title: Is Silverlight Secure?
body: <p>We have a need for an application that runs on an end user's machine and provides us with score results, and we need to results to be accurate (i.e. not tampered with).  Currently, there is a debate between Flash and Silverlight, and it looks like Silverlight is going to be the winner. </p>
  
  <p>Aside from the agurment that anything on an end users machine has to be ultimately considered comprimised, how hard is it to attack a SilverLight application?  I know it depends on how the code is written etc., and my question really is how hard is it to attack the underlying platform.  Are there any articles on how easy it is to do something like bootstrap a silverlight app and alter running code (or some other method)?  I am thinking something like a buffer overflow attack to insert other executable code?</p>
  
  <p>I've also heard that Flash application is pretty difficult to attack the memory and execute arbitrary code.  Is this true?</p>