<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7036.0">
<TITLE>RE: [DUG] In case you're interested (or buy stuff)</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<BR>
<BR>
<BR>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">What do you do if the client phones up and they have lost their password </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">to access your app ?</FONT></SPAN><SPAN LANG="en-us"> </SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">*</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">Look in the Db</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana"></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT COLOR="#993366" SIZE=2 FACE="Verdana">or reset it to something</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT COLOR="#993366" SIZE=2 FACE="Verdana">(via lan/remote access)</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">?</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana"> Or maybe have a "reset password" functionality in the app?</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">What do you do if the user has sent their database over for some fault </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">finding and you cant access it without the clients password ?</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">*Ask them for their password.. silly user</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana"> - or maybe use the admin password?</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">What do you do when you are contracting and you want to prove you did </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">the work, but the idiotic contractee keeps removing all reference to you </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">from the code ? One memorable instance of this was when I wrote a CPM </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">clone optimised for Z80 for Sord Computers and they kept removing my </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">name from the code. Eventually I had to invent an error message and </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">code that looked legit. But if three specific keys were pressed </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">simultaneously, it popped up a message saying that I wrote it.</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">*Um, have never contracted but...</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana"> why is it so important to have your name in the code? For</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT COLOR="#993366" SIZE=2 FACE="Verdana">future employment reference?</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT COLOR="#993366" SIZE=2 FACE="Verdana">Surely the actual contract that sets out your work</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">, + actual code,</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana"> is enough for proof of</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana"> work</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">? (pardon my ignorance here)</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">We generally have a continuously variable master password to let us in </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">as a legit user. There are also various environment variables, registry </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">entries and ini file settings that allow us to maintain the system </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">effectively.</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">*The administration module of your app?</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT COLOR="#993366" SIZE=2 FACE="Verdana">An Admin login to the app with xtra permissions?</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">For any of these to work, we need physical access to the machine with </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">the app and database. We dont any remotely controlled access.</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">*hmm.. remote access certainly has it's benefits. So how do you access the "back door" then?</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Heres an interesting point relating to Elsie4, the Bonus Bonds app. It </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">runs on Windows but Windows has been restricted and hobbled so that you </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">can not do anything else but run the app. When the device is at our </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">office, we can still get in though to change printers or apply updates </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">etc. Is this a back door ?</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">*</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">Good point. </FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> </SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">M$'s definition =</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT COLOR="#993366" SIZE=2 FACE="Verdana">back door</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">A hardware or software-based hidden entrance to a computer system that can be used to bypass the system's security policies.</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">Surely it's not a back door unless it is accessible while the app is running in it's live environment??</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">Again pardon my ignorance here</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#993366" SIZE=2 FACE="Verdana">…</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<BR>
<BR>
<BR>
<BR>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">_______________________________________________</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Delphi mailing list</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Delphi@ns3.123.co.nz</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><A HREF="http://ns3.123.co.nz/mailman/listinfo/delphi">http://ns3.123.co.nz/mailman/listinfo/delphi</A></FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
</BODY>
</HTML>