[gmpi] Re: 3.18 Copy Protection

On Tue, Sep 21, 2004 at 09:46:50 +0100, Steve Harris wrote:
> > 2 - Hosts and plugins can do some sort of handshake, like public key
> > crypto.  One party sends a challenge which bothe encrypt and compare. But
> > then every plugin needs to have a list of keys of valid hosts.  BAAAAAD.
> 
> In the case Ron described its OK - the plugin is only supposed to work
> with one host - though I dont like that idea very much - I guess they
> could be kept in a "foo only" direcotry so they dont get scanned by other
> hosts.
>  
> > Isn't it simpler to leave locking out of band?
> 
> Not entirely, you have to have some API hook so that it can take place.

Actually you dont - at least under linux the plugin can ask the OS for the
executable file that corresponds to the app its being loaded into, then
checksum that file to see that it agrees with the host the plugin thinks
it should be loaded into.

That can be done with no support from the GMPI API, and cant easily be
faked by modifying the host, or including a host wrapper.

- Steve

----------------------------------------------------------------------
Generalized Music Plugin Interface (GMPI) public discussion list
Participation in this list is contingent upon your abiding by the
following rules:  Please stay on topic.  You are responsible for your own
words.  Please respect your fellow subscribers.  Please do not
redistribute anyone else's words without their permission.

Archive: http://www.freelists.org/archives/gmpi
Email gmpi-request@xxxxxxxxxxxxx w/ subject "unsubscribe" to unsubscribe

Other related posts: