IRC Logs

Network: freenode Channel: #csharp

	Enter your search terms Submit search form
	Web www.irclog.org

[00:47]<sdnffdxdlld>heya ani
[00:48]<pzjdyv>signing an assembly guarantees that it is the assembly that you think it is
[00:49]<`d0>i-nZ I could give you my toggle show/hide javscript if you want
[00:49]<cjmgrug>Promit: can you elaborate on that?
[00:49]<pzjdyv>CodeRun, it's cryptographic signing. It simply guarantees that you can't replace the assembly with a different one.
[00:50]<zgzzcygnv>but is it really even useful
[00:50]<pzjdyv>it's required for GAC registration, for one thing
[00:50]<zgzzcygnv>i mean i assume its a command line tool needed to verify the validity of the assembly?
[00:50]<sdnffdxdlld>once signed it can live in the gac
[00:50]<pzjdyv>you sign an assembly when you want to guarantee that a malicious somebody can't replace it and cause real damage
[00:50]<pzjdyv>that's all there is to it
[00:51]<pzjdyv>no AnarkiNet
[00:52]<pzjdyv>if an assembly has been signed, that signature is verified when the assembly is loaded
[00:52]<pzjdyv>if the verification fails, the assembly will not load
[00:52]<zgzzcygnv>ok
[00:52]<y-gz>`m0: can you hack on that function in the paste to generate the link with hide/show ?
[00:52]<zgzzcygnv>so i should keep my key file secret then?
[00:53]<pzjdyv>i'm not sure what the key file does, exactly. To tell the truth, I'm not that strong with crypto stuff.
[00:53]<pzjdyv>i know what it does, i don't have a clear picture of how
[00:54]<sdnffdxdlld>lol you should keep your key file in your safe!
[00:54]<sdnffdxdlld>alot of places dont give the devs the key file incase they nick it :P
[00:54]<sdnffdxdlld>if someone has you key file they have your identity
[00:55]<pzjdyv>we don't have a key file yet, al our junk is delay signed
[00:55]<sdnffdxdlld>yer
[00:55]<pzjdyv>which i have a very vague understanding of
[00:55]<sdnffdxdlld>delayed signing is to allow development without handing over the key file
[00:56]<pzjdyv>that much i got
[00:57]<sdnffdxdlld>righty i'm off to bed
[00:57]<sdnffdxdlld>though i may well be back later when i cant sleep
[00:57]<sdnffdxdlld>cyall :)
[00:58]<zgzzcygnv>so if i for example sign a dll (usuing regular signing not delay signing) does that ensure that my application referencing that dll will stop working if the user for example decompiles the dll and tries to modify the code?
[00:58]<zgzzcygnv>erm
[00:58]<zgzzcygnv>the program will stop working*
[00:59]<pzjdyv>it will stop working if the assembly is at all modified, yes
[00:59]<zgzzcygnv>ok
[00:59]<mupmvz>is that true if its not signed?
[00:59]<`d0>i-nZ yea
[01:00]<zgzzcygnv>mufdvr no
[01:00]<mupmvz>thanks
[01:00]<`d0>on line 37 you just have to place onclick="toggle(this)"
[01:00]<`d0>something like that
[01:01]<lnvnzxu>AnarkiNet: it will be impossible for them to resign the assembly withour your private key, so they are unable to create an assembly with that identity; in addition, .NET performs a cryptographic digest validation on the assembly to make sure it hasn't been tampered with
[01:03]<zgzzcygnv>ok
[01:03]<zgzzcygnv>so commercial applications should definately be signed?
[01:03]<lnvnzxu>yes
[01:04]<zgzzcygnv>and i should probably password-protect my snk file?
[01:05]<lnvnzxu>ideally, you want to limit the private key access to very few individuals
[01:05]<zgzzcygnv>and store it on a PGP-encrypted mounted volume
[01:06]<lnvnzxu>treat it for what it is, the only way people can trust the software you produce; if a third party gets access to that private key, they can effectively sign anything as you
[01:07]<lnvnzxu>this is why microsoft's build process (at least in developer division) delay signs the assemblies internally
[01:07]<`d0>need help i-nZ ?
[01:07]<y-gz>`m0: yer
[01:07]<y-gz>i am completly lost
[01:07]<lnvnzxu>which means developers never see the private key, not even in an encrypted form
[01:07]<`d0>okay one sec
[01:07]<`d0>doing something first
[01:08]<y-gz>okey np :)
[01:08]<y-gz>but i think it seems like i need a complete rewrite of the paste :/
[01:08]<`d0>?
[01:09]<`d0>I still have hte window opened
[01:09]<lnvnzxu>note that delay signing assemblies has one major drawback: .NET cannot perform the digest validation, which is why you must manually exempt your assemblies from this check (a major security risk you only want to do in controled systems) to get them to load
[01:09]<zu2>how can i convert or change one structute timespan to system.date ?
[01:11]<y-gz>`m0: well atm it is "Style [Show Plain Code/Show Styled Code]:". I would like that to become "[Show Code/Hide Code] Code Label:" --> <pre lang="csharp" visible="true/false" caption="Nice snippet of code"> code code </pre>
[01:13]<y-gz>`m0: title=".." even better :)
[01:15]<lnvnzxu>rub: a TimeSpan is an interval of time; how would you represent it as a date without having a basis date to go off of?
[01:18]<`d0>i-Nz ok
[01:20]<zu2>when you talk interval of time what do you mean exactly ?
[01:20]<y-gz>`m0: thanks mate :) can use this paste -> http://pastebin.ca/80881 - has the <pre> regexp filtering or something :s
[01:20]<`d0>im doing the hide part at my end heh
[01:20]<lnvnzxu>that's literally what a TimeSpan is, it's an delta (offset) of time
[01:21]<lnvnzxu>it has no inherent representation for any point in time
[01:22]<izit>I've been looking in the source code to many programs. I can see some of them are using some sort templates.
[01:22]<mggvrf_ffjss>Hello. I am trying to pass a method in another class a few DateTime parameters. Now, they've already been set to a predefined value, but for some reason, they go back to DateTime.Now when I access them. Can you tell me why?
[01:23]<lnvnzxu>Mental_Floss: i'd need to see some code to determine the cause
[01:23]<zu2>i basically, i am subtracting one time like 12:30 - 12:28 and i would like to get the difference to saved in one database but i dont knwo m how to do it
[01:23]<mggvrf_ffjss>k
[01:24]<lnvnzxu>IrIT: C# doesn't support templates, but it does have language support for .NET 2.0 Generics
[01:25]<izit>ok. Although it's not templates like that. http://prdownloads.sourceforge.net/aeruirc/AeruIRC-0.2.0_src.zip?download <- peterhu
[01:25]<izit>Check the project file
[01:26]<izit>In the project he names them with template prefix
[01:26]<izit>I can see they are usercontrols
[01:26]<mggvrf_ffjss> DateTime CurrTime = StartDatePicker.Value;
[01:26]<mggvrf_ffjss> PWrite.DisplayTime( CurrTime );
[01:26]<mggvrf_ffjss> public void DisplayTime( DateTime DT )
[01:26]<mggvrf_ffjss> {
[01:26]<mggvrf_ffjss> MessageBox.Show( DT );
[01:26]<mggvrf_ffjss> }
[01:26]<mggvrf_ffjss>When I do message box...it's DateTime.Now...
[01:27]<lnvnzxu>the date time picker defaults to now, i assume you're modifying it either programtically or through user action, and then invoking this code?
[01:28]<zu2>peterhu could you help me, could i do it with timespan i only want to get remainer like 12:30 -12:28 =2 minutes how can i get it, with big precision
[01:28]<mggvrf_ffjss>yes.
[01:28]<mggvrf_ffjss>its set by user. then sent when the OK button event is triggered
[01:28]<lnvnzxu>rub, subtracting two date times will yield you that TimeSpan, but you can't store it in the database as a DATE
[01:29]<lnvnzxu>you'd store it as an integer probably, as the number of ticks for the time span
[01:29]<zu2>ok
[01:29]<izit>What do you use these Usercontrols for
[01:30]<lnvnzxu>Mental_Floss: from that code and your explination, i don't see a reason for that behavior
[01:31]<mggvrf_ffjss>i dont either. its pissing me off :|
[01:32]<mggvrf_ffjss>Now, if i assign it's value to a string first and pass it then it works... but im losing too much flexibility there...
[01:32]<lnvnzxu>Mental_Floss: which .NET version?

Back to #csharp
Or go to some related logs:
#gentoo
#netbsd
#macosx
#blender
#suse