Re: [Nolug] Any way to have a program verify that it's running alegitimate version?

A number of open source projects have tried to figure this out, especially games where hacking can give someone an unfair advantage.

I suggest taking a look at bzflag, I think they have been working on it for a while for that game.
--sent from my BlackBerry 8100--
Katrina Niolet
kniolet@ildiinc.com

  

-----Original Message-----
From: Elliott Seyler <rainrunner87@mailshack.com>
Date: Fri, 25 May 2007 17:38:17
To:nolug@nolug.org
Subject: Re: [Nolug] Any way to have a program verify that it's running a
 legitimate version?

Therein lies the problem: users can't trust a closed-source program, and
I can't trust users not to hash it.

Friedrich Gurtler wrote:
> Is this project going to be open source?
>
> You could calculate a hash of the program and have that be a component
> of whatever handshaking protocol you end up using.
>
> However, if its open source they could just hardcode the expected hash
> into the handshake, and do whatever they want.
>
> -- Fritz
>
> On 5/25/07, *Elliott Seyler* <rainrunner87@mailshack.com
> <mailto:rainrunner87@mailshack.com>> wrote:
>
> I'm planning a rather crazy project to make a distributed server, and
> one of the problems I've come across in my initial planning is
> preventing people from connecting modified versions of the server. I
> want to prevent anything but a legitimate version from being part
> of the
> server network, to prevent collusion with the intent to reveal secure
> information or communication sent or stored within the network.
>
> The trouble is that I can't think of any reliable way to do
> this. Any
> suggestions you may have would be welcome.
>
> -Elliott
>
> ___________________
> Nolug mailing list
> nolug@nolug.org <mailto:nolug@nolug.org>
>
>

___________________
Nolug mailing list
nolug@nolug.org
6‰n‚f¢–)à–+-ž‰n‚z%º
+
Received on 05/25/07