.NET Security Blog
What's the Deal with the ECMA Key?
The libraries laid out in the ECMA spec are all signed with a public key that looks pretty strange....
Author: Shawn Farkas - MS Date: 06/09/2004
Checking For A Valid Strong Name Signature
Recently a question came up from someone who was trying to have a plugin architecture for their...
Author: Shawn Farkas - MS Date: 06/07/2004
WinDbg 6.3.17 Released
The debugging team has just released the Debugging Tools for Windows version 6.3.17. There are...
Author: Shawn Farkas - MS Date: 06/04/2004
Running Processes as a Different User
Before Whidbey, if you wanted to run code as a different user, you needed to use impersonation....
Author: Shawn Farkas - MS Date: 06/02/2004
A .NET Developer's Guide to Windows Security
Keith Brown has made avaiable an online version of his book, The .NET Developer's Guide to Windows...
Author: Shawn Farkas - MS Date: 05/28/2004
Making Strings More Secure
The standard System.String has never been a very secure solution for storing sensitive strings such...
Author: Shawn Farkas - MS Date: 05/27/2004
Programming Language Evolution and Text on Potato Chips
I ran across Eric Levenez's Programming Language History page, its pretty fun to check out. He's got...
Author: Shawn Farkas - MS Date: 05/20/2004
Using the XSLT Transform with XML Signatures
One of the transforms that ships with the .Net framework is the XmlDsigXsltTransform, which...
Author: Shawn Farkas - MS Date: 05/19/2004
Managed DPAPI Part II: ProtectedMemory
Last week (ok, really two weeks ago ....), I wrote about using DPAPI with Whidbey. (You can find...
Author: Shawn Farkas - MS Date: 05/17/2004
Managed DPAPI Part I: ProtectedData
Overview of DPAPI Although APIs such as CAPI and the .NET System.Security.Cryptography classes make...
Author: Shawn Farkas - MS Date: 05/05/2004
New Microsoft Crypto Newsgroup
We've just launched a brand new newsgroup, microsoft.public.security.crypto, for questions and...
Author: Shawn Farkas - MS Date: 05/04/2004
Arrays and SOS
Looking at arrays with SOS on WinDBG is not exactly the most intuitive process in the world. In...
Author: Shawn Farkas - MS Date: 04/30/2004
Writing Managed Code With VC++ 2005
There's been a few articles around lately on the new syntax for Managed C++ that's in VC++ 2005....
Author: Shawn Farkas - MS Date: 04/28/2004
xml:id and SignedXml
A few weeks back, I posted about customizing how SignedXml searches for XML elements identified by a...
Author: Shawn Farkas - MS Date: 04/27/2004
XmlIdSignedXml.cs
using System;using System.Security.Cryptography.Xml;using System.Xml;/// <summary>/// Provides...
Author: Shawn Farkas - MS Date: 04/27/2004
Why Doesn't .NET Support Deterministic Finalization?
This email from Brian Harry has been making the rounds again lately. It's a pretty in depth talk...
Author: Shawn Farkas - MS Date: 04/26/2004
ClickOnce Overview in May's MSDN Magazine
ClickOnce made the cover of the May 2004 issue of MSDN Magazine. (OK, yes, it was just a little...
Author: Shawn Farkas - MS Date: 04/22/2004
Customizable CAS Defaults
One of the nicer new Whidbey features, at least from an admin standpoint, is the ability to...
Author: Shawn Farkas - MS Date: 04/21/2004
P/Invoke Wiki
Adam Nathan, who you may recognize as being the author of .NET and COM: The Complete...
Author: Shawn Farkas - MS Date: 04/20/2004
New VC++ Toolkit 2003
The Visual C++ team has released the Visual C++ Toolkit 2003, which includes the full optimizing C++...
Author: Shawn Farkas - MS Date: 04/19/2004
Signing Assemblies With C# in Whidbey
You may be in for a surprise when you try to rebuild your strongly named assemblies written in C#...
Author: Shawn Farkas - MS Date: 04/15/2004
Generating a Key from a Password
If you're trying to encrypt data using a password, how do you convert the password into a key for...
Author: Shawn Farkas - MS Date: 04/14/2004
Ivan Writes about Strong Name Signing with Smart Cards
Ivan's written a new article, showing how to use keys stored on a smart card to strong name sign an...
Author: Shawn Farkas - MS Date: 04/09/2004
Whidbey's Secure CRT
One of the features that the Whidbey release of Visual C++ is going to bring is the new Secure CRT....
Author: Shawn Farkas - MS Date: 04/08/2004
Using XPath to Sign Specific XML
In my last posting, I promised to write about a more general purpose way of selecting specific XML...
Author: Shawn Farkas - MS Date: 04/07/2004
Searching for Custom ID Tags With Signed XML
Last week, I blogged about using references to sign only specific parts of an XML document. The...
Author: Shawn Farkas - MS Date: 04/05/2004
Signing Specific XML With References
I've previously blogged about creating XML digital signatures using the .NET framework, but today...
Author: Shawn Farkas - MS Date: 03/31/2004
What's New in XML For Whidbey
The new XML Developer Center on MSDN has a nice article about the new XML features in Whidbey. The...
Author: Shawn Farkas - MS Date: 03/30/2004
Why Won't using Throw a NullReferenceException
Today someone was curious why C#'s using statement won't throw a NullReferenceException. They had a...
Author: Shawn Farkas - MS Date: 03/29/2004
PKCS#12 in .NET
Michel Gallant has posted a very nice article on MSDN about using PKCS#12 key with .NET. PKCS#12 are...
Author: Shawn Farkas - MS Date: 03/26/2004
Whidbey Tech Preview
So by now probably everyone's heard that we've released a technical preview of Whidbey to atendees...
Author: Shawn Farkas - MS Date: 03/26/2004
Creating ACLs for Custom Objects
Kenny Kerr has an article up on MSDN showing how to use the Windows ACL security system on custom...
Author: Shawn Farkas - MS Date: 03/24/2004
Opening a command prompt for your project
Sometimes while working with a VS.Net project, you need to run a command line tool, either on the...
Author: Shawn Farkas - MS Date: 03/22/2004
WinXP SP2
Well, the Windows team has finished Release Candidate 1 of Windows XP Service Pack 2, and made it...
Author: Shawn Farkas - MS Date: 03/19/2004
So What's This WinFS Thing All About Anyway?
MSDN has the first installment of Thomas Rizzo's new column, where he talks about what WinFS really...
Author: Shawn Farkas - MS Date: 03/19/2004
New Security Tool Available for Download
There's a new security tool that keeps track of the ports used by applications on your machine...
Author: Shawn Farkas - MS Date: 03/18/2004
Delay Signing
Most people know about the delay signing feature of the CLR. (For those who don't check out MSDN's...
Author: Shawn Farkas - MS Date: 03/17/2004
Security in the Visual Studio Tools for Office Suite
This month's MSDN magazine contained an article about security and the Visual Studio Tools for...
Author: Shawn Farkas - MS Date: 03/12/2004
Debugging the Debugger
Min Kwan Park's blog was making the rounds of the various Microsoft blogs yesterday, but I thought...
Author: Shawn Farkas - MS Date: 03/11/2004
Same Site Socket Permission
Fairly frequently, people will want to know how to get same site socket permissions, in the same way...
Author: Shawn Farkas - MS Date: 03/10/2004
More Details on Portable Crypto Operations
Yesterday I posted about detecting which CSP provided algorithms were available on your copy of...
Author: Shawn Farkas - MS Date: 03/09/2004
Which Cryptographic Operations are Available?
One of the more common problems to creep up when people start using the various cryptographic...
Author: Shawn Farkas - MS Date: 03/08/2004
How Exceptions Work in Rotor (and the CLR)
Joel Pobar has a nice post with Jan Kotas' explanation of how exceptions work in Rotor (and by...
Author: Shawn Farkas - MS Date: 03/05/2004
Further Strengthening Hash Algorithms
There's been an interesting internal email thread going on this week about the use of a hash to...
Author: Shawn Farkas - MS Date: 03/05/2004
Kerberos Overview and Weaknesses
O'Reilly's Windows DevCenter has an excerpt from their Security Warrior book, giving an overview of...
Author: Shawn Farkas - MS Date: 03/03/2004
Debugging Unmanaged Code Calling Back Into Managed
One of the guys I work with spent a good part of his day tracking down a tricky problem with some...
Author: Shawn Farkas - MS Date: 03/02/2004
Part 4 of the Java vs .NET Comparison Posted
Denis Piliptchouk finished his four part series comparing Java and .NET security, with a piece on...
Author: Shawn Farkas - MS Date: 02/27/2004
Fun with the Visual Studio Find Combo Box
It's interesting to note all the power of the find combo box in the Visual Studio command bar. It's...
Author: Shawn Farkas - MS Date: 02/27/2004
Don't Click Here If You Value Your Productivity
Here's a fun little timer waster over on Bungie's website:...
Author: Shawn Farkas - MS Date: 02/26/2004