• Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

system audit

 
kevin_quinn
Greenhorn
Posts: 1
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Is it possible to audit a computer from a web site using Java. Basically are there methods that can be used to obtain OEM, hardware info, memory spects, etc...
 
Rob Ross
Bartender
Posts: 2205
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Remember that a java program runs in a virtual machine; you're somewhat limited in terms of asking questions about hardware-specific issues.
You can try to write native methods (in C for example) that will querry the hardware for these types of things, but you immediately have two problems:
1) Native code is not portable, so running it from a web browser wouldn't make sense - what if you have compiled your native method using x86 assembly, and a Mac user then tries to run your native method? Can you say CRASH? that's not very good is it?
2) I am not an expert in applet security, but I would strongly doubt that the sandbox model will let an applet run native code without some kind of special permission set up, in part to avoid the issue in #1 above, but also because then the sandbox has no way of verifying that the code is not malicious, like a virus for example. This is the problem with ActiveX components - once the user downloads them, they can bascially do anything to your hardware, including reformatting your hard drive. These kind of issues are only possible in Java if the user grants the applet explicit permision to do them.
[ July 01, 2002: Message edited by: Rob Ross ]
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic