|
|
|
|
|
|
|
July 2004 - Security Briefs
-
The book-in-a-wiki project is almost complete. All 75 items have been doled out to various people. To those who sent me mail volunteering to help, thank you so much - this new format will be much more amenable to change. Be sure to subscribe to the RSS...
-
I'm taking the final version of my book, The .NET Developer's Guide To Security , and putting it in a Wiki for its final online resting place, and I can use your help over the next month getting the latest version ported from Word/PDF into WikiText. It...
-
I spent the day today doing some research for a client who needs to survive the transition to Windows XP Service Pack 2. They currently have a solution that requires anonymous callbacks to Windows XP clients. The picture isn't looking very pretty at the...
-
<rant> I am so incredibly sick of this bug in VPC that causes my keyboard to stop working in ALL virtual machines that are open. I have to shut down all virtual machines (and also remember to open up the VPC manager window and shut down VPC itself...
-
Søren points out that delegating client credentials to SQL Server breaks connection pooling. Yes, you'll get much less use from pooled connections using this technique than if you simply used a fixed identity to communicate with SQL Server, because...
-
Say you're building the typical three-tier system and you want to use integrated security all the way through, from Internet Explorer through IIS back to SQL Server. And you'd like to have IIS use the client's credentials to talk to SQL Server, so you...
-
Last night Kathy and I went and saw one of Cirque 's latest shows, Varekai . I am always amazed at how these shows manage to be so incredibly enveloping - seeing something like this on TV just wouldn't be the same. The performers have such unique skills...
-
Aaron mentioned a gripe I have with UserNameToken. The approach recommended by the UserNameToken profile , namely the one-time hash that is designed to counter replay attacks, Password_Digest = Base64 ( SHA-1 ( nonce + created + password ) ) requires...
|
|
|
|
|
|