|
There are existing tools for achieving this, any semi competant network administrator knows how and where to set this type of monitoring up. The person wants to create a monitoring system outside the standard channels that will periodicalyy email all the URL to ... someone. While it may not be malicious it feels that way to me.
If I manage to get that app onto your machine, I get all the URLs you visit, I now know your social profile and any online banking sites you visit. I can tailor a phishing attack directly at you. Scuse me while I just go and get my foil beanie but I recently got an email from my daughter inviting me to facebook, the only clue was that she did not use her married name and sure enough there was a trojan at the other end of the link.
If this is innocent I am willing to appologise, but I will not help this person. As Bob said, he got the contract with no knowledge how to acheive the clients needs.
Never underestimate the power of human stupidity
RAH
|
|
|
|
|
The requirement is awful, I agree. There must be a proxy server to monitor all this. But if the application is for some school/college or something on similar lines, I suspect they would have one.
Mycroft Holmes wrote: If I manage to get that app onto your machine, I get all the URLs you visit, I now know your social profile
Absolutely not required. Facebook or many other social profiles can be obtained very easily (just a click away, seriously). Hence I would not waste time in making such application if I had wrong intentions.
Mycroft Holmes wrote: If this is innocent I am willing to appologise, but I will not help this person.
Sorry, but I don't care. I was just curious why you thought this application malicious.
Mycroft Holmes wrote: he got the contract with no knowledge how to acheive the clients needs.
True again.
50-50-90 rule: Anytime I have a 50-50 chance of getting something right, there's a 90% probability I'll get it wrong...!!
|
|
|
|
|
d@nish wrote: Sorry, but I don't care
You should, actually; you could get into a heap o' trouble if you aid someone who is breaking the law.
I are Troll 
|
|
|
|
|
Not in this regard, you have to know before-hand that you are contributing to a malicious cause, in this case this type of functionality could very well be justified.
Either way I wouldn't help, but you can't say something like that without justifiable reason behind it. Otherwise you are just fear-mongering.
|
|
|
|
|
EliottA wrote: you have to know before-hand that you are contributing to a malicious cause
It's not that black and white; if the client is a internet-cafe, then he/she might not be aware of the implications of tracking personal data. It's their computers, it's their data. Right?
The client might not even have a malicious intent, and still ask you to break the law. Most of us won't be sure whether it's being broken, as an engineer isn't a lawyer. Does that mean that we can thread any law, just because we don't know them?
If this is seen as mongering, then please, do accept my apologies. It's not like I just wanted to troll around and spread some paranoia; I just stumbled over an "I don't care" and tried to point out that there's a risk in simply shrugging your shoulders.
I'm a blue cow, stuck at level 74 - still looks like a Troll in a fancy dress
|
|
|
|
|
It is not in relation to what OP is asking. I said that for Mycroft saying that he would apologize if he was wrong about OP's intentions. I really don't care if he does that or doesn't.
He had an opinion, told that to OP. What's wrong in it? I had different opinion, so I gave a different reply.
50-50-90 rule: Anytime I have a 50-50 chance of getting something right, there's a 90% probability I'll get it wrong...!!
|
|
|
|
|
Interesting Article on this E-mail-monitoring-may-contravene-European-laws[].
From what I have read, here in Europe, where I am an app on the PC monitoring and reporting internet usage would be in breach of European human rights legislation unless there was a company policy previously in place and enforced stating that the internet cannot be used from company machines for personal use, and that all traffic will be monitored to log business usage (which is lawful).
So, what is the purpose of a monitoring application, to enforce the company policy or to check what people are viewing? Enforcing policy would be better done by regulating site access on the proxy server, and checking usage is also best done there even when illegal.
So my read on this is that anyone installing software (or writing software for installation) on an end user PC for the purpose of reporting on their internet usage is very likely acting in breach of European law, if that is where the software is used. Seeing as we had a high profile case of a British Hacker being extradited to the U.S. for contravening their laws (not British law where he lived) there is no way I would get involved in something like this, and I would advise anyone else to stay well away. You just don't know where the software will end up with your name on it.
If you have knowledge, let others light their candles at it.
Margaret Fuller (1810 - 1850)
www.JacksonSoft.co.uk
|
|
|
|
|
Thanks for reply
After consulting with cliet, when i told him that this is against human rights. he said to me that he wants to know only domain names not full URL with query data. he wants to know the domain names like songs.pk, mp3pk.com, yahoo.com, youtube.com etc
atcually he told his employees not to use unnecessary sites at working time because it effects the work.
after long waiting he decide to get such application that could tell him about the domain names opened on particular system.
when he check out at the server he get all the url requested and found that employee open youtube.com and watch the vedio at working time. so he wants to stop that particular employee.
thats why he wants to get this application.
|
|
|
|
|
you can use monitoring sofwares like keylogger.
If you can think then I Can.
|
|
|
|
|
A key logger does nothing in this case. Sure, you can get a URL, but you cannot use the content of a site and classify it.
|
|
|
|
|
Hello to All,
How can i secure my application to Reflector or Dissembler. How can i Protect my applications Code to Decompilers.
Your help is needed.
Thanks
If you can think then I Can.
|
|
|
|
|
We work with the .NET Reactor[^] which works pretty fine for me...
|
|
|
|
|
Actually i wanna help without purchasing any application.
I am not customer.
If you can think then I Can.
|
|
|
|
|
Check out dotfuscator[^]. A free community edition of this shipped with Visual Studio 7.1
If you have knowledge, let others light their candles at it.
Margaret Fuller (1810 - 1850)
www.JacksonSoft.co.uk
|
|
|
|
|
Thank u sir
If you can think then I Can.
|
|
|
|
|
Though, anyone with Reflector will still be able to open the assembly and see code. It's just going to be harder to follow.
There are no free solutions to this little problem.
|
|
|
|
|
This free tool will obfuscate the code and prevent Reflector from viewing it. The IL can still be viewed with ildasm though.
http://www.lukesw.net/apps/ProtectorLite.aspx[^]
Have you tried the Krypton Toolkit? http://www.componentfactory.com/free-windows-forms-controls.php
|
|
|
|
|
Pretty nice. Never heard of it until now.
|
|
|
|
|
Thank you sir. This is really very good.
Thank u very much
If you can think then I Can.
|
|
|
|
|
But it's dengrous for development site. that means .Net Framework compiler is works very basic compilation of code or .Net application is not fully protected.
Whether C++,MFC application are not doing that.
If you can think then I Can.
|
|
|
|
|
Original error-free code is this:
If .resoi.Fields.Item("rtype").Value = "M" Then
x = .sio.Fields.Item("rpop").Value * .itemsi.Fields.Item("ireptime").Value * wage * .iri.Fields.Item("trqtyrqrd").Value
.siro.Fields.Item("alaborcost").Value = .siro.Fields.Item("alaborcost").Value + x
.sro.Fields.Item("arescost").Value = .sro.Fields.Item("arescost").Value + x
.siro.Fields.Item("alaborhrs").Value = .siro.Fields.Item("alaborhrs").Value + .sio.Fields.Item("rpop").Value * .itemsi.Fields.Item("ireptime").Value * .iri.Fields.Item("trqtyrqrd").Value
End If
Goal: lower-case “m” RTYPES are ignored. Better if converted to upper-case. This older VB program was converted to VB 2008, and uses an MS ACCESS 2002 db for i/o (relevant?). Attempts to revise code generate the error message (shown here at bottom), which points NOT to the IF statement, but to the italicized line 2 lines later. Any ideas? Thank you. Dave
Attempted fix #1: adding “.ToUpper()” to IF statement creates “no current record” error message, shown below.
If .resoi.Fields.Item("rtype").Value.ToUpper() = "M" Then
Attempted fix #2: changed IF statement to read:
... = (“m” OR “M”) THEN
Attempted fix #3: changed IF statement to read:
... = IF(... = “M”) OR (... = “m”) THEN
Attempted fix #4: changed IF statement to read:
... = IF(... = “M”) OR (... = “m”) THEN
Attempted fix #5: removed IF statement and END IF statements altogether - STILL got the error.
Error message:
COMExeption was unhandled (in heading)
No current record (suggests i/o problem)
Check the ErrorCode property of the exception to determine the HRESULT returned by the COM object.
Get general help for this exeption.
|
|
|
|
|
Please tell me you're not using the old ADODB objects you used in VB6? Scrap it and rewrite using ADO.NET instead.
VB 123 wrote: If .resoi.Fields.Item("rtype").Value = "M" Then
x = .sio.Fields.Item("rpop").Value * .itemsi.Fields.Item("ireptime").Value * wage * .iri.Fields.Item("trqtyrqrd").Value
.siro.Fields.Item("alaborcost").Value = .siro.Fields.Item("alaborcost").Value + x
.sro.Fields.Item("arescost").Value = .sro.Fields.Item("arescost").Value + x
.siro.Fields.Item("alaborhrs").Value = .siro.Fields.Item("alaborhrs").Value + .sio.Fields.Item("rpop").Value * .itemsi.Fields.Item("ireptime").Value * .iri.Fields.Item("trqtyrqrd").Value
End If
I wouldn't call this "error-free code". It may run as expected, but it makes a LOT of assumptions about the data and relies heavily on VBs implicit conversions. That is not good practice. I'd start by opening up the project properties and turning on Option Strict. You'll then have to rewrite the code to explicitly do conversions to known data types, but only after checking the fields for convertible data. For example, you can't convert a DbNull to an Integer.
|
|
|
|
|
OK. Looks like this is a "tip of the iceberg" problem from converting VB6 to VB 2008 .net. I'll get started. Thanks!
|
|
|
|
|
Yeah, I pretty much recommend just scrapping an old VB6 project and rewriting from scratch.
You CAN use the upgrade wizard to convert a project, but no converter does a perfect job and rewrite is inevitable. You just gain the advantange of being able to rewrite modules of the code when possible instead of having to rewrite the entire solution all at once. But, in the end, you'll still be rewriting the whole thing.
|
|
|
|
|
This program IS a wizard-converted VB6. Re-writing modules of code might not help - I would have re-written the code to look just like it does, which doesn't work. Your original point is the key, to set the options to strict data conversions, and re-write the db I/O parts. Thanks again.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
