🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: borland.public.cppbuilder.nativeapi
Article #10772

Re: Getting edit box text.

#10772
From: Remy Lebeau (TeamB)
Date: Thu, 25 Mar 2004 00:01
27 lines
2244 bytes
"Bob Gonder" <notbg@notmindspring.invalid> wrote in message
news:7s5460dde5cop5s2r4ravr8si5fcjdc9im@4ax.com...

> From a security POV, do we _want_ other processes to
> be able to read our passwords?

No.  But the fact remains that it is normally possible to do.  There are
several third-party programs available that can "look behind" the asteriks
of a password entry box and display the plain-text password.  My favorite is
SnadBoy's Revelation.

In fact, at one point, I had even started writing my own TPasswordEdit
component specifically to twart such programs while stll providing the
owning process access to the password.  I never did finish it though, as I
moved on to other projects and never got the chance to revisit it yet.

> Don't controls "know" their owning process, so could refuse to talk to
strangers?

The problem with that is it is not possible to determine which process a
window message is coming from.  Requests for window text have to be
processed at the message level, and thus a control would not know whether
the request was local or external.


Gambit
Technical Details
Message-ID: <40621f1c$1@newsgroups.borland.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mail
References: <405c3bc2@newsgroups.borland.com> <405ccacb$1@newsgroups.borland.com> <405eb810@newsgroups.borland.com> <405f271a$1@newsgroups.borland.com> <4061e61b@newsgroups.borland.com> <4061fd01@newsgroups.borland.com> <7s5460dde5cop5s2r4ravr8si5fcjdc9im@4ax.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10cc67,95810eaa7d991d4a
X-Google-Attributes: gid10cc67,public
X-Google-ArrivalTime: 2004-03-24 16:10:07 PST
From: "Remy Lebeau \(TeamB\)" <gambit47.no.spam@no.spam.yahoo.com>
Newsgroups: borland.public.cppbuilder.nativeapi
References: <405c3bc2@newsgroups.borland.com> <405ccacb$1@newsgroups.borland.com> <405eb810@newsgroups.borland.com> <405f271a$1@newsgroups.borland.com> <4061e61b@newsgroups.borland.com> <4061fd01@newsgroups.borland.com> <7s5460dde5cop5s2r4ravr8si5fcjdc9im@4ax.com>
Subject: Re: Getting edit box text.
Date: Wed, 24 Mar 2004 16:01:27 -0800
Lines: 29
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
NNTP-Posting-Host: 67.22.138.253
Message-ID: <40621f1c$1@newsgroups.borland.com>
X-Trace: newsgroups.borland.com 1080172316 67.22.138.253 (24 Mar 2004 15:51:56 -0800)
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mail