[ActiveLock-Development] [ activelock-Feature Requests-785187 ] Setting the system date back

[SourceForge.net <no...@so...>]

Feature Requests item #785187, was opened at 2003-08-08 05:22
Message generated for change (Comment added) made by th2tran
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=526388&aid=785187&group_id=70007

Category: Security Improvements
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: Setting the system date back

Initial Comment:
Hello,

I just downloaded you great activeX and tried the 
example application.
I noticed that ActiveLock doesn't keep track of system 
date changes. The final user will be able to set the 
system date back and continue using the time-limited 
version. Is it correct?

If so, it would be enought to store the initial date in 
several (file system, registry, ...) locations, maybe 
encrypted.

I got the source code, if I come up with an 
implementation I'll let you know.

Congrats.
Antonio.
banton @ tiscali.it

----------------------------------------------------------------------

>Comment By: Thanh Hai Tran (th2tran)
Date: 2003-08-09 16:52

Message:
Logged In: YES 
user_id=797792

Hi Antonio,
Thank you for your inquiry. I believe the version you've 
downloaded is 1.x.
You might be interested to know that we have recently 
released an alpha
version of ActiveLock 2.0, which has resolved the issue you 
reported.
Please go to the following link to download if you're 
interested. Please
read the release notes before downloading.
http://sourceforge.net/projects/activelock/

There are a few places from which you can get support for 
the new release.
ActiveLock2 Discussion Forum:
http://activelock.sourceforge.net/boards/index.php
ActiveLock 2Users Mailing List:
http://lists.sourceforge.net/lists/listinfo/activelock-users
Enjoy!

Thanh Tran
ActiveLock Development Team Member

----------------------------------------------------------------------

Comment By: Andy Schmitz (ajcompany)
Date: 2003-08-09 02:35

Message:
Logged In: YES 
user_id=522263

Well, yes, but the encryption would be the difficult part.
If we check to see if the value is there (and set it if it
isn't), then you could just delete it. You also must
remember that "nothing is sacred" when it comes to the
software (indeed, it would be easier to set the date back
than to crack the program, but...), keys that you thought
were private can be discovered in 30 seconds by someone who
knows what they're doing. Encrypting so you can decrypt but
someone else can't only works with a private key, and we
can't have one of those (well, we can but we can't expect it
to be private). You have to remember that the entire source
code for the control is open in human readable format and
the source code for any application is only a few debugger
clicks away (but maybe not too readable).

Just a thought,
-AJ

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=526388&aid=785187&group_id=70007