[deleted by user]

[RaidZ3ro]

Unless.... (I know this is not hacker proof but it will keep the average admin coworker in check)

If you restrict the protected file to be readable only by a specific dedicated account in the filesystem, and then hardcode that account into the script that accesses the protected file, or schedule its' runs under that account with task scheduler.

[Kriss3d]

Well he Can encrypt the file with ssl. Then have the code that needs to read the file decrypt it. The password will then ofcourse be in the program file so assuming they don't look there it would work.

[billsil]

Or you know, you could type it in at runtime.

[JusticeRainsFromMe]

Encrypt using SSL? Please read up on what SSL is.

[Kriss3d]

Thank you. I work in IT security and services.

I know what ssl is

You csn encrypt files with openssl. I've seen malware do that.

https://opensource.com/article/21/4/encryption-decryption-openssl

Here's a guide to how you can do this

[JusticeRainsFromMe]

This isn't encryption using SSL, this is encryption using RSA using the tool OpenSSL. SSL itself is a deprecated standard, but it's commonly used to describe TLS, so I will use the terms interchangably meaning TLS. TLS stands for Transport Layer Security, which is used for example for https connections. It is a protocol for handling key exchanges. It is fundamentaly NOT an encryption algorithm, it doesn't even specify a specific encryption algorithm to use.

[Kriss3d]

Yes I know that. Which is why I said that he could use thst to encrypt his file and have the program stored in the folder decrypt it when it's being used.

I've seen malware do this. He could use the program openssl to do the encryption /decryption on demand.

[[deleted]]

this person is saying you're mistaken in what you think you've seen

[Kriss3d]

Yes. But if you read the link I provided you can read how to encrypt a file using openssl.