Eugene Siu's Thoughts on Security

Share my latest security research and techniques

Browse by Tags

Tagged Content List
  • Blog Post: Troubleshooting Networking and IPSec Issues

    I had a very strange networking issue last weekend. After connecting to corpnet via VPN and direct hookup, I was able to ping all remote servers, but was not able to do anything, such as web browsing and remote desktop. It was not the first time that I faced this issue, and helpdesk told me that IPSec...
  • Blog Post: More eyeballs for .Net Framework code

    Microsoft will open up source code of .Net Framework to the public. It allows outsiders to review what is under the hood, and enables easier debugging of development projects around .Net Framework. .Net Framework code has been reviewed heavily, and developers can pick up coding best practices by reviewing...
  • Blog Post: Just learned how to cross-post via MetaWeblog API

    I work for ACE team, and want to cross-post from http://blogs.msdn.com/esiu to http://blogs.msdn.com/ace_team . Community Server supports MetaWeblog API, but I am not able to figure out how to configure cross-posting. After a few tries, I am able to cross-post now. Community Server asks for several things...
  • Blog Post: IE Developer Toolbar helps me hack

    I was browsing IE blog articles to get research ideas. I came across IE Developer Toolbar , and decided to play with it. I was checking out different options, and it impressed me as a good web client developer tool, as it offers a breakdown of HTML elements, such as image dimension and structure validation...
  • Blog Post: Running as non-admin is not as hard as I imagine

    As a security tester, we need to ensure that our product works under minimal privilege. Yes, test machines are set up to test with minimal privilege, but my day-to-day email machine is set up with admin privilege. Although it is a threat to run under admin, it was more threatening to inflict myself with...
  • Blog Post: Do you have an easy way to find out what error codes mean?

    You should check out err.exe available from http://www.microsoft.com/downloads/details.aspx?familyid=be596899-7bb8-4208-b7fc-09e02a13696c . Don't be tricked by the name (Exchange Server Error Code Look-up) because it supports error codes other than Microsoft Exchange. It is very easy to easy, and supports...
Page 1 of 1 (6 items)