|
security
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
How to convert string to SecureString?I want to pass a string password in System.Diagnostics.Process.Start.
The problem is that the defined password parameter is SecureString not string while my password is string. Normal casting evaluates to errors. Please how to cast string to SecureString? Many Thanks in Advance. Bishoy I don't know if you can. I think you have to append on character at a time
to the secure string. Show quoteHide quote "Bishoy George" <bis***@bishoy.com> wrote in message news:O33fopvxGHA.2396@TK2MSFTNGP03.phx.gbl... >I want to pass a string password in System.Diagnostics.Process.Start. > > The problem is that the defined password parameter is SecureString not > string while my password is string. > > Normal casting evaluates to errors. > > Please how to cast string to SecureString? > > Many Thanks in Advance. > > Bishoy > "Marina Levit [MVP]" <someone@nospam.com> wrote in message My impression is that this is deliberate. You can create a SecureString news:uR%23pFDryGHA.3440@TK2MSFTNGP06.phx.gbl... >I don't know if you can. I think you have to append on character at a time >to the secure string. from a Char * array, or you can add characters into the secure string - you can even manipulate portions of the string to match editing behaviours in a dialog box or at the console. If this is deliberate (and I hope it is), it is to prevent users from putting passwords into a String and then into a SecureString. The raison-d'etre of SecureString is to prevent passwords from remaining unencrypted in memory due to the intermittent nature of garbage collection - and if you put the password into a String, either on the way into a SecureString, or on the way out, that String value is subject to the GC's decision as to when it might be nice to zero out the string and remove it from memory. Alun. ~~~~ [MS MVP, Windows - Security]
Aplying more than 1 attributes ?????
Bad Data. Any idea what this means? Preferred method of hashing salted password Verify syntax of an URl Encrypting connection string in app.config Service runing under Local System account ??? when my C# service impersonates a secondary account does the secondary account need any special perm Domain isolation question. How do I programatically configure IP Security Policies on Active Security check on load ???? |
|||||||||||||||||||||||