This diagram (above) is one which I drew earlier in the week when explaining access control, reliability, trust and environment sanitation. At the time I thought it’s something I ought to blog about, so here is the blog post. I’ve always viewed IT&T systems as a triangle. At the […]
Security
39 posts
We all by now have probably heard about the increase in SQL injection attacks to popular (and unpopular) web sites. A SQL Injection attack is where an external party passes potentially harmful or exploitive data in the form of raw, formatted or encoded T-SQL in a way in which it […]
Here’s an interesting article. Apparently in the .Net 3.5 Service Pack 1 world, strong name verification for .Net assemblies will be bypassed by the Common Language Runtime if the following criteria is met: Fully signed (delay signed assemblies still require a skip verification entry) Fully trusted (without considering its strong […]
Strong naming. Net assemblies isn’t new. Prepping dependency assemblies (specifically, those not in the Global Address Cache) is also non-trivial but necessary. Here’s a quick way to apply strong naming to an existing (non-signed) assembly. From a Visual Studio.NET command prompt, enter the following: 1. To Generate a Strong Name […]
But don’t get your hopes up just yet! It’ll still be a little while until it’s released to a wider community. Partners and OEM manufacturers will get first shot at the Service Pack while end users can easily expect to wait until (Northern Hemisphere) summer time to get their hands […]
Well hello. A little while ago I was surprised when a number of people stared blankly at me when I suggested that they alter their HOSTS file. I’ve been meaning to write up a short entry on what it is and where you find it. I know this will […]
So we came across an old problem today which I couldn’t immediately remember the solution to. As a result, I figured I will blog about it. it’ll make it easier to come back across later when the same problem comes up again! The first time around, I managed to […]
Hi.. I pulled this quote out of a recent post to the ausdotnet mailing list from Rocky H. "You can not drop a file from a Medium Integrity process (Explorer) onto a High integrity process (elevated Notepad). This is actually the problem a lot of developers face with […]
..from Vista Help: What is User Account Control? User Account Control (UAC) is a feature in Windows that can help prevent unauthorized changes to your computer. UAC does this by asking you for permission or an administrator password before performing actions that could potentially affect your computer’s operation or […]