February, 2004

As reported in the VSTO Newsgroup (can't...find...link) and on Julie's blog , if you try and access ThisApplication.Templates.Count from VSTO, you end up with only one (Normal.dot) instead of the n (where n > 1) entries you were expecting. I...

Laugh-a-minute Andrew Whitechapel has started a blog at http://blogs.officezealot.com/whitechapel/ Andrew (like the other Andrew ) hails from the UK, and even though he likes the Pet Shop Boys he promises to try very hard not to mention them....

As if you weren't already paranoid enough about ZIP files... The recent MyDoom virus required you to open a ZIP and then execute one of the files inside the attachment. But a new vulnerability announced by iDEFENSE allows arbitrary code execution...

A new blog for the VSTO 2.0 product has been started at http://weblogs.asp.net/vsto2 I was too busy working this weekend to blog, but I have some things in the pipe. Maybe I'll get around to doing them this week. In the words of Ahnold, I need a...

In unrelated news, we were joking about silly words at dinner. One of our developers said he hated the word "performant" and that Microsoft was the only place where you would hear it (clearly he is mistaken ). Of course I said I didn't like "so" and ...

Dana has another great blog about auditing code in open and closed environments. Along with the "many eyes" fallacy used for open source development, I'd also like to see someone with more time on their hands than me tackle the equally fallacious...

So today is "Let's-Make-All-The-Single-People-Feel-Bad-About-Themselves Day," but I'm not about to get upset over a simple chemical imbalance (courtesy of Slashdot ). An interesting thought: People get upset about violence in film and how it supposedly...

A few weeks ago I posted a blog entry about a security problem we found with JScript .NET's GetObject method before the initial release of the CLR. Talking about the problem in full would take a while, and I want to get through a few blogs today, so some...

Just a quick post to say that I do intend to follow up on the GetObject post and the Five Phases of Security series . I also have about a half-dozen other blogs I want to write... maybe some of that will happen this weekend, but next week will be pretty...

Reading Bugtraq today I saw this message about a "vulnerability" in Windows. Apparently -- get this -- if someone has the ability to install arbitrary system software on your computer, they can replace the SLL library used by IE and log all your internet...

If you've been using .NET (or any previous exception-based languages like JScript or C++) for a while then you are probably used to doing something like this: try { someObject . MethodThatMightFail () ...

A comment on Mike Howard's blog exhibits a common problem that I see time and time again: developers are creating instances of Word.ApplicationClass or Excel.ApplicationClass in their projects. Even though it's the wrong thing to do, I don't blame...

It's time to go to Windows Update to get the latest IE updates, including the %01 bug address bar bug. In other news, Dana has a blog entry about the WSH security settings . Jeroen has an interesting blog about building a JVM on .NET . The X5...