Results 1 to 9 of 9

Thread: Ethics 101

  1. Apr 7th, 2004, 02:47 AM #1
    wossname
    wossname is offline

    Thread Starter
    type Woss is new Grumpy; wossname's Avatar
    Join Date
    Aug 2002
    Location
    #!/bin/bash
    Posts
    5,682

    Ethics 101

    Would you regard it as OK to build a back door into your own programs?

    Say its a prog that requires users to have passwords and that holds personnel records. Assuming the developer's intentions are good and they would not use the back door for the powers of evil, is it acceptable practice? Such a back door would only be used in emergencies where everyone has lost their passwords or the system is collapsing, it may for example dump the entire DB contents to an unencrypted file. Is this even legal?

    What do you think?
    I don't live here any more.
    Reply With Quote Reply With Quote
  2. Apr 7th, 2004, 02:55 AM #2
    Nightwalker83
    Nightwalker83 is offline
    PowerPoster Nightwalker83's Avatar
    Join Date
    Dec 2001
    Location
    Adelaide, Australia
    Posts
    13,344

    Re: Ethics 101

    Originally posted by wossname
    Would you regard it as OK to build a back door into your own programs?

    Say its a prog that requires users to have passwords and that holds personnel records. Assuming the developer's intentions are good and they would not use the back door for the powers of evil, is it acceptable practice? Such a back door would only be used in emergencies where everyone has lost their passwords or the system is collapsing, it may for example dump the entire DB contents to an unencrypted file. Is this even legal?

    What do you think?
    Yes because if the user stuffs things up the programmer needs another way get into the program to fix the error.
    when you quote a post could you please do it via the "Reply With Quote" button or if it multiple post click the "''+" button then "Reply With Quote" button.
    If this thread is finished with please mark it "Resolved" by selecting "Mark thread resolved" from the "Thread tools" drop-down menu.
    https://get.cryptobrowser.site/30/4111672
    Reply With Quote Reply With Quote
  3. Apr 7th, 2004, 03:02 AM #3
    DeadEyes
    DeadEyes is offline
    Frenzied Member DeadEyes's Avatar
    Join Date
    Jul 2002
    Posts
    1,196
    What happens if you don't tell someone in the company about this backdoor and they find it? Your reputation will be ruined.
    Reply With Quote Reply With Quote
  4. Apr 7th, 2004, 04:11 AM #4
    si_the_geek
    si_the_geek is offline
    Super Moderator si_the_geek's Avatar
    Join Date
    Jul 2002
    Location
    Bristol, UK
    Posts
    41,974

    Re: Ethics 101

    Originally posted by wossname
    Would you regard it as OK to build a back door into your own programs?
    No. Unless you have sold the rights to the clients/users, you should have the source code, and administrator access to the database(s). If you have sold the full rights to the software then the user/client will ask for your help if they want/need it.

    There should be no need for any underhand methods of accessing the data.


    Say its a prog that requires users to have passwords and that holds personnel records. ... it may for example dump the entire DB contents to an unencrypted file. Is this even legal?
    I'm not sure. It would depend on the data I guess, but personnel data is one of the more sensitive issues, and this may well break Data Protection laws in some countries.
    (Microsoft MVP from July 2007 to June 2017) . . . . . . . . . . Hitchhiker's Guide to Getting Help at VBForums

    Database Development FAQs/Tutorials (updated May 2011) (includes fixing common DB related errors, and [VB.Net] ADO.Net Tutorial, and [Classic VB] ADO tutorial /further steps)
    other useful DB bits: . Connection strings (alternative copy).•. MDAC/Jet/ACE downloads .•. SQL Server downloads .

    Classic VB FAQs (updated Oct 2010) (includes fixing common VB errors)
    some of my Classic VB bits: . Tutorial: How to automate Excel from VB6 (or VB5/VBA) .•. SQL 'Select' statement formatter/checker .•. Convert colour number to colour name .•. FlexGrid: fill from recordset .•. FlexGrid: AutoSize columns .•. DB Reserved Words checker .
    Reply With Quote Reply With Quote
  6. Apr 7th, 2004, 05:16 AM #5
    wossname
    wossname is offline

    Thread Starter
    type Woss is new Grumpy; wossname's Avatar
    Join Date
    Aug 2002
    Location
    #!/bin/bash
    Posts
    5,682
    OK, to revise the situation...

    I write the DB app and notify the users / owners that there is a contingency measure built in to cover emergencies, but I don't tell them how to use it (for security, or maybe just one person). It would be written in such a way that it would be tough to crack from the binaries alone.
    I don't live here any more.
    Reply With Quote Reply With Quote
  7. Apr 7th, 2004, 05:21 AM #6
    si_the_geek
    si_the_geek is offline
    Super Moderator si_the_geek's Avatar
    Join Date
    Jul 2002
    Location
    Bristol, UK
    Posts
    41,974
    Why is there any potential need for a back door?

    Surely everything you could do with it can be done with the DBMS or the source code.

    I just see it as causing yourself extra problems - obviously security issues, and the increased risk of bugs (as it will rarely, if ever, be used).
    (Microsoft MVP from July 2007 to June 2017) . . . . . . . . . . Hitchhiker's Guide to Getting Help at VBForums

    Database Development FAQs/Tutorials (updated May 2011) (includes fixing common DB related errors, and [VB.Net] ADO.Net Tutorial, and [Classic VB] ADO tutorial /further steps)
    other useful DB bits: . Connection strings (alternative copy).•. MDAC/Jet/ACE downloads .•. SQL Server downloads .

    Classic VB FAQs (updated Oct 2010) (includes fixing common VB errors)
    some of my Classic VB bits: . Tutorial: How to automate Excel from VB6 (or VB5/VBA) .•. SQL 'Select' statement formatter/checker .•. Convert colour number to colour name .•. FlexGrid: fill from recordset .•. FlexGrid: AutoSize columns .•. DB Reserved Words checker .
    Reply With Quote Reply With Quote
  8. Apr 7th, 2004, 05:27 AM #7
    wossname
    wossname is offline

    Thread Starter
    type Woss is new Grumpy; wossname's Avatar
    Join Date
    Aug 2002
    Location
    #!/bin/bash
    Posts
    5,682
    This was really a hypothetical question. Anyway I like the idea of writing a backdoor just curious as to the implications.
    I don't live here any more.
    Reply With Quote Reply With Quote
  9. Apr 7th, 2004, 05:29 AM #8
    Nightwalker83
    Nightwalker83 is offline
    PowerPoster Nightwalker83's Avatar
    Join Date
    Dec 2001
    Location
    Adelaide, Australia
    Posts
    13,344
    Originally posted by DeadEyes
    What happens if you don't tell someone in the company about this backdoor and they find it? Your reputation will be ruined.
    Of course you would need to tell your co-workers about the back door first.
    when you quote a post could you please do it via the "Reply With Quote" button or if it multiple post click the "''+" button then "Reply With Quote" button.
    If this thread is finished with please mark it "Resolved" by selecting "Mark thread resolved" from the "Thread tools" drop-down menu.
    https://get.cryptobrowser.site/30/4111672
    Reply With Quote Reply With Quote
  11. Apr 7th, 2004, 06:58 AM #9
    yrwyddfa
    yrwyddfa is offline
    Frenzied Member yrwyddfa's Avatar
    Join Date
    Aug 2001
    Location
    England
    Posts
    1,253
    Would you regard it as OK to build a back door into your own programs?
    I call it remote support
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules


Click Here to Expand Forum to Full Width