MonoX support board

Start the conversation, ask questions and share tips and solutions with fellow developers.

Non-registered users can only browse through our support boards. Please register now if you want to post your questions. It takes a second and it is completely free. Alternatively, you can log in without registration using your credentials at major sites such as Google, Microsoft Live, OpenId, Facebook, LinkedIn or Yahoo.

How safe the monox project is ?  (Mono Support )

Viewed 9038 time(s), 5 post(s) 12/1/2012 8:21:53 PMby super
super

super

12/1/2012 8:21:53 PM
How safe the monox project is ? By this I mean, since it is a pre-compiled website project, can anyone with a Reflector can decompile the .Net DLL pretty much and see how/what's going on in the code ?

Is the framework of monox is written from scratch in a way that it is too must work to be decompile ? I want to add eCommerce functionality on top of monox and I am interested in knowing how well monox is written to handle this kind of functionality ?
This content has not been rated yet. 
6018 Reputation 709 Total posts
Zoomicon

Zoomicon

12/2/2012 10:02:53 AM

safety by obscurity has rarely been a good practice since you can't build the OS, the web server, the db engine, and everything else (including the CMS) from scratch

even if you could, chances are you would introduce fatal security flaws that others have already solved in the past

in fact many people are now pushing for robustness by transparency and crowdsourcing source code inspection

This content has not been rated yet. 
2793 Reputation 345 Total posts
Zoomicon

Zoomicon

12/2/2012 10:06:45 AM
speaking of transparency, new cryptography libraries are usually expected to come with source (or at least have the source open to some well known experts for verifying it) for thorough source code inspection by the cryptographic community
This content has not been rated yet. 
2793 Reputation 345 Total posts
khorvat

khorvat

12/2/2012 10:31:29 AM
Hi Super, MonoX is written ontop of ASP.NET, it also uses few more libraries that you can check inside the bin folder ... Log4net, SmartThreadPool etc. rest of the MonoX was written from scratch. As for decompile security we use advance obfuscation tools to protect the dlls from being decompiled. Beside that MonoX is written very well so you can go ahead with building eCommerce modules without any worries, some of clients have eCommerce modules built on top of MonoX. If you have any further questions let us know as we are always here to help you. Regards
This content has not been rated yet. 
15993 Reputation 2214 Total posts
super

super

12/4/2012 8:54:53 PM
thank you khorvat
This content has not been rated yet. 
6018 Reputation 709 Total posts