all groups > dotnet security > october 2004 > threads for october 8 - 14, 2004
Filter by week: 1 2 3 4 5
Code Signing And Hacking
Posted by Vivek at 10/14/2004 10:53:32 AM
Folks,
I have a simple question about how CompactFramework Runtime handles Code
Signing and hacking. My scenario is that i have a signed assembly. A hacker
ILDasm it, changes something, and recompile it back to executable.
1. Is it possible to Recompile back into executable (since the origin... more >>
Non-admin service
Posted by Kevin Burton at 10/14/2004 10:09:14 AM
First, please redirect me if it is appropriate to the right newsgroup.
I have a service using .NET classes. I am trying to follow suggestions of
reducing my attack surface by making the service run as non admin. The
problem is that when I start the service it seems to start then stop. When I ... more >>
(403) Forbidden
Posted by Guru at 10/14/2004 6:21:06 AM
This is guru , i am using transunion's secured feature using client
certificate.
we are using the following segments in the following order
1> TU4I
2> EU01
3> CD01
4> SH01
5> NM01
6> PI01
7> AD01
8> RP01
9> OD01
10> ENDS
I am getting the following error
An unhandled except... more >>
Security problem when dynamically creating directories
Posted by Eran Kampf at 10/13/2004 9:49:25 PM
I am trying to dynamically create directories in my ASP.NET application (I
am using Server.MapPath("/")+"test" as the folder)
and I am getting a DirectoryNotFoundException saying "Could not find a part
of the path "D:\".
My site is hosted on a public ISP that for obvious security reasons does no... more >>
PartiallyTrusted assembly calling trusted methods
Posted by Bernd Helzer at 10/13/2004 3:51:28 PM
I keep getting an error in FxCop: Partially trusted types extend only other
partially trusted types
Nothing I do seem to make the error go away.
My assembly AllowsPartialTrustedCallers, but during Design time it's fine to
require FullTrust.
My original declaration looked like this:
public ... more >>
The application is running in partially trusted context
Posted by Nikolay Petrov at 10/13/2004 2:10:52 PM
When ran from network Windows says "the application is running in partially
trusted context...." and disables some of my app functionality, mostly io
operations
How to enable all functionality in my app, when ran from network? (I am
using VB.NET)
TIA
... more >>
RSA Conversion Issue
Posted by peter NO[at]SPAM mclinn.com at 10/13/2004 7:24:19 AM
I've encrypted the contents of a textbox using RSA encryption with no
issues but when I try to decode the message in another application I'm
getting a 'bad data' error. Here is the the general proceedure I'm
using:
VB.net
'This is how I encoded:
Dim xmlPublicKey As String = "MyKeyPublic" '... more >>
SecurityPermission XP SP2
Posted by SealedClassSingleton at 10/13/2004 7:19:04 AM
Hi,
I'm launching a winform app from a network share which must be run in
fulltrust mode. In case the .NET security settings aren't adjusted on the
workstation where the app is launched, I want to display a messagebox to
contact the helpdesk in order to adjust the security settings.
Code... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Newbie Security layout, limited number of users and NT groups
Posted by Phil at 10/13/2004 6:47:10 AM
Hi,
I have an application running on on internal network. The security we think
we want to use is NT Authentication and breakdown further by determining if a
particular user is in an NT group.
We have 7 NT groups allowed to access the app. For each group there are only
a handful of users... more >>
Client Certificate not reaching server
Posted by NRao at 10/12/2004 9:29:05 AM
Hello Everbody,
I have a class lib which is accessing a .aspx on web through httpwebrequest
and sending xml through post method. Server people provided me a .cer file. I
am adding that certificate file to httpwebrequest. But their side they do not
find the certificate. I tried following wa... more >>
HTTP Protocol Violation Underlying connection to server closed err
Posted by Rajiv at 10/12/2004 8:37:01 AM
Hello,
I developed a No touch deployment client which accesses data through a web
service. The application worked really well until I installed .NET framework
1.1 SP1. It worked well without the Service Pack1. But now it throws a HTTP
Protocol violation. Is there any fix to this problem. I... more >>
Constructor and type permissions.
Posted by Kevin Burton at 10/12/2004 8:35:28 AM
I feel a little overwhelmed at the options available with security
permissions. I have several "wrapper" classes that contain/construct specific
classes. I want the wrapper classes to be the only way that these "raw"
classes are constructed and accessed. So for example if I have a "wrapper"
... more >>
SubFolder Security
Posted by Mohamed at 10/11/2004 12:00:45 PM
Hi all
I am using .NET FrameWork 1.1
and i include in my project a folder named "Forum"
and i want that nobody can enter the forum folder wizout logining into the
system
the forum is a subdirectory in my project
thanks
... more >>
SSO advice
Posted by Michaelr at 10/11/2004 9:45:01 AM
We are looking to implement Single Sign On (SSO) for our intranet and other
internal applications.
Our plan is to have an ASP.NET “portal page†which will examine the
WindowsIndentity of the IIS-authenticated user, and present links for the
applications that the user has authorization.... more >>
Method to determine permissions required by my application.
Posted by pradeepkumar.t NO[at]SPAM gmail.com at 10/11/2004 5:26:06 AM
I have just forayed into the world of CAS. Presently I am determining
which permissions are required by my application which runs in a
partially trusted environment. I find it tough to determine which
permissions are required by my application. Of course it would seem
intuitive that as the appli... more >>
Signing COM DLLs with Strong Name
Posted by Lisa at 10/10/2004 11:05:04 PM
Hi,
I am facing a problem regarding signing COM DLLs with strong name.
I have a VB COM DLL (lets call it A) which references another VB COM DLL
(say B).
I am referencing the DLLs A and B in my .NET Class Library (say NETApp). The
assembly NETApp.dll is signed with strong name. Since, NE... more >>
ArgumentException with MsgBox when working with code access security
Posted by Gabriel Michaud at 10/9/2004 10:31:22 PM
Hello,
Can anyone explain to me why I get an ArgumentException on the MsgBox with
the following code? I'm studying for the 70-306 exam and I'm experimenting
with code access security.
Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As
System.EventArgs) Handles Button1.Cl... more >>
Trim user input of spaces, tabs, and others
Posted by Shabam at 10/9/2004 12:32:43 PM
Is there a function in dotnet that allows me to trim user input so that:
1) It gets rid of leading/trailing spaces, tabs, newlines and whatever other
non-printing characters
2) Gets rid of all tabs, newlines, and whatever other non-printing
characters anywhere else, preferably replacing them w... more >>
WindowsIdentity.currentuse() dont not windows 98
Posted by Yuri at 10/8/2004 11:59:04 AM
which would be the solution to catch the name of the user?... more >>
Valid email addresses
Posted by Shabam at 10/8/2004 6:32:47 AM
I have a form that takes in a series of comma-delisted email addresses. The
system needs to check that each mail is a valid mail, and that only certain
letters are allowed. These emails are then stored in a database, where the
system sends mails out to. Each user has a limit as to how many ema... more >>
Encrypt with .Net, decrypt with Crypto API?
Posted by Trevor Barry at 10/8/2004 3:47:03 AM
Hi
I have some server based .Net code that creates an encrypted blob that is
stored in active directory. The encryption is done with the
TripleDESCryptoServiceProvider which needs an 8 byte initialisation vector, a
key and the plaintext.
I have .Net client side code that picks up the val... more >>
|