-
Recently Disclosed ASP.Net Vulnerability Gets Expected Attack Code
In December, 2011 at the 28th Annual Chaos Communication Congress a vulnerability known as CVE-2011-3414 was disclosed to the public. It didn’t take long for Microsoft Security Responce Center to release a security advisory and a patch to correct the issue. Despite this, however, a user known only as HybrisDisaster …
By Trevor BolandRead More
January 27, 2012 -
Microsoft Patches Nine Year Old Exploit
File this one under a sarcastic “Thanks alot“. Imagine you are a company creating a widely used backend web development software. Someone releases a study that says, “This is only theory, but we’re pretty sure we can breaks your interwebs site by dancing like a koala bear.” These people include …
By Michael MarrRead More
January 9, 2012 -
Silverlight 5 Now Available
It’s time for all of you .NET programmers out there to get excited as the new version of Microsoft’s premier web application framework has been released. The Silverlight team released a press release a few days ago announcing the upgrade and describing all of the new goodies that have been …
By Qushawn ClarkRead More
December 19, 2011 -
Huge ASP.NET Attacks Reaching Far Across The Web
For anyone who heard about the massive Liza Moon bug earlier this year, this is a similar mass SQL injection attack.
By Qushawn ClarkRead More
November 8, 2011 -
Beta Version Of New ASP.net Site Is Up And Running
While all of the revisions are not complete, some very significant work has gone on in improving the functionality of the ASP.net site. Most of the features from the old site have stayed constant, such as the two navigation bars at the top of the page, and the community spotlight …
By Qushawn ClarkRead More
October 14, 2011 -
ASP.NET Developer Previews Galore
Jon Galloway, a Microsoft developer for ASP.NET, announced a number of new exciting things for ASP.NET developers.
By Joe PurcellRead More
September 30, 2011 -
Microsoft Fixes Major ASP.NET Flaw
The ASP.NET community should be relatively safe once again. After a nasty scare over a vulnerability, Microsoft’s made a security update available, and there are several different ways for people to take advantage of it. A little background information on the seriousness of this problem (which Scott Guthrie provided towards …
By Doug CaverlyRead More
September 28, 2011 -
ASP.NET Vulnerability Exposes Encrypted Data and Web.config
During the September 2010 ekoparty Security Conference in Argentina, Juliano Rizzo, along with Thai Duong, disclosed a vulnerability that affects every ASP.NET web application. The exploit involves what is called a “Padding Oracle Attack.” He had released a working algorithm a while back in the form of POET, a python …
By Taylor GillespieRead More
September 27, 2011 -
Visualize Data with Microsoft Chart Controls
Presenting data in a pleasant, aesthetically pleasing manner, that showcases the cohesive whole by selecting certain significant trends is a useful way to assist in livening up cold-hearted, plain numbers.
By Taylor GillespieRead More
September 26, 2011 -
Custom Controls “Not Invented Here” But “Proudly Found Elsewhere”
Many of us developers, as an educational exercise, have written an algorithm or data structure that has long been entrenched in a library or module written and tested more vigorously than our own. Why write a sorting algorithm in a language that already provides a better sort? Why write custom …
By Taylor GillespieRead More
September 25, 2011