.NET Security Blog
Blogging around the CLR
As of today, there are 40 members of the extended CLR team with blogs on and off of MSDN. Some are...
Author: Shawn Farkas - MS Date: 02/08/2005
Allowing Partially Trusted Callers
The AllowPartiallyTrustedCallersAttribute (affectionately referred to as APTCA from here on out), is...
Author: Shawn Farkas - MS Date: 02/04/2005
Running IE with SAFER
Michael Howard recently did a two part series on MSDN about browsing the web and reading email...
Author: Shawn Farkas - MS Date: 01/31/2005
A Few Observations about Raw Signatures
Finishing up this week's strong name theme, here's a few observations to make about the raw...
Author: Shawn Farkas - MS Date: 01/28/2005
Finding the Raw Strong Name Signature
Wow ... there's been lots of interest in signatures lately :-) In response to my last post about...
Author: Shawn Farkas - MS Date: 01/26/2005
Shri Starts Blogging
Shri started up a blog today, joining David as members of the JIT team on MSDN blogs. His first post...
Author: Shawn Farkas - MS Date: 01/25/2005
What Happens When You Sign With A Larger Key
In response to last Friday's post about creating a key that's longer than 1024 bits, Nicole wondered...
Author: Shawn Farkas - MS Date: 01/24/2005
Generating Larger Keys with SN
A while back, I wrote about using the StrongNameKeyGenEx API to generate keys to sign assemblies...
Author: Shawn Farkas - MS Date: 01/21/2005
ClickOnce vs MSI on MSDN
The Smart Client Developer Center on MSDN is running an overview of ClickOnce and comparing it to...
Author: Shawn Farkas - MS Date: 01/20/2005
Mike Stall on Finding the Real Exception Call stack
Mike's got an interesting piece up today about using WinDbg to find the actual call stack of an...
Author: Shawn Farkas - MS Date: 01/19/2005
Removing Permissions From FullTrust
Executing the following code: PermissionSet ps = new...
Author: Shawn Farkas - MS Date: 01/17/2005
How to link to an ActiveX Control from a Strongly Named Assembly
Windows Forms has a feature that allows you to use an ActiveX control on your managed form. All you...
Author: Shawn Farkas - MS Date: 01/13/2005
Using CasPol to Fully Trust a Share
Since network shares by default only get LocalIntranet permissions, it's relatively common to want...
Author: Shawn Farkas - MS Date: 12/30/2004
Home for the Holidays
I'm going to be on vacation until the end of December, so this blog will be going dark for about a...
Author: Shawn Farkas - MS Date: 12/17/2004
Why Do I Still Get an Exception Accessing a File with Full FileIOPermission?
This issue (and its cousin: Why Do I Still Get an Exception Accessing the Registry with Full...
Author: Shawn Farkas - MS Date: 12/15/2004
Hitting the Mailbag
I've gotten quite a few questions from this blog over the past several months. And although I can't...
Author: Shawn Farkas - MS Date: 12/14/2004
Handling Assemblies that Won't Load: Method 2.1
Yesterday, I showed an alternate to the shim method of gracefully failing from an assembly using an...
Author: Shawn Farkas - MS Date: 12/09/2004
Handling Entry Assemblies that Won't Load: Method 2
The last two days we worked on a shim application that allowed us to handle gracefully the condition...
Author: Shawn Farkas - MS Date: 12/08/2004
Handling Entry Assemblies that Won't Load: Method 1.1
Yesterday we developed a simple Shim application in order to fail gracefully when our application's...
Author: Shawn Farkas - MS Date: 12/07/2004
Handling Entry Assemblies that Won't Load: Method 1
Last week, when I posted about failing to run in partial trust gracefully, the method I showed only...
Author: Shawn Farkas - MS Date: 12/06/2004
Managed StrongName Refactoring Complete
I've completed refactoring the Managed StrongName project, and I've uploaded the new sources. The...
Author: Shawn Farkas - MS Date: 12/03/2004
MS.StrongNameSignatures.cs
1 using System;2 using System.Diagnostics;3 using System.Globalization;4 using System.IO;5 using...
Author: Shawn Farkas - MS Date: 12/03/2004
MS.StrongNameKeyFile.cs
1 using System; 2 using System.Diagnostics; 3 using System.Globalization; 4 using System.IO; 5 using...
Author: Shawn Farkas - MS Date: 12/03/2004
MS.StrongNameKeys.cs
1 using System; 2 using System.Diagnostics; 3 using System.Globalization; 4 using...
Author: Shawn Farkas - MS Date: 12/03/2004
MS.StrongNameKeyStore.cs
1 using System;2 3 namespace MS.StrongName4 {5 /// <summary>6 /// Key stores available for...
Author: Shawn Farkas - MS Date: 12/03/2004
MS.StrongNameMS.StrongName.txt
1 BadFile=Invalid file specified: {0}2 BadOperation=Error completing operation: {0}3...
Author: Shawn Farkas - MS Date: 12/03/2004
MS.StrongNameRegistry.cs
1 using System;2 3 namespace MS.StrongName4 {5 /// <summary>6 /// Constants for the...
Author: Shawn Farkas - MS Date: 12/03/2004
MS.StrongNameUtility.cs
1 using System;2 using System.Diagnostics;3 using System.IO;4 using System.Security;5 using...
Author: Shawn Farkas - MS Date: 12/03/2004
MS.StrongNameVerificationResult.cs
1 using System;2 3 namespace MS.StrongName4 {5 /// <summary>6 /// Results of signature...
Author: Shawn Farkas - MS Date: 12/03/2004
MS.StrongNameNativeNativeMethods.cs
1 using System; 2 using System.Runtime.InteropServices; 3 4 namespace MS.StrongName.Native 5 { 6 ///...
Author: Shawn Farkas - MS Date: 12/03/2004
MS.StrongNameNativeStrongNameInFlags.cs
1 using System;2 3 namespace MS.StrongName.Native4 {5 /// <summary>6 /// Input flags for use...
Author: Shawn Farkas - MS Date: 12/03/2004
MS.StrongNameNativeStrongNameKeyGenFlags.cs
1 using System;2 3 namespace MS.StrongName.Native4 {5 /// <summary>6 /// Flags for use with...
Author: Shawn Farkas - MS Date: 12/03/2004
MS.StrongNameNativeStrongNameOutFlags.cs
1 using System; 2 3 namespace MS.StrongName.Native 4 { 5 /// <summary> 6 /// Flags output from...
Author: Shawn Farkas - MS Date: 12/03/2004
msnCommand.cs
1 using System; 2 using System.Diagnostics; 3 4 namespace MS.StrongName.ManagedSN 5 { 6 ///...
Author: Shawn Farkas - MS Date: 12/03/2004
msnCommands.cs
1 using System; 2 using System.Diagnostics; 3 using System.Globalization; 4 using System.Text; 5...
Author: Shawn Farkas - MS Date: 12/03/2004
msnLog.cs
1 using System; 2 3 namespace MS.StrongName.ManagedSN 4 { 5 /// <summary> 6 /// Handles all...
Author: Shawn Farkas - MS Date: 12/03/2004
msnmsn.txt
1 # Error messages 2 BadFile=Invalid file specified: {0} 3 BadKeyContainer=Invakid key container...
Author: Shawn Farkas - MS Date: 12/03/2004
msnmsn.cs
1 using System; 2 using System.Collections.Generic; 3 using System.Diagnostics; 4 using...
Author: Shawn Farkas - MS Date: 12/03/2004
Failing to Run in Partial Trust Gracefully
When you write an application that requires a high level of trust to run properly, when a user tries...
Author: Shawn Farkas - MS Date: 12/02/2004
Refactoring the Managed StrongName Project
Looking over the Managed StrongName code for today's post, I've become dissatisfied with several...
Author: Shawn Farkas - MS Date: 11/30/2004
Extracting Public Key Blobs
(Updated 12/3/04 for code refactoring) Before letting another two months pass, its time to once...
Author: Shawn Farkas - MS Date: 11/30/2004
Next Generation Hardware Speculation
Yesterday there were a couple of announcements that seem to impact the next generation of video game...
Author: Shawn Farkas - MS Date: 11/30/2004
Managed Hosting API Take 3: the Host SecurityManager
Now that we've examined how to customize the AppDomain creation process, lets go back to our...
Author: Shawn Farkas - MS Date: 11/29/2004
An Interesting Take On Two-Factor Authentication
(via Bruce Schneier) Two banks in New Zealand are introducing an interesting form of two-factor...
Author: Shawn Farkas - MS Date: 11/29/2004
What's the FullTrust List For Anyway?
Time for a quick break from managed hosting. I've been asked several times on this blog and in the...
Author: Shawn Farkas - MS Date: 11/24/2004
Customizing the AppDomain Creation Process
Last week, I posted about AppDomainManagers. Today, I'm going to look a little more closely at how...
Author: Shawn Farkas - MS Date: 11/17/2004
ZoneSandboxAppDomainManager.cs
1 using System; 2 using System.Reflection; 3 using System.Security; 4 using System.Security.Policy;...
Author: Shawn Farkas - MS Date: 11/17/2004
The Managed Hosting API
With v1.0 and v1.1 of the CLR, if you wanted to have much control over how the CLR was working under...
Author: Shawn Farkas - MS Date: 11/12/2004
Peter Torr Provides More Details on Sandboxing AppDomains
Peter Torr from the Visual Studio Tools for Office team recently expanded on my sandboxed AppDomain...
Author: Shawn Farkas - MS Date: 11/08/2004
Another Fix for the Infamous Calc Problem
Last month I wrote about replacing Calc with CalcPlus. If you'd really like to keep the default...
Author: Shawn Farkas - MS Date: 11/05/2004