Mono Support How safe the monox project is ? 

Viewed 10236 time(s), 5 post(s), 12/1/2012 8:21:53 PM - by super
12/1/2012 8:21:53 PM
6018 Reputation 709 Total posts

How safe the monox project is ? By this I mean, since it is a pre-compiled website project, can anyone with a Reflector can decompile the .Net DLL pretty much and see how/what's going on in the code ?

Is the framework of monox is written from scratch in a way that it is too must work to be decompile ? I want to add eCommerce functionality on top of monox and I am interested in knowing how well monox is written to handle this kind of functionality ?

1
12/2/2012 10:02:53 AM
2793 Reputation 345 Total posts

safety by obscurity has rarely been a good practice since you can't build the OS, the web server, the db engine, and everything else (including the CMS) from scratch

even if you could, chances are you would introduce fatal security flaws that others have already solved in the past

in fact many people are now pushing for robustness by transparency and crowdsourcing source code inspection

2
12/2/2012 10:06:45 AM
2793 Reputation 345 Total posts

speaking of transparency, new cryptography libraries are usually expected to come with source (or at least have the source open to some well known experts for verifying it) for thorough source code inspection by the cryptographic community

3
12/2/2012 10:31:29 AM
15993 Reputation 2214 Total posts

Hi Super, MonoX is written ontop of ASP.NET, it also uses few more libraries that you can check inside the bin folder ... Log4net, SmartThreadPool etc. rest of the MonoX was written from scratch. As for decompile security we use advance obfuscation tools to protect the dlls from being decompiled. Beside that MonoX is written very well so you can go ahead with building eCommerce modules without any worries, some of clients have eCommerce modules built on top of MonoX. If you have any further questions let us know as we are always here to help you. Regards

4
12/4/2012 8:54:53 PM
6018 Reputation 709 Total posts

thank you khorvat

5
This is a demo site for MonoX. Please visit Mono Software for more info.