Hi Peter,

>Are you guys writing an alternative Hackers Guide here? Please, be aware of the possible impact.

When I published something security relevant for the first time (the VCX extraction issue), I thought for several days whether I should publish it or not. I decided to publish the article, because not doing so would mean that I came up with something so brilliant that nobody else in the world will ever come up with it. To me this was highly unlikely! Someone determined to attack an application would sooner or later discover the same trick that I did, giving that I got the idea from a Microsoft KB article. Maybe they already did so, after all, there are some brilliant people out there outside Europe and North America.

Not publishing details would only protect the hacker, since their victims (that is, we VFP developers) are not aware of potential problems. At that time (August 2001), security wasn't a big issue among VFP developers. Victor just started making us realize that ReFox isn't unbreakable, encryption reached a broader scale, and we all complained about the security patches from Microsoft. But security in VFP applications wasn't a big issue, at least in my experience.