<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.msdn.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Application Security - each one, teach one - All Comments</title><link>http://blogs.msdn.com/b/secureapps/</link><description>Richard Lewis&amp;#39; application security notes for the software designer, developer and tester</description><dc:language>en-US</dc:language><generator>Telligent Evolution Platform Developer Build (Build: 5.6.50428.7875)</generator><item><title>re: Writing to Registry? Some best-practices...</title><link>http://blogs.msdn.com/b/secureapps/archive/2007/01/30/writing-to-registry-some-best-practices.aspx#10116435</link><pubDate>Mon, 17 Jan 2011 04:29:30 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:10116435</guid><dc:creator>Rodolfo OP</dc:creator><description>&lt;p&gt;I had an UnauthorizedAccessException when starting a WinForms application. I tried to start the application as an administrator but that didn&amp;#39;t worked. I even added a App.manifest with requestedExecutionLevel as requireAdministrator or highestAvailable and when using Microsoft.Win32.Registry.CurrentUser.OpenSubKey( key, writeToKey ) the exception was thrown.&lt;/p&gt;
&lt;p&gt; The program wanted to read a HKLM (HKEY_LOCAL_MACHINE) key. I changed for HKEY_CURRENT_USER and now the aplication runs smotthly.&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=10116435" width="1" height="1"&gt;</description></item><item><title>re: Code signing mini-FAQ</title><link>http://blogs.msdn.com/b/secureapps/archive/2007/01/25/code-signing.aspx#9928140</link><pubDate>Tue, 24 Nov 2009 18:18:47 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:9928140</guid><dc:creator>Bernard Woods</dc:creator><description>&lt;p&gt;This is the best artical I have read on using digtial signitures for sofware publishers- thank you&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=9928140" width="1" height="1"&gt;</description></item><item><title> Application Security each one teach one IIS 6 0 General | pool toys</title><link>http://blogs.msdn.com/b/secureapps/archive/2007/04/13/2108343.aspx#9774888</link><pubDate>Thu, 18 Jun 2009 12:06:01 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:9774888</guid><dc:creator> Application Security each one teach one IIS 6 0 General | pool toys</dc:creator><description>&lt;p&gt;PingBack from &lt;a rel="nofollow" target="_new" href="http://pooltoysite.info/story.php?id=7107"&gt;http://pooltoysite.info/story.php?id=7107&lt;/a&gt;&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=9774888" width="1" height="1"&gt;</description></item><item><title> Application Security each one teach one IIS 6 0 General | Outdoor Ceiling Fans</title><link>http://blogs.msdn.com/b/secureapps/archive/2007/04/13/2108343.aspx#9669666</link><pubDate>Sun, 31 May 2009 17:20:13 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:9669666</guid><dc:creator> Application Security each one teach one IIS 6 0 General | Outdoor Ceiling Fans</dc:creator><description>&lt;p&gt;PingBack from &lt;a rel="nofollow" target="_new" href="http://outdoorceilingfansite.info/story.php?id=1326"&gt;http://outdoorceilingfansite.info/story.php?id=1326&lt;/a&gt;&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=9669666" width="1" height="1"&gt;</description></item><item><title>re: Cryptography Cognizance for Application Designers and Developers</title><link>http://blogs.msdn.com/b/secureapps/archive/2007/01/24/cryptography-cognizance-for-application-designers-and-developers.aspx#8898549</link><pubDate>Wed, 27 Aug 2008 02:44:00 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:8898549</guid><dc:creator>eduardna</dc:creator><description>&lt;p&gt;Hi, I am interested in reading this whitepaper if you have it available!&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=8898549" width="1" height="1"&gt;</description></item><item><title>re: Code signing mini-FAQ</title><link>http://blogs.msdn.com/b/secureapps/archive/2007/01/25/code-signing.aspx#5938135</link><pubDate>Tue, 06 Nov 2007 18:33:49 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:5938135</guid><dc:creator>KT</dc:creator><description>&lt;p&gt;excellent..makes it very clear&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=5938135" width="1" height="1"&gt;</description></item><item><title>re: Writing to Registry? Some best-practices...</title><link>http://blogs.msdn.com/b/secureapps/archive/2007/01/30/writing-to-registry-some-best-practices.aspx#5460014</link><pubDate>Mon, 15 Oct 2007 11:50:26 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:5460014</guid><dc:creator>maltwhiskman</dc:creator><description>&lt;p&gt;Can IE extensions get read only access to HKLM or HKCU?&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=5460014" width="1" height="1"&gt;</description></item><item><title>re: Writing to Registry? Some best-practices...</title><link>http://blogs.msdn.com/b/secureapps/archive/2007/01/30/writing-to-registry-some-best-practices.aspx#4907954</link><pubDate>Fri, 14 Sep 2007 12:11:08 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:4907954</guid><dc:creator>John Irvine</dc:creator><description>&lt;p&gt;Writing to the registry in Vista... prob. The purpose of the HKLM is to store data to all users (Machine specific)? Yes this could be stored in an INI file but I thought the registry was the replacement of INI files. The actual problem is that the Install prog appears to be a user, not administrator. If this is right then, either the program needs administrative rights or you give user rights to the specific hive of a HKLM key say SOFTWARE/.... (No Way..) So the issue is in the install. The registry is a wonderfull way to store user specific and machine specific data, is Microsoft locking it down so only Windows has access?&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=4907954" width="1" height="1"&gt;</description></item><item><title>re: Understanding 'padding' in symmetric key cryptography</title><link>http://blogs.msdn.com/b/secureapps/archive/2007/01/23/understanding-padding-in-symmetric-key-cryptography.aspx#3715760</link><pubDate>Fri, 06 Jul 2007 02:40:38 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:3715760</guid><dc:creator>richardl</dc:creator><description>&lt;p&gt;Not the encryption keys, but the plain text itself.&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=3715760" width="1" height="1"&gt;</description></item><item><title>re: Understanding 'padding' in symmetric key cryptography</title><link>http://blogs.msdn.com/b/secureapps/archive/2007/01/23/understanding-padding-in-symmetric-key-cryptography.aspx#3710684</link><pubDate>Thu, 05 Jul 2007 22:07:33 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:3710684</guid><dc:creator>Sagar</dc:creator><description>&lt;p&gt;Are encryption keys padded at times? If yes, why and where is it used?&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=3710684" width="1" height="1"&gt;</description></item></channel></rss>