January, 2004

Julie wrote to me with a problem about where VSTO creates its DLLs and how they get trusted. Hopefully this will help ;-) The other day I blogged about how referenced assemblies are copied around, but there's another piece to the puzzle. If you...

I've blogged a lot about the VSTO security model , and many customers have been frustrated / confused by the tight security policy we use. Why on earth would we not trust code just because it's on the local machine? Well, one of our main scenarios...

Many of you probably know that Sir Ian McKellen played both Gandalf in The Lord of the Rings and Magneto in X-Men . But did you also know he plays Dracula in the Pet Shop Boys ' 1988 music video Heart ? I didn't, at least until I listened to the commentary...

Warning : This entry contains information about editing the registry. Editing the registry could mess up your machine. Also , the changes described here will cause some web sites (and possibly even some local applications) to stop working correctly. That...

OK, a quick one to finish up. When you add a reference to a "private" (non-GACed) assembly to a VSTO project, you'll need to grant it trust if it needs more than basic Execution permission. But where to grant trust? Some background information for...

Warning: this entry has nothing to do with code. As I blogged earlier (I think!) I have a rather nice espresso machine at home. You can pick one up for yourself at Whole Latte Love (that pun makes my dear friend wince :-) ) but it's a bit big...

Earlier today, JArnold wrote a blog entry that looked at an instance-based constructor hack that is similar (in an opposite kind of way) to my earlier post on class constructors . Whilst JArnold's blog is 100% correct, there's an important distinction...

One of the cool things about Word is that it auto-saves your work so that if the machine dies or the app crashes you can get most of it back again. One of the other cool things about Word is that you can customise the built-in dialogs -- such as the Save...

Yesterday I blogged about a bug that you could exploit in JScript .NET, and the other day I made a comment on Eric's blog about compiler-enforced rules versus runtime-enforced rules. Here's a quick story about one such rule that we fixed before the CLR...

Eric has recently done a series on script security, and one of the things he very briefly mentions is how you can use GetObject with a moniker to get an instance of an object. This reminds me of one of the "cool" bugs we found before the first version...

My "old" boss (he hates it when I say that <g>) Andrew Clinick has started blogging . He'll be talking about VSTO 2, scripting, and other stuff. Hopefully he'll adopt dotWord and update it to VSTO 2.0 :-)

The new Bagel Virus takes the cake. ( Update : Also known as Beagle, Bagle, etc.) It comes as an EXE attachment (which would be blocked by all current versions of Outlook and Outlook Express) with the subject "Test" and the message body "Test, yep...

There's an article about VSTO at SD Times . One of the things they point out is that VSTO is the first Microsoft developer product that really enforces a strong security policy , and that this is the way of the future (think Longhorn). The author also...

...you see a drive-through espresso stand and ask yourself "I wonder if they support the 'walk-in' scenario." Seriously! Last autumn (err, "last fall") I also commented to a friend on how pretty all the different "versions" of trees looked...

I received an e-mail from a customer referencing this newsgroup post and asking two questions about virtual methods and inheritance: 1. Why does it work like this? 2. What's the 'security' implication? Funnily enough, I just read...

Ever wanted to move some text around in a Word document, but didn't want to go through the hassles of copy and paste? Just select the text, hit F2 , move the cursor to where you want the text to be, and hit Enter . Using Shift+F2 will copy...

This will hopefully start a mini-series on some thoughts around security. I don't know if they'll be daily, weekly, or neverly, but we'll see. These days, everyone seems focused on preventing attacks on software -- predominantly through the use...

Paul Stubbs and I both work on the Visual Studio Tools for Office team at Microsoft. Other bloggers from VSTO include Eric Lippert and the User Education team, but Paul and I work closely together on the same sub-team, doing stuff I can't really talk...

I just received some (unsolicited) feedback from a customer who wanted me to pass on their great experience with the Microsoft Office Document Scanning tools to the right team. Although it wasn't feedback for the product I work on, it was nice that somebody...

If you've tried out VSTO (and you should :-) ) then you may have noticed that Word has both Document and Template projects whilst Excel has only a Workbook project. If you were thinking that the reason was because Excel was naughty but Word was nice,...

While trying to get a WordML -> HTML conversion that would work reasonably well with .TEXT, I came across an interesting performance bug in the Regex class of .NET. Run the following code and see what happens. It doesn't produce any output; just...