Named Pipes Security

11/16/2014 18:32 pintinho12#1
Hello,
I have a doubt about Named Pipes, i am trying to implement this on the source i am building so both, Login and MsgServer can exchange data easily.
The named pipe data can be easily intercepted? I mean, peoples can get what i'm sending and receiving without troubles?
I will setup an username and password to authenticate, so should i encrypt the data?
11/16/2014 19:37 Smallxmac#2
Edit misunderstood the question
11/16/2014 20:27 Best Coder 2014#3
[Only registered and activated users can see links. Click Here To Register...]
11/16/2014 21:55 KraHen#4
Seriously, before using the expression "named pipes" at least do a bit of research on what they are because you clearly have no idea. Named pipes are only for LOCAL process communicaton, not over a network, so the only thing that can intercept it is a virus (most probably a kernel level one) intercepting the Win/Unix/Whatever API calls.

TL;DR version - NO

Please, for your own good, think 5 times before posting a question next time.
11/17/2014 03:56 pintinho12#5
Quote:
Originally Posted by KraHen View Post
Seriously, before using the expression "named pipes" at least do a bit of research on what they are because you clearly have no idea. Named pipes are only for LOCAL process communicaton, not over a network, so the only thing that can intercept it is a virus (most probably a kernel level one) intercepting the Win/Unix/Whatever API calls.

TL;DR version - NO

Please, for your own good, think 5 times before posting a question next time.
Thanks, you helped with your answer.
Quote:
so the only thing that can intercept it is a virus (most probably a kernel level one) intercepting the Win/Unix/Whatever API calls.
Well, i am learning, i just read the thread where i asked for help before and i noticed now the part saying "NamedPipes are only for local network"...
I am not even close to a professional level and i am reading articles and studying, i also missed this
Quote:
Named pipes can be used to provide communication between processes on the same computer or between processes on different computers across a network. If the server service is running, all named pipes are accessible remotely. If you intend to use a named pipe locally only, deny access to NT AUTHORITY\NETWORK or switch to local RPC.
On Microsoft post, and it's working using Hamachi IP, so it's fine, i wouldn't host a server in USA and China to use a Named Pipe. Thanks anyway, i had a doubt, i don't need to think 5x before asking a question, because if i did it, it's because i needed someone to explain it better.
You still on your quest to be a moderator? Because, i don't know, but i think you're doing it wrong.

Quote:
Originally Posted by Best Coder 2014 View Post
[Only registered and activated users can see links. Click Here To Register...]
If you don't have nothing useful to say, don't reply, its simple.
It's a discussion forum, not the general conversation for trolling.
Maybe you're the best coder and the most asshole coder of the forum.
Who's good, doesn't quit trying to pull peoples down
11/17/2014 11:46 KraHen#6
Quote:
i don't need to think 5x before asking a question, because if i did it, it's because i needed someone to explain it better

You still on your quest to be a moderator? Because, i don't know, but i think you're doing it wrong.
I rest my case. I wasn`t trying to offend you, I`m trying to help you. Being a developer is 20% technical skills, 30% motivation and 50% organization, social, business and communication skills. I`m sorry if you misunderstood me. I stand by what I said earlier.
11/17/2014 15:26 Korvacs#7
Named pipes absolutely can be accessed remotely on a Windows network given the relevant security privileges. If this is a concern then you should utilise some form of authentication or encryption.
11/17/2014 15:52 pintinho12#8
Quote:
Originally Posted by KraHen View Post
I rest my case. I wasn`t trying to offend you, I`m trying to help you. Being a developer is 20% technical skills, 30% motivation and 50% organization, social, business and communication skills. I`m sorry if you misunderstood me. I stand by what I said earlier.
Sorry if i misunderstood you then.

Quote:
Originally Posted by Korvacs View Post
Named pipes absolutely can be accessed remotely on a Windows network given the relevant security privileges. If this is a concern then you should utilise some form of authentication or encryption.
Thank you, ^-^