Dan Sellers's WebLog
A Passion for .NET Security
Sharing Forms Authentication between ASP.NET 1.1 and ASP.NET 2.0 Applications
As you start shifting from ASP.NET 1.1 to ASP.NET 2.0 development there may be instances where you...
Author: MSDN Archive Date: 02/16/2006
Windows OneCare Live--Get the Beta
It is hard to believe but approximately 70% of home computers are not using any software Firewall...
Author: MSDN Archive Date: 02/15/2006
Change to ASP.NET 2.0 Forms Authentication Persistent Cookies
I have already highlighted some of the subtle security and migration issues with .NET Framework 2.0...
Author: MSDN Archive Date: 02/15/2006
Windows Defender Beta 2 is now Out
Microsoft Windows Defender Beta 2 is a spyware protection program that I have personally been using...
Author: MSDN Archive Date: 02/14/2006
SN v2.0 Works With PFX Files
.NET Framework 2.0 sn tool has the ability to work with PKCS #12 PFX files in addition to SNK files....
Author: MSDN Archive Date: 02/14/2006
Visual Studio 2005 Safe C and C++ (Safe CRT) Runtime Library
When Visual Studio 2005 was released in November 2005 there were many features announced and talked...
Author: MSDN Archive Date: 02/13/2006
IIS and Multiple Version of .NET Framework
I have seen this question in forums as well as many emails on how to configure two versions of the...
Author: MSDN Archive Date: 02/13/2006
Security on the Brain
Are you interested in Security from a Developer prespective then check out the new MSDN Canada...
Author: MSDN Archive Date: 02/13/2006
ASMX 2.0, WSE 3.0 and WCF
Web Services were enhanced with the release of .NET Framework 2.0 and then came along WSE 3.0 in...
Author: MSDN Archive Date: 02/10/2006
.NET Pet Shop 4
.NET Pet Shop 4 sample application has now been released to the MSDN. It worthwhile looking at this...
Author: MSDN Archive Date: 02/10/2006
Crypto Key Length
I got this from Michael Howard's Blog and it is a cool web app that provides recommended key length...
Author: MSDN Archive Date: 02/09/2006
Visual Studio Add-In That Converts C# Code To Visual Basic
The one question that I get asked quite often is how can I convert some C# code to Visual Basic or...
Author: MSDN Archive Date: 02/07/2006
DevTeach -- International Developer Conference (Montreal)
This year I will be presenting two Security related talks at DevTeach in Montreal, Canada. DevTeach...
Author: MSDN Archive Date: 02/07/2006
VSLive Toronto
Microsoft Canada will be sponsoring VSLive in Toronto for the third straight year. This year VSLive...
Author: MSDN Archive Date: 02/07/2006
Team Foundation Server RC1 is Live
The Team Foundation Server Release Candidate bits including upgrade utilities are now available for...
Author: MSDN Archive Date: 02/07/2006
Auditing--the forgotten art of Security
When it comes to security there is a lot of emphasis placed on Authentication and Authorization...
Author: MSDN Archive Date: 01/31/2006
Thoughts on Code Scanning Tools
I was in the process of writing a blog on my thoughts about Code Scanning Tools to find security...
Author: MSDN Archive Date: 01/30/2006
Plumbers at Work Episode 2
It has been a while since our first Plumbers at Work Podcast but we finally have Episode 2 titled...
Author: MSDN Archive Date: 01/30/2006
Web Service Security Guidance
With the release of the WSE 3.0 for Visual Studio 2005 and .NET Framwork 2.0, Microsoft released the...
Author: MSDN Archive Date: 01/28/2006
Software Development must change
I am glad to see that many IT industry analyst are now writing about the increase security...
Author: MSDN Archive Date: 01/27/2006
Microsoft Developer Security Resource Kit
For the longest time there has always been resource kits for Operating System and other major...
Author: MSDN Archive Date: 01/27/2006
MIX
On March 20th, Bill Gates will kick off a new conference called “MIX”, focused on the web. MIX will...
Author: MSDN Archive Date: 01/24/2006
Microsoft Expression--new line of products
Today Microsoft announced three line of Designer tools known as Expression Family of Products:...
Author: MSDN Archive Date: 01/24/2006
Team Foundation Server is going RC
Team Foundation Server will be going Release Candidate in early February 2006, which is one step...
Author: MSDN Archive Date: 01/24/2006
Register for the Security March Series
Based upon the success of the four ASP.NET 2.0 Security WebCasts in November, I will now be...
Author: MSDN Archive Date: 01/24/2006
Windows Communication Foundation Go-Live
Through out the holiday season I was working with Windows Communication Foundation (WCF)--formerly...
Author: MSDN Archive Date: 01/24/2006
Membership/Role Provider Demo
There were numerous requests for the ASP.NET 2.0 Application that I was demoing for the Canadian...
Author: MSDN Archive Date: 11/22/2005
Revised Threat Modeling
During the last three years I have been working with clients and speaking at industry Security...
Author: MSDN Archive Date: 11/21/2005
Recordings of Canadian Security Wednesday's WebCasts
Earlier this week during the ASP.NET 2.0 WebCasts on Membership and Role Management we had a lot of...
Author: MSDN Archive Date: 11/17/2005
WSE 3.0 Final Release
Web Services Enhancements 3.0 final release version is now freely available for download. WSE 3.0...
Author: MSDN Archive Date: 11/17/2005
Security Wednesday's WebCasts: November 2005--Demo Index
I will be conducting four Web Casts every Wednesday starting November 9th to November 30th 2005 on...
Author: MSDN Archive Date: 11/10/2005
Password Lockout Option: Active Directory Membership Provider
In continuation on Password Options with the ASP.NET 2.0 Membership Provider--using Active Directory...
Author: MSDN Archive Date: 11/09/2005
VS 2005 Web Deployment Projects available for download
The vanilla deployment product in Visual Studio.NET 2005 was lacking in support for more advanced...
Author: MSDN Archive Date: 11/09/2005
Canadian Launch Event--to Ask the Expert--Cabana
So, what is “Cabana” anyways? For those of us who haven’t been so lucky to be at this year’s PDC or...
Author: MSDN Archive Date: 11/07/2005
Attacked Surface Reduced in IIS 7.0
The Attacked Surface in IIS 6.0 was greatly reduced compared to IIS 5.0, and from the preview of IIS...
Author: MSDN Archive Date: 11/03/2005
Plumbers@Work PodCasting
It is now live, a new site dedicated to the podcasting of .NET topics. Three fellow Canadian geeks,...
Author: MSDN Archive Date: 11/02/2005
Special Editions of Visual Studio.NET 2005 and SQL Server 2005 at Canadian Launch Tour
From the Canadian Launch Tour blog feed we have heard several questions regarding the distribution...
Author: MSDN Archive Date: 10/28/2005
Uninstalling Beta 2 or CTP of Visual Studio.NET 2005
Now that Visual Studio.NET 2005 and SQL Server 2005 has been officially released, you will need to...
Author: MSDN Archive Date: 10/27/2005
It's Official: Visual Studio.NET and SQL Server 2005
Today, both Visual Studio.NET 2005 and SQL Server 2005 are available for download to MSDN...
Author: MSDN Archive Date: 10/27/2005
Microsoft Certifications for .NET 2.0
With the upcoming release of Visual Studio .NET 2005 and the .NET Framework 2.0 it has generated a...
Author: MSDN Archive Date: 10/26/2005
Security for IT GUY
The only thing that is constant in today’s society is "Change". How can small business stay current...
Author: MSDN Archive Date: 10/26/2005
Security Guidelines: ADO.NET 2.0
To compliment the ASP.NET 2.0 Security at a Glance, Microsoft Patterns and Practices team released...
Author: MSDN Archive Date: 10/25/2005
Podcasting Rookies
This year, I have been putting much more effort into my blogs with a core focus on Security for...
Author: MSDN Archive Date: 10/25/2005
Security Process: "The How to" of Threat Modeling and Security Code Reviews
In a previous blog, I mentioned that Security is process and not a product. Part of that process it...
Author: MSDN Archive Date: 10/21/2005
Question and Answer Password Security Option: Active Directory Membership Provider
Both the Active Directory and the SQL Server Membership Providers support the “Enable Password...
Author: MSDN Archive Date: 10/20/2005
ASP.NET 2.0 Provider Model: Introduction to the Provider Model
Recently the “Introduction to the Provider Model” whitepaper was updated at...
Author: MSDN Archive Date: 10/20/2005
Security Process: Pattern and Practices Security Engineering
As I have often said there is no Silver bullet in the IT industry and that includes Security. Rather...
Author: MSDN Archive Date: 10/19/2005
Security Trimming and Site Navigation Service in ASP.Net 2.0
The new Site Navigation Service and Navigation Controls in ASP.Net 2.0 easily reduces at least a...
Author: MSDN Archive Date: 10/18/2005