That would make life more convenient, but if you have downloaded and used decompilers like ghidra, its less than a 5 min job tracking down the password for the command line. I used to use PCTool’s hex editor to go through apps and workout strings etc in the DOS days.
I was thinking something like PGP with a public key stored in the app and the public key being unique for each instance of the app. I dont know how many public keys PGP works with.
Potentially, this way if an app popped up on a warez site, and I’ve seen some clarion addons appear on warez sites like @BoxSoft, then you know the client who uploaded it, or has poor IT security, if it wasnt the developer themselves. ![]()
Another point is, when looking at infosec advice like this example Codesigning - Need alternative to Comodo - #9 by anon23294430
in general, there arent really any discussions or focus on how to make an app more secure for the software company or their end users.
This discussion/thread is one example of looking at making an app more secure for both.
For example, we are predominantly creating end user database apps, yet there is no regulatory compliance to ensure we have employed best practices in the design of said software.
Now if you were in the financial world, there is so much compliance paperwork its almost a joke. So Govt’s obviously demonstrate their ignorance or priorities.
Edit.
Is it really that easy to download code onto someone’s machine from the internet? ![]()