Click here to Skip to main content
15,916,293 members
Home / Discussions / .NET (Core and Framework)
   

.NET (Core and Framework)

 
AnswerRe: What minimal self-hosted server options use TcpListener and not HttpListener (to dodge urlacl)? Pin
DT Bullock15-Sep-20 15:04
DT Bullock15-Sep-20 15:04 
GeneralRe: What minimal self-hosted server options use TcpListener and not HttpListener (to dodge urlacl)? Pin
DT Bullock15-Sep-20 15:35
DT Bullock15-Sep-20 15:35 
QuestionWord search Pin
Emmery Chrisco15-Sep-20 11:31
Emmery Chrisco15-Sep-20 11:31 
AnswerRe: Word search Pin
Mycroft Holmes15-Sep-20 12:29
professionalMycroft Holmes15-Sep-20 12:29 
RantOAuth 2.0 when a .NET desktop app is the 'client' Pin
DT Bullock15-Sep-20 4:42
DT Bullock15-Sep-20 4:42 
QuestionHow can a .NET Framework desktop-application gain temporary elevated privileges? Pin
DT Bullock14-Sep-20 20:00
DT Bullock14-Sep-20 20:00 
AnswerRe: How can a .NET Framework desktop-application gain temporary elevated privileges? Pin
Richard Deeming14-Sep-20 21:33
mveRichard Deeming14-Sep-20 21:33 
GeneralRe: How can a .NET Framework desktop-application gain temporary elevated privileges? Pin
DT Bullock15-Sep-20 2:47
DT Bullock15-Sep-20 2:47 
Richard Deeming wrote:
I'm not sure whether you'll be able to use IPC from the unelevated app to the elevated app.


Thanks Richard. For IPC, I hope I can use anonymous named pipes between the processes, per Microsoft's own How to Use Anonymous Pipes for Local Interprocess Communication. I imagine the privileged-child will be able to connect to the pipe created by the unprivileged-parent without issue if it has the token.

To pass the result of (new AnonymousPipeServerStream(/*etc*/)).GetClientHandleAsString() to the privileged-child, I will pass it as a command-line argument.

I suppose a malicious application could create its own named-pipe, invoke MY privileged-child app to fool the user into approving the UAC prompt (abusing my good name) and then control the privileged-child process from their malicious app. Fortunately I only really need the pipe for signalling the privileged-child to stop ... not to direct the action of the privileged-child.

Since I'll be working with ProcessStartInfo anyhow, adding a 'runas' verb is 'within easy reach'.

It then becomes a question of whether anything is gained by going declarative. Yes, if I needed the 'verb' for a different purpose, I guess. Or if I wanted the privileged-child code to be useful to an audience wider than my app. No, if I am happy for my privileged-child to fail unless properly invoked by MY code (heck, I could even take steps to make it a lot harder for said malicious actor!), or if I don't wish to draw the attention of malicious parties by marking it 'hey, I run as admin!'.
GeneralRe: How can a .NET Framework desktop-application gain temporary elevated privileges? Pin
DT Bullock15-Sep-20 2:50
DT Bullock15-Sep-20 2:50 
QuestionI want to rename a table by using EF 6 Code First approach Pin
simpledeveloper11-Sep-20 8:41
simpledeveloper11-Sep-20 8:41 
AnswerRe: I want to rename a table by using EF 6 Code First approach Pin
Dave Kreskowiak11-Sep-20 8:57
mveDave Kreskowiak11-Sep-20 8:57 
AnswerRe: I want to rename a table by using EF 6 Code First approach Pin
Gerry Schmitz11-Sep-20 9:17
mveGerry Schmitz11-Sep-20 9:17 
GeneralRe: I want to rename a table by using EF 6 Code First approach Pin
simpledeveloper11-Sep-20 9:26
simpledeveloper11-Sep-20 9:26 
QuestionMessage Closed Pin
4-Sep-20 21:14
Bdown “FukthaPolice” Tigs4-Sep-20 21:14 
AnswerRe: Lenovo yoga 2 Pin
OriginalGriff4-Sep-20 21:38
mveOriginalGriff4-Sep-20 21:38 
GeneralRe: Lenovo yoga 2 Pin
Richard Andrew x647-Sep-20 4:08
professionalRichard Andrew x647-Sep-20 4:08 
AnswerRe: Lenovo yoga 2 Pin
Dave Kreskowiak5-Sep-20 5:41
mveDave Kreskowiak5-Sep-20 5:41 
QuestionDisplay temporary data in datagridview Pin
hiruthere1-Sep-20 0:36
hiruthere1-Sep-20 0:36 
AnswerRe: Display temporary data in datagridview Pin
Richard MacCutchan1-Sep-20 2:18
mveRichard MacCutchan1-Sep-20 2:18 
QuestionImplementation of Identity 4 in .net core 3.1 for SSO for multiple projects Pin
Ravikumar Patra14-Aug-20 2:41
professionalRavikumar Patra14-Aug-20 2:41 
AnswerRe: Implementation of Identity 4 in .net core 3.1 for SSO for multiple projects Pin
Dave Kreskowiak14-Aug-20 4:09
mveDave Kreskowiak14-Aug-20 4:09 
AnswerRe: Implementation of Identity 4 in .net core 3.1 for SSO for multiple projects Pin
Gerry Schmitz14-Aug-20 4:56
mveGerry Schmitz14-Aug-20 4:56 
QuestionDatabase for desktop application Pin
hiruthere12-Aug-20 23:34
hiruthere12-Aug-20 23:34 
AnswerRe: Database for desktop application Pin
F-ES Sitecore13-Aug-20 1:40
professionalF-ES Sitecore13-Aug-20 1:40 
AnswerRe: Database for desktop application Pin
Mycroft Holmes13-Aug-20 13:35
professionalMycroft Holmes13-Aug-20 13:35 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.