Welcome to MSDN Blogs Sign in | Join | Help

Eric Jarvi

the bug stops here

Browse by Tags

All Tags » development » security   (RSS)
security & perf videos
J.D. Meier has posted a decent index of videos covering performance testing, ASP.NET 2.0, and VSTS: http://blogs.msdn.com/jmeier/archive/2007/11/22/videos-security-performance-testing-and-visual-studio-team-system.aspx Read More...
Patterns & Practices Security Videos
"Click Here" http://blogs.msdn.com/jmeier/archive/2007/03/24/patterns-practices-security-videos.aspx Read More...
Michael Howard on the Silver Bullet Security Podcast
Here's the link... http://www.cigital.com/silverbullet/show-006/ Read More...
CERT Secure Coding Standards
"This web site exists to support the development of secure coding standards for commonly used programming languages such as C and C++. " https://www.securecoding.cert.org/confluence/display/seccode/CERT+Secure+Coding+Standards Read More...
port 25 is open on port 80
Here's an interesting blog to watch courtesy the Open Source Software Lab @ Microsoft - http://port25.technet.com/ (for RSS - http://port25.technet.com/rss.aspx ) Read More...
leastprivilege.com
Thank to .NET Delirium for pointing out this site: http://blogs.msdn.com/gduthie/archive/2005/09/01/459576.aspx Read More...
static code analysis in the news
I remember a few years ago at a software quality conference in Portland telling people in the hallway after talks about these cool static code analysis tools we had, but then having to admit they were just internal. Fast forward to today, the news is Read More...
security kaizen
Some starting points for sharpening the security saw: Threat Modeling (MSDN) http://Channel9.Msdn.Com/Security (MSDN/Channel9/PAG security wiki) Read More...
thoughts on the future of dynamic code analysis
This really belongs in the comments field of my last blog post, but it turned out I had more thoughts to vent and this would make a monster of a comment, so here goes: What more could there be to dynamic analysis than code coverage and profiling? Probably Read More...
regsvr32 for non-admins
Interesting article up on Code Project: "The principal advantage is that, the user can still register and use the COM server even if he is not an administrator of the machine or does not have write access to HKEY_LOCAL_MACHINE . " http://www.codeproject.com/w2k/regsvrex.asp Read More...
Page view tracker