unique data

[dick_nl]

Is there a unique, cpu depending, string or value in .NET 1.1.* that I can easily use for passwordgeneration!?

regards, moi

 

[Robby]

Like a GUID?

 

[dick_nl]

something like a MAC Address which is very hard to change... maybe something like another hardware-address!?

 

[Jay1b]

I am sure there is a way of finding out a MAC address in .NET (i dont know how though), just use that. All modern PCs come with USB, and every USB port has its own MAC address as well.

 

[dick_nl]

Okay... that sounds good already.. but actually Im looking for a magic number or string that is available on pcs as well as other (mobile) devices... so probably something in the Compact Framework...
Is there any?!

 

[TechnoTone]

You could always create one the first time your program runs and save it to some obscure location in the registry.

 

[dick_nl]

Thats possible of course but using decompiling easy to figure out... I more like to use a fixed string/number of the cpu and make an pretty difficult calculation so reverse engineering is as good as impossible...

 

[TechnoTone]

How about HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProductId? Not sure what it is exactly or whether it is unique to each machine. It might serve your purpose.


Edit> Scrap that. Its not unique. Ive just checked 2 PCs and their both the same.

 

[Robby]

this may interest you http://msdn.microsoft.com/library/d...rlrfsystemtypeclassgettypefromclsidtopic1.asp

 

[dick_nl]

Does nobody have experience with using an unique piece of data on a pc/device for protection purposes?!
When doing class browsing through my assemblies I noticed that the defined fixed arrays werent displayed when decompiling the assemblyfunction.
i.e. from the following array only its existence was shown but not the length of the array and values of the individual entries. A possibility to make an almost unhackable passwordgeneration...
int[] myArray = {1, 3, 5, 7, 9, 11}

Regards, me, myself and I

 

[DiverDan]

As a suggestion, I send the newly registered user a SystemID.exe file. The program has only two buttons, one with Email, the other with Phone. The program gets the CPU serial number of the computer then encrypts it. When the user presses the email button, the encrypted serial number along with their name, date, product version and distributor name are pasted into the email body, then emailed off. I then return an encrypted code to be entered into the program. At all time the displayed codes are encrypted and, if the program is hacked, the hackie would still need the code generator program to generate a code for their computer. It sounds a bit involved, but it works very well.

Hope that helps
Dan

 

[dick_nl]

That was about what I wanted to do too! And for that its most save to have an unique value/string (like the serial# of the cpu) that cant be changed by the users...
But beside its should be unique, I also want it to be possible to get that value with safe code only and if possible should be available on every device that runs the .NET Framework...

Seems to be pretty hard to find something like that...

 

[DiverDan]

Drop me a PM and Ill explain it a bit more.