Mark Morgan Lloyd
Dennis Poon wrote: On the subject, can the OP simply use UPX to encrypt the executable binary. It won't be secured but no more unsecured than other simple solutions. I'm the nominal OP, but I raised the question in response to what an (ex-) Delphi programmer was asking elsewhere about

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-13 Thread Santiago A.
El 12/07/2016 a las 21:39, Graeme Geldenhuys escribió: > No, but why the hell would you want to hard-code a password inside an > executable. Encrypt it externally and read it from a .INI file at > runtime (or prompt for a password). Even something as simple as > XorString() is better than nothing

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-13 Thread Graeme Geldenhuys
On 2016-07-13 09:54, Dennis Poon wrote: > May I know what OnGuard is? It was originally TurboPower OnGuard, but then released as open source software. It allows you to license your software in many different ways. eg: x amount of days trial, lease your software for a year at a time, x amount of

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-13 Thread Dennis Poon
Graeme Geldenhuys wrote: On 2016-07-13 08:31, Mark Morgan Lloyd wrote: Sometimes it's difficult to avoid having to do that sort of thing, or obfuscating them in an external file. You could use something like DCPCrypt to help the cause. Or you could follow similar tactics to what OnGuard uses

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-13 Thread Mark Morgan Lloyd
Lukasz Sokol wrote: On 13/07/16 08:31, Mark Morgan Lloyd wrote: Michael Van Canneyt wrote: On Tue, 12 Jul 2016, Mark Morgan Lloyd wrote: Please excuse one of my regular silly questions. Elsewhere, a (former) Delphi programmer is uneasy having found that his binaries have had embedded SQL

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-13 Thread Graeme Geldenhuys
On 2016-07-13 08:31, Mark Morgan Lloyd wrote: > Sometimes it's difficult to avoid having to do that sort of thing, or > obfuscating them in an external file. You could use something like DCPCrypt to help the cause. Or you could follow similar tactics to what OnGuard uses - encode sensitive text

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-13 Thread Graeme Geldenhuys
On 2016-07-13 08:28, Mark Morgan Lloyd wrote: > In that case "No, but why the hell would *one* want to hard-code a > password [...] storing it inside *one's* source code." The English language is perplexing (ie: “clear as dishwater”). There are a 1001 rules and exceptions to the rules. Both our

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-13 Thread Lukasz Sokol
On 13/07/16 08:31, Mark Morgan Lloyd wrote: > Michael Van Canneyt wrote: >> On Tue, 12 Jul 2016, Mark Morgan Lloyd wrote: >> >>> Please excuse one of my regular silly questions. Elsewhere, a (former) >>> Delphi programmer is uneasy having found that his binaries have had >>> embedded SQL

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-13 Thread Mark Morgan Lloyd
Michael Van Canneyt wrote: On Tue, 12 Jul 2016, Mark Morgan Lloyd wrote: Please excuse one of my regular silly questions. Elsewhere, a (former) Delphi programmer is uneasy having found that his binaries have had embedded SQL queries, passwords and so on visible "in clear" for the last 20

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-13 Thread Mark Morgan Lloyd
Graeme Geldenhuys wrote: On 2016-07-12 21:09, Mark Morgan Lloyd wrote:> I didn't say /I/ was the one doing it. I know and I wasn’t implying you. It’s a figure of speech. In that case "No, but why the hell would *one* want to hard-code a password [...] storing it inside *one's* source code."

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-12 Thread Graeme Geldenhuys
On 2016-07-12 21:09, Mark Morgan Lloyd wrote: > I didn't say /I/ was the one doing it. I know and I wasn’t implying you. It’s a figure of speech. Regards, Graeme ___ fpc-pascal maillist - fpc-pascal@lists.freepascal.org

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-12 Thread Michael Van Canneyt
On Tue, 12 Jul 2016, Mark Morgan Lloyd wrote: Please excuse one of my regular silly questions. Elsewhere, a (former) Delphi programmer is uneasy having found that his binaries have had embedded SQL queries, passwords and so on visible "in clear" for the last 20 years or so. Can FPC be told

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-12 Thread Mark Morgan Lloyd
Graeme Geldenhuys wrote: On 2016-07-12 20:12, Mark Morgan Lloyd wrote: Can FPC be told to obfuscate ResourceStrings? No, but why the hell would you want to hard-code a password inside an executable. Encrypt it externally and read it from a .INI file at runtime (or prompt for a password). Even

Re: [fpc-pascal] Resource strings, passwords etc.

2016-07-12 Thread Graeme Geldenhuys
On 2016-07-12 20:12, Mark Morgan Lloyd wrote: > Can FPC be told to obfuscate ResourceStrings? No, but why the hell would you want to hard-code a password inside an executable. Encrypt it externally and read it from a .INI file at runtime (or prompt for a password). Even something as simple as

[fpc-pascal] Resource strings, passwords etc.

2016-07-12 Thread Mark Morgan Lloyd
Please excuse one of my regular silly questions. Elsewhere, a (former) Delphi programmer is uneasy having found that his binaries have had embedded SQL queries, passwords and so on visible "in clear" for the last 20 years or so. Can FPC be told to obfuscate ResourceStrings? -- Mark Morgan