TheSwamp
Code Red => .NET => Topic started by: WILL HATCH on May 24, 2013, 12:40:05 PM
-
I think I'm reaching pretty hard here for something that doesn't exist, but before I get too deep into it does anybody know if we can embed some code to implement custom behavior on our objects that will be persistent even after the drawing is shipped to someone who doesn't have the application?? I know we can go as far as storing the code in an xrecord but don't see any mechanism for invoking.
-
Hi,
You can embed code in a VBA macro, but the opening AutoCAD need to have the VBA enabler without security settings (enabled macros), even so I'm not sure if VBA support some event that trigger on open or some other database action.
IMO there is no way to ensure that a "custom behaviour" will behave without user interaction.
Gaston Nunez
-
I am not the one who knows, but if such a thing exists (to modify standard behavior of objects without questions), it should be disabled by autodesk immediately.
Security alone is a problem, but also - it would create too mouch of a user confusion if objects start to act unfamiliar to them.
-
I am not the one who knows, but if such a thing exists (to modify standard behavior of objects without questions), it should be disabled by autodesk immediately.
Security alone is a problem, but also - it would create too mouch of a user confusion if objects start to act unfamiliar to them.
This.
Custom Objects, embedding data in NOD/XRecord is one thing, but to be capable of embedding executable code in a Drawing that someone _not_ part of your internal, or contract-required user group (parties that are aware of this custom functionality), should not be allowed, if it does.
Anyone could open a drawing, and be exposed to (malicious?) .NET level APIs... Hackers would love something like this... And I thought it was bad enough with Acad.lsp virus/worms using ActiveX. :ugly:
-
I think I'm reaching pretty hard here for something that doesn't exist, but before I get too deep into it does anybody know if we can embed some code to implement custom behavior on our objects that will be persistent even after the drawing is shipped to someone who doesn't have the application?? I know we can go as far as storing the code in an xrecord but don't see any mechanism for invoking.
Absolutely not. That would the ultimate security hole.
-
Lol I didn't even think of it in terms of security... Thanks