December 2006 - Posts

ASP.NET 2.0 Security Scenarios and Solutions
Scenarios and Solutions are basically whiteboard solutions that quickly depict key engineering decisions. You can think of them as baselines for your own design. We have a set of solutions that show the most common end-to-end ASP.NET 2.0 authentication Read More...
Posted 11 December 06 11:53 by J.D. Meier | 1 Comments   
Filed under
Input Validation Principles and Practices
If you use a principle-based approach, you can get rid of classes of security issues. SQL injection, cross-site scripting and other flavors of input injection attacks are possible because of some bad practices. Here's a few of the bad practices: Bad Practices Read More...
Posted 11 December 06 02:45 by J.D. Meier | 1 Comments   
Filed under
Catalysts and Drains
This is a follow up to my post, Manage Energy, Not Time . A few folks have asked me how I figure out energy drains and catalysts. For me, clarity came when I broke it down into: Tasks People On the task side ... This hit home for me when one of the instructors Read More...
Posted 09 December 06 03:18 by J.D. Meier | 2 Comments   
Filed under ,
What's a Scenario
In general, "scenario" usually means a possible sequence of events. In the software industry, "scenario" usually means one of the following: 1. Same as a use case 2. Path through a use case 3. Instance of a use case #3 is generally preferred because it Read More...
Posted 09 December 06 02:40 by J.D. Meier | 2 Comments   
Filed under ,
Scenario and Feature Matrixes
One of the most effective approaches I've found for chunking up a project for incremental value is using a Scenario and Feature Matrix . A Scenario and Feature Mat rix organizes scenarios and features into a simple view. The scenarios are your rows. The Read More...
Posted 09 December 06 12:00 by J.D. Meier | 3 Comments   
Filed under , ,
What's the Cost of Not Doing Security Engineering
Alik is out in the field helping customers bake security into their product cycles. Of course, customers ask how much does it cost to implement Security Engineering practices ? The answer is, of course, ... it depends. The flip side is, what's the cost Read More...
Posted 08 December 06 06:19 by J.D. Meier | 0 Comments   
Filed under
Manage Energy, Not Time
Manage energy, not time, to get more things done ... This concept really resonates with me. I also like it because it can be counter intuitive or non-obvious. One way to try and get more things done is to, jam more in your schedule. Yuck! Unfortunately, Read More...
Posted 07 December 06 02:26 by J.D. Meier | 5 Comments   
Filed under ,
User Experience, Tech Feasibility and Business Value
I found a way to explore more and churn less on incubation (i.e. R&D) projects. It helps to think of your project experiments and key risks in terms of these three categories and in this order: 1. user experience 2. technical feasibility 3. business Read More...
Posted 06 December 06 12:44 by J.D. Meier | 2 Comments   
Filed under , ,
Timing Managed Code in .NET 2.0
In .NET 1.1, we timed managed code by wrapping QueryPerformanceCounter and QueryPerformanceFrequency . The following How To shows how: How To: Time Managed Code Using QueryPerformanceCounter and QueryPerformanceFrequency In .NET 2.0, you can use the Stopwatch Read More...
Posted 05 December 06 09:50 by J.D. Meier | 5 Comments   
Filed under
Scenario Evaluations for Product Design and Feedback
When I need to quickly analyze a product and give actionable feeback, I use scenario evaluations. Scenario evaluations are basically an organized set of scenarios and criteria I use to test and evaluate against. It's a pretty generic approach so you can Read More...
Posted 03 December 06 02:56 by J.D. Meier | 1 Comments   
Filed under ,
Be the Software
When you're working on an R&D project, how do you shorten the cycles around testing your user experience models? ... Be the Software That's the advise John Socha-Leialoha , father of Norton Commander , gave me and it worked like a champ. We faced Read More...
Posted 01 December 06 08:01 by J.D. Meier | 1 Comments   
Filed under , ,

Search

This Blog

Syndication

Page view tracker