October 2007 - Posts

New Microsoft Security Intelligence Report Available
23 October 07 06:03 PM

The latest Security Intelligence Report is now available. To quote the Web page: The Microsoft Security Intelligence Report (SIR) provides an in-depth perspective on the changing threat landscape including software vulnerability disclosures and exploits, Read More...

Postedby michael_HOWARD | 1 Comments    

Filed under: Security, Personal

Dev Tip: Opening Commonly-Accessed Files
19 October 07 01:39 PM

When I'm writing code, there's one file I need to access constantly - WinError.h, the file that lists all the Windows errors constants. SSSSoooo... I had to find a way to get to the file which is buried somewhere in the C:\Program Files\blah blah\Visual Read More...

Postedby michael_HOWARD | 14 Comments    

Filed under: General

News Items that Interested me this Week
19 October 07 11:55 AM

Each week (ok, mostly every week!) I'll post news items that interested me... Security analysis of Checkpoint firewall Of interest is the way around RedHat's ExecShield buffer overflow defense. http://www.pentest.es/checkpoint_hack.pdf Abusing chroot Read More...

Postedby michael_HOWARD | 5 Comments    

Filed under: Security

Lessons Learned from Five Years of Building More Secure Software
12 October 07 01:13 PM

The annual Security issue of MSDN Magazine is now available. This year I wrote a piece about some of the lessons we've learned about building more secure software. I think this is the first article I have written in a long time that has no code samples! Read More...

Postedby michael_HOWARD | 1 Comments    

Filed under: Security

Update on the Threat Modeling Process
12 October 07 01:03 PM

At Microsoft, we have been using various forms of threat modeling for years now, and we're always learning new ways to improve the process. By "improve" I mean make the process faster, a more efficient use of time and easier to understand. Heading this Read More...

Postedby michael_HOWARD | 1 Comments    

Filed under: Security

Bluehat Audio Available
04 October 07 12:22 PM

http://download.microsoft.com/download/3/2/0/3205AD8C-A0AA-40F0-8998-256B7583D400/DanKaminsky.wma http://download.microsoft.com/download/3/2/0/3205AD8C-A0AA-40F0-8998-256B7583D400/HalvarFlake.wma http://download.microsoft.com/download/3/2/0/3205AD8C-A0AA-40F0-8998-256B7583D400/JeffForristal.wma Read More...

Postedby michael_HOWARD | 2 Comments    

Filed under: Security