Welcome to MSDN Blogs Sign in | Join | Help

October 2005 - Posts

Special Editions of Visual Studio.NET 2005 and SQL Server 2005 at Canadian Launch Tour

From the Canadian Launch Tour blog feed we have heard several questions regarding the distribution of software at the events. We know that the Developer and IT Pro communities are eager to get access to the final versions of the products and getting the
Posted by dansellers | 0 Comments

Uninstalling Beta 2 or CTP of Visual Studio.NET 2005

Now that Visual Studio.NET 2005 and SQL Server 2005 has been officially released, you will need to properly uninstall previous Beta or CTP version before installing the final released version of Visual Studio.NET 2005. Check out Aaron Stebner's Weblog
Posted by dansellers | 0 Comments

It's Official: Visual Studio.NET and SQL Server 2005

Today, both Visual Studio.NET 2005 and SQL Server 2005 are available for download to MSDN Subscribers . The redistribution package of the .NET Framework 2.0 is publicly available. The long wait is over, and let the new era of development begin!!!!!!
Posted by dansellers | 0 Comments

Microsoft Certifications for .NET 2.0

With the upcoming release of Visual Studio .NET 2005 and the .NET Framework 2.0 it has generated a lot of interest among developers in understanding the new courses, exams and certifications for Visual Studio.NET 2005 developers. Today, the new updates
Posted by dansellers | 0 Comments

Security for IT GUY

The only thing that is constant in today’s society is "Change". How can small business stay current with economic conditions and relevant changes in IT to help keep their business secure? Therefore, Microsoft Canada has released the "Resource for the
Posted by dansellers | 0 Comments

Security Guidelines: ADO.NET 2.0

To compliment the ASP.NET 2.0 Security at a Glance , Microsoft Patterns and Practices team released the Security Guidelines for ADO.NET 2.0 . There is a lot of good information here to provide guidance on the best practices of using ADO.NET 2.0 in a secure
Posted by dansellers | 0 Comments

Podcasting Rookies

This year, I have been putting much more effort into my blogs with a core focus on Security for Developers. Recently, a colleague of mine, John Bristowe and I started to do some podcasting to compliment our blogging efforts. This was our first try at
Posted by dansellers | 0 Comments

Security Process: "The How to" of Threat Modeling and Security Code Reviews

In a previous blog, I mentioned that Security is process and not a product. Part of that process it to conduct a Security Code Review, however, today's Applications are becoming much more complicated, are distributed over numerous Servers and much larger
Posted by dansellers | 0 Comments

Question and Answer Password Security Option: Active Directory Membership Provider

Both the Active Directory and the SQL Server Membership Providers support the “Enable Password Reset” and “Requires Answers and Questions” Security options. This is not very difficult to enable but it does require few steps to get this working. There
Posted by dansellers | 0 Comments

ASP.NET 2.0 Provider Model: Introduction to the Provider Model

Recently the “Introduction to the Provider Model” whitepaper was updated at http://msdn.microsoft.com/asp.net/beta2/providers/default.aspx?pull=/library/en-us/dnaspp/html/aspnetprovmod_intro.asp . This is a must read for all ASP.NET 2.0 Web Developers.
Posted by dansellers | 0 Comments

Security Process: Pattern and Practices Security Engineering

As I have often said there is no Silver bullet in the IT industry and that includes Security. Rather Security is about the process and not just products. Security products are part of the process as well as identity vulnerabilities, security code reviews,
Posted by dansellers | 0 Comments

Security Trimming and Site Navigation Service in ASP.Net 2.0

The new Site Navigation Service and Navigation Controls in ASP.Net 2.0 easily reduces at least a hundred lines of code to create a menu driven Web Application. However, there is one cool feature that is often overlooked with the new Site Navigation Service
Posted by dansellers | 1 Comments

Understanding Security in Microsoft IE 6.0 with Windows XP2

The number of discussions about Web Browser security rise exponentially when new patches are released; causing a lot of concern—rightfully so--and in some cases the initial panic to switch to another Browser. Therefore, to get a better understanding of
Posted by dansellers | 0 Comments

Active Directory Application Mode with Visual Studio.Net 2005 (Part 2 of 2)

When you first setup either the SqlMembership or the ActiveDirectoryMembership Provider with ASP.Net 2.0 and you use the Create User Wizard or the ASP.Net Configuration Web Site to add a new user. However, you will quickly notice that basic passwords
Posted by dansellers | 0 Comments

Active Directory Application Mode with Visual Studio.Net 2005 (Part 1 of 2)

I have worked with Active Directory Application Mode (ADAM) in a development environment on Windows XP for a while now using Visual Studio.Net 2003. Once the Active Application Mode was installed it was really just a matter of configuring SSL connection
Posted by dansellers | 3 Comments

West Coast Security Forum: Identity Management Theme

Last year I spoke at the West Coast Security Forum and awarded the Best Presenter Award. I was happy to be invited back and speak at this West Coast Security Forum, on Threat Modeling: Improving the Application Lifecycle on November 14, 2005 in Vancouver
Posted by dansellers | 0 Comments

Index for Security Guidance for Writing Secure Software

There is no doubt about the quantity of articles, links and Pattern and Practices for Writing Secure Software. However, much of this information was in numerous locations and thus difficult to find or re-find if you forgot to add it to your favorites.
Posted by dansellers | 0 Comments

Security is a Process and not a Product

Over and over I hear developers asking for a product that will secure their code. Unfortunately, there is no product, or at least that I know of, that can analyze a thousand or tens of thousand lines of code, find every possible security vulnerability
Posted by dansellers | 0 Comments

Security Wednesday Launching in November 2005

With the upcoming release of Visual Studio.Net 2005 there has been substantial changes made to the Services and controls in the .Net Framwork 2.0 especially around Security. Therefore, starting November 9th, every Wednesday til November 30th, 2005 I will
Posted by dansellers | 0 Comments
 
Page view tracker