Technology :: Information Security :: Anil Chintala's Blog

Microsoft Releases BizTalk ESB Toolkit 2.0

anilchintala — Thu, 18 Jun 2009 19:37:39 GMT

Microsoft recently launched BizTalk Server 2009 and today Microsoft announced BizTalk ESB Toolkit. The BizTalk ESB Toolkit 2.0 is a collection of tools and libraries that extend BizTalk Server 2009 capabilities of supporting a loosely coupled and dynamic messaging architecture.

Go here to know more...

CannonPI - Teaser Video

anilchintala — Thu, 07 May 2009 21:07:16 GMT

A teaser video on the Microsoft Web Platform, the Web Platform Installer, and the Windows Web Application Gallery...

Stay tuned for more in episode #1, coming out soon!

Systems Thinking...

anilchintala — Mon, 05 Jan 2009 00:44:48 GMT

I have been pondering about the numerous brainstorming sessions and discussions we were having recently in our team. In fact, there was a moment in our discussion when someone even told me how I was using the word "System" loosely in our conversation when referring to applications, set of services and sometimes clients too. You don't realize how often we use terms ambiguously in our technical jargon...

I got curious and spent some time looking into books & articles on Software Development and Systems design in general.... and found these 3 short YouTube videos of Russell Ackoff, one of the great systems thinkers.

Go here: http://ackoffcenter.blogs.com/ackoff_center_weblog/2008/12/russell-ackoff.html

The sound quality isn't great, but they're short and really worth it.

Until next time...

Cheers!

Anti-XSS 3.0 Beta and CAT.NET CTP - Released for Free

anilchintala — Sun, 04 Jan 2009 15:53:48 GMT

We have released Anti-XSS 3.0 library with SRE (Security Run-Time Engine) on CodePlex and CAT.NET a free static analysis tool for .NET Check out the following link to download the tools from CodePlex and MSDN download site.

http://blogs.msdn.com/cisg/archive/2008/12/15/anti-xss-3-0-beta-and-cat-net-community-technology-preview-now-live.aspx

Thanks!
Anil

Have a Safe 2009!

anilchintala — Sun, 04 Jan 2009 15:45:36 GMT

I hope you all had wonderful time during holidays and looking forward for a great new year ahead. I wish you all a great and safe new year.

It was quite busy towards the end of last year and holidays gave a good break, spend some time with family, re-group and refresh to start the new year on a high.

I look forward to learn more, do more and share more this year. To start with, I will follow up with posts on couple of security tools we released towards the end of last year.

Happy secure coding!

"Turn on BitLocker" - makes unallocated drive space disappear!

anilchintala — Wed, 17 Sep 2008 08:44:35 GMT

I finally setup my computer for BitLocker™ Encryption today and I was surprised to see that volume was full as soon as I hit "Turn on BitLocker", I had roughly 6GB of free space left and rest all was gone!

Don't worry, No need to hit panic button!
It seems this is how BitLocker™ solves the problem of determining whether to encrypt or wipe the unallocated chunks from your hard disk by creating a huge wipe file. More details on this can be found on BitLocker™ Drive Encryption Team Blog.

How can you get this unallocated space back?
When encryption of the volume is paused or completed, the wipe file is deleted and the amount of available free space reverts to normal.

AntiXSS Library - looks for "good things" and not "bad things"

anilchintala — Thu, 28 Aug 2008 22:13:05 GMT

As promised, I am back sooner than you expected! and I know you are one of the two people who visit my blog right now (Hi Friend!), but I hope to make your visit worthwhile sooner.

I just posted a blog on Output Ending - How to fix XSS Vulnerabilities in your ASP.NET applications. Article demonstrates why Microsoft AntiXSS library provides superior protection when compared against the classic HtmlEncode and UrlEncode utilities.

If you don't know what is XSS and if you develop web applications, this is where you can start - Cross Site Scripting (XSS) vulnerabilities and here - Cross Site Scripting - OWASP

If you don't know what is Microsoft AntiXSS Library, check out this post - What is the Microsoft Anti-XSS Library?

You can also visit our CISG team site to know more about the next generation of Microsoft AntiXSS Library.

that's it for now...

Welcome... Finally!

anilchintala — Tue, 26 Aug 2008 22:37:49 GMT

I can't believe I have waited this long... After waffling and thinking about it for quite some time now, I've finally started my blog to join the blogging community!

A little about me… My Name is Anil Chintala, I joined Microsoft earlier this year and currently working for the Connected Information Security Group or CISG. I am involved in building security tools for information security group in Microsoft.

I am looking forward to blog frequently and highlight what I'm doing, tips and tricks, technical content with samples and provide links to resources related to software engineering, secure development, information security, security tools and technology.

Anyway, consider this as my blog number one...