Although cross-site scripting (XSS) attacks get most of the web security press, cross-site request forgery (CSRF) is often much easier for an attacker to exploit.  Fortunately, ASP.Net MVC provides helpers to prevent these attacks.  Steven Sanderson has an excellent post describing CSRF and...

Back in June we released the TFS Migration and Synchronization Toolkit - a toolkit that helps migrate data between 3rd party version control and bug tracking systems and TFS. Turns out that folks also want to migrate data between two TFS servers too, so work was begun on writing a TFS to TFS migration...

The current TFS Power Tools support TFC/VS 2005 only. However, there are beta customers of VS2008 (aka Orcas) who want to use the check-in policies from the TFS Power Tools. With a few manual steps (below) you can get the TFS Power Tool Check-in policies to work with VS2008 and observe how .Net binding...

A frequent question among TFC 2008 beta customers is about check-in policy compatability. Will check-in policies work across TFC 2005 and 2008? The answer is that evaluation works across versions in both directions, but editing the policy definition only works in one direction (TFC 2008 can edit a...

Just released (or should I say, prereleased) tonight on Codeplex, the TFS Migration and Synchronization Toolkit (the toolkit) Prerelease. See here . We've be working on hard on this toolkit to make availalbe the best practices we have learned from migrating and synchronizing millions of files and work...

The Team Foundation Migration Toolkit specification is available for review here (there are links to leave feedback in the doc). The purpose of this toolkit is to help developers write converters from other version control and work item tracking systems to TFS. The toolkit will also helps if you need...

Join members of the Visual Studio Team System product group to discuss features available in Visual Studio Team Foundation Server, Team Editions for Architects, Developers, Database Pros, and Testers. In addition, discuss what's new in the latest Community Technology Preview (CTP). Join the chat on Wednesday...

The first in a series of Channel 9 videos covering various topics of Team Foundation Server is available here . In this first video, Doug Neumann whiteboards branching and merging strategies.

You can get it here . Overview The Visual Studio Team Foundation Server MSSCCI Provider enables integrated use of Team Foundation Version Control with products that do not support Team Explorer integration. This version (1.2) includes: Enable handling branched solutions in Visual Studio 2003. Fixed issues...

Brian Keller will be interviewing members of the Team Foundation Server Team on December 14th and 15th (Wednesday and Thursday this week) for Channel 9 . Submit questions for the interview here before December 13th. This is your chance to find out something about Team Foundation Server, but were afraid...

Last week I wrote about the value of out of band development and an upcoming release of powertoys for Team Foundation Server. Late Thursday night the Team Foundation Powertoys were released. You can get them here . There is a new forum dedicated to the Powertoys available here . I am a little late blogging...

Come and join members from the Visual Studio Team System product group to discuss features available in Visual Studio Architect, Developer and Tester editions and Team Foundation Server. There will be experts on hand to answer your questions. I hope to see you there! Join the chat on Wednesday September...

The Team Foundation Server MSSCCI Provider (TFS MSSCCI) available now!. You can download it here (If you tried to get this on 4/7/2006 and it errored out, please try again). TFS MSSCCI allows applications and development environments that serve as MSSCCI hosts to access Team Foundation Server Source...

Moving from one software application to another often results in various "surprises" where the new application does not behave the same way as the previous one. Over the course of the Team Foundation beta program I have observed a number of these "surprises" that beta customers experienced who were SourceSafe...