MonoX support board

Start the conversation, ask questions and share tips and solutions with fellow developers.

Non-registered users can only browse through our support boards. Please register now if you want to post your questions. It takes a second and it is completely free. Alternatively, you can log in without registration using your credentials at major sites such as Google, Microsoft Live, OpenId, Facebook, LinkedIn or Yahoo.

How safe the monox project is ?  (Mono Support )

9925 put(a) pogledan, 5 odgovor(a) 1.12.2012. 20:21:53Kreirao(la) super
super

super

1.12.2012. 20:21:53
How safe the monox project is ? By this I mean, since it is a pre-compiled website project, can anyone with a Reflector can decompile the .Net DLL pretty much and see how/what's going on in the code ?

Is the framework of monox is written from scratch in a way that it is too must work to be decompile ? I want to add eCommerce functionality on top of monox and I am interested in knowing how well monox is written to handle this kind of functionality ?
Ovaj sadržaj još nije ocijenjen. 
6018 Reputacija 709 Ukupno objava
Zoomicon

Zoomicon

2.12.2012. 10:02:53

safety by obscurity has rarely been a good practice since you can't build the OS, the web server, the db engine, and everything else (including the CMS) from scratch

even if you could, chances are you would introduce fatal security flaws that others have already solved in the past

in fact many people are now pushing for robustness by transparency and crowdsourcing source code inspection

Ovaj sadržaj još nije ocijenjen. 
2793 Reputacija 345 Ukupno objava
Zoomicon

Zoomicon

2.12.2012. 10:06:45
speaking of transparency, new cryptography libraries are usually expected to come with source (or at least have the source open to some well known experts for verifying it) for thorough source code inspection by the cryptographic community
Ovaj sadržaj još nije ocijenjen. 
2793 Reputacija 345 Ukupno objava
khorvat

khorvat

2.12.2012. 10:31:29
Hi Super, MonoX is written ontop of ASP.NET, it also uses few more libraries that you can check inside the bin folder ... Log4net, SmartThreadPool etc. rest of the MonoX was written from scratch. As for decompile security we use advance obfuscation tools to protect the dlls from being decompiled. Beside that MonoX is written very well so you can go ahead with building eCommerce modules without any worries, some of clients have eCommerce modules built on top of MonoX. If you have any further questions let us know as we are always here to help you. Regards
Ovaj sadržaj još nije ocijenjen. 
15993 Reputacija 2214 Ukupno objava
super

super

4.12.2012. 20:54:53
thank you khorvat
Ovaj sadržaj još nije ocijenjen. 
6018 Reputacija 709 Ukupno objava