July 2007 - Posts

Man-In-The-Middle-Attack: Protecting Http Traffic With SSL Might Be Not Enough - Consider Protecting SQL Traffic Too

Think configuring SSL for your web site is enough to protect against prying eyes? Here is how the sensitive data can be exposed by sniffing your SQL traffic. Consider common simple 3 tier web architecture for data driven web site. The Web and DB server Read More...

Posted 30 July 07 03:06 by alikl | 1 Comments   
Filed under Security, Implementation, Deployment Phase, Planning Phase

WCF Security In Intranet Scenario : Thoughts On Cons and Pros

I am researching on best practices with WCF security in terms of "YOU SHOUD" vs "YOU CAN". While it is great to have "How to" stuff I am also interested in "Why" angle. I have common simple scenario of WinForms client consuming WCF service inside corp Read More...

Posted 26 July 07 01:54 by alikl | 3 Comments   
Filed under WCF, Security, Implementation, Deployment Phase, Performance

How To Stay Up-To-Date: 15 Minutes, 150 Posts Scanned, 3 Gems Found

I set some time box to scan blogosphere to get updated on what is going on. Here is my technique to do so. My major source for tech stuff is main MSDN feed at http://blogs.msdn.com/ . It is pretty busy feed - I encountered about 150 posts that were posted Read More...

Posted 23 July 07 04:39 by alikl | 1 Comments   
Filed under Practices

Use Sysinternals DebugView To Diagnose The Application

"Unspecified error", "Catastrophic failure", "Object reference not set to an instance of an object" and other "self explanatory" errors promise no easy debugging. Good instrumentation of the application to the rescue! The techniques described in the paper Read More...

Posted 16 July 07 06:42 by alikl | 7 Comments   
Filed under Tools, Development Phase, Implementation, Practices, Auditing and Logging

Ubuntu And Apache Web Server Join My Lab Network

I have my lab network, my playground Active Directory Domain( more on it here - How I Setup Lab Domain Using VPC 2007 ). I have customers who explore on interoperability between .Net applications and Java application that run on Windows/Linux. They seek Read More...

Posted 09 July 07 08:44 by alikl | 1 Comments   
Filed under Development Phase, Deployment Phase, Interop

Typed DataSet - Potential Performance And Security Risk

Are you using Typed DataSet as DTO (data transfer object) ? Are you building distributed systems where the DTO goes back and forth including your Smart Client? If yes then I think you should be aware that the most of your DB schema can be easily revealed Read More...

Posted 06 July 07 09:49 by alikl | 4 Comments   
Filed under Security, Development Phase, Implementation, Performance, Planning Phase

T-Shooting Kerberos

I was delivering "Authentication Explained" session for Security User Group. First off - thanks for attending the session! The session was based on "Authentication Explained" workshop . During the session I was demoing the following topics: Identity Flow Read More...

Posted 04 July 07 10:16 by alikl | 2 Comments   
Filed under Test Phase, Security, Implementation, Deployment Phase, Practices, Authentication

Performance Workshop In Munich MTC Labs - Lessons Learned

How to get a hold of what's going on when getting ownership of the running project? How to achieve results when strictly time- and resource-boxed? How to keep team members focused on objectives and reduce distraction? Here is what I've done: Visualizing Read More...

Posted 01 July 07 07:49 by alikl | 2 Comments   
Filed under Test Phase, Performance, Practices

Search

This Blog

• Home
• Email