Welcome to MSDN Blogs Sign in | Join | Help

Browse by Tags

All Tags » Office » Security » VSTO   (RSS)
Friday, September 03, 2004 7:22 AM

Code Repurposing and Untrustworthy Data

This is just a generic launching place for four other blog entries, since I seem to send them to people on a regular basis and sending one URL is easier than four :-) Code repurposing · http://weblogs.asp.net/ptorr/archive/2003/10/16/56270.aspx · http://weblogs.asp.net/ptorr/archive/2003/10/21/56296.aspx
Posted by ptorr | 1 Comments
Filed under: , ,
Friday, July 16, 2004 3:11 AM

A useful regfile for VSTO

Here's a quick post with a regfile you can use to help you test your VSTO projects. Cut and paste the text below into a text file (be careful of line wrapping) and save it with a reg extension. Then open up regedit (as a member of the Administrators group)
Posted by ptorr | 8 Comments
Filed under: , ,
Friday, April 16, 2004 11:46 PM

Why does Outlook have an OM?

This one could be controversial ;-) In a recent comment, Edd James (note to Edd: that link gives a 403) asks why Outlook and Excel " need this ability to run scripts/macros [?]" First I want to clear up a common misconception about Outlook: Despite what
Posted by ptorr | 10 Comments
Filed under: , ,
Tuesday, April 13, 2004 4:19 PM

Follow up to "Don't trust that data"

Eric makes some good points in a comment to my last post . Nevertheless, the forces of evil within me compel me to respond anyway. (You should have blogged it, Eric ;-) ). Eric's main point is that the employee doesn't need to use formulas in order to
Posted by ptorr | 1 Comments
Filed under: , ,
Monday, April 12, 2004 12:04 AM

Don't trust that data!

A while ago I wrote a couple of blog entries on code repurposing and some mitigations , and one of the main causes of that problem is that developers inherently trust data. The text box caption says Name , so it's always gonna contain the user's name,
Posted by ptorr | 2 Comments
Filed under: , ,
Saturday, March 20, 2004 10:58 PM

Balancing Security and Usability

I'm often tempted to write about viruses and what I think the next "innovation" might be, but then I get scared that I might get put in jail (or deported) should any of my ideas ever see the light of day. (Not that I think the virus writers need any help
Posted by ptorr | 14 Comments
Filed under: , ,
Monday, January 05, 2004 4:24 AM

You can use Excel templates with VSTO 1.0

If you've tried out VSTO (and you should :-) ) then you may have noticed that Word has both Document and Template projects whilst Excel has only a Workbook project. If you were thinking that the reason was because Excel was naughty but Word was nice,
Posted by ptorr | 4 Comments
Filed under: , ,
Monday, November 03, 2003 4:10 PM

VSTO Security Model

How we 'remove' My Computer Zone
Posted by ptorr | 14 Comments
Tuesday, October 21, 2003 6:26 PM

Mitigating Code Repurposing Attacks

A cure for insomnia?
Posted by ptorr | 3 Comments
 
Page view tracker