Re: [Nolug] Any way to have a program verify that it's running a legitimate version?

Is this project going to be open source?

You could calculate a hash of the program and have that be a component of
whatever handshaking protocol you end up using.

However, if its open source they could just hardcode the expected hash into
the handshake, and do whatever they want.

-- Fritz

On 5/25/07, Elliott Seyler <rainrunner87@mailshack.com> wrote:
>
> I'm planning a rather crazy project to make a distributed server, and
> one of the problems I've come across in my initial planning is
> preventing people from connecting modified versions of the server. I
> want to prevent anything but a legitimate version from being part of the
> server network, to prevent collusion with the intent to reveal secure
> information or communication sent or stored within the network.
>
> The trouble is that I can't think of any reliable way to do this. Any
> suggestions you may have would be welcome.
>
> -Elliott
>
> ___________________
> Nolug mailing list
> nolug@nolug.org
>

___________________
Nolug mailing list
nolug@nolug.org
Received on 05/25/07