Browse by Tags

• Deployment Phase
• Development Phase
• Implementation
• Performance
• Security
• Sensitive Data
• Test Phase

Avoid Manipulating Passwords In Memory - It Is Easy To Reveal

Revealing clear text passwords in memory seems to be a trivial task. This post describes how to reveal clear text passwords and what countermeasures to apply. Summary of steps: Install WinDbg Attach to process or open dump file Load SOS .Net extensions Read More...

Posted 08 December 07 05:55 by alikl | 3 Comments   
Filed under Test Phase, Security, Sensitive Data, Authentication, Planning Phase

Authentication And Identity Flow When ASP Page Consumes ASP.NET Web Service

"Classic" ASP has application isolation that is different from ASP.NET. Here is one of the real world scenarios where it might matter. There is a legacy web application written in ASP and hosted on Win2K3 box (IIS 6.0). It is of course in the process Read More...

Posted 05 September 07 05:04 by alikl | 4 Comments   
Filed under Security, Deployment Phase, Authentication, Planning Phase

Web Services Over SSL - Is It Really That Slow Like They Say?

My answer is "no" . I am working on solution where there is no Windows Active Directory Domain so we cannot utilize our beloved Kerberos and Windows Integrated Authentication saving big on configuration and management while taking advantage of increased Read More...

Posted 01 August 07 03:35 by alikl | 2 Comments   
Filed under Security, Development Phase, Implementation, Deployment Phase, Performance, Authentication, Planning Phase

Search

This Blog

• Home
• Email