Groups | Blog | Home


Archived Months
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
all groups > dotnet security > october 2004 > threads for october 8 - 14, 2004

Filter by week: 1 2 3 4 5

Code Signing And Hacking
Posted by Vivek at 10/14/2004 10:53:32 AM
Folks, I have a simple question about how CompactFramework Runtime handles Code Signing and hacking. My scenario is that i have a signed assembly. A hacker ILDasm it, changes something, and recompile it back to executable. 1. Is it possible to Recompile back into executable (since the origin...more >>


Non-admin service
Posted by Kevin Burton at 10/14/2004 10:09:14 AM
First, please redirect me if it is appropriate to the right newsgroup. I have a service using .NET classes. I am trying to follow suggestions of reducing my attack surface by making the service run as non admin. The problem is that when I start the service it seems to start then stop. When I ...more >>

(403) Forbidden
Posted by Guru at 10/14/2004 6:21:06 AM
This is guru , i am using transunion's secured feature using client certificate. we are using the following segments in the following order 1> TU4I 2> EU01 3> CD01 4> SH01 5> NM01 6> PI01 7> AD01 8> RP01 9> OD01 10> ENDS I am getting the following error An unhandled except...more >>

Security problem when dynamically creating directories
Posted by Eran Kampf at 10/13/2004 9:49:25 PM
I am trying to dynamically create directories in my ASP.NET application (I am using Server.MapPath("/")+"test" as the folder) and I am getting a DirectoryNotFoundException saying "Could not find a part of the path "D:\". My site is hosted on a public ISP that for obvious security reasons does no...more >>

PartiallyTrusted assembly calling trusted methods
Posted by Bernd Helzer at 10/13/2004 3:51:28 PM
I keep getting an error in FxCop: Partially trusted types extend only other partially trusted types Nothing I do seem to make the error go away. My assembly AllowsPartialTrustedCallers, but during Design time it's fine to require FullTrust. My original declaration looked like this: public ...more >>

The application is running in partially trusted context
Posted by Nikolay Petrov at 10/13/2004 2:10:52 PM
When ran from network Windows says "the application is running in partially trusted context...." and disables some of my app functionality, mostly io operations How to enable all functionality in my app, when ran from network? (I am using VB.NET) TIA ...more >>

RSA Conversion Issue
Posted by peter NO[at]SPAM mclinn.com at 10/13/2004 7:24:19 AM
I've encrypted the contents of a textbox using RSA encryption with no issues but when I try to decode the message in another application I'm getting a 'bad data' error. Here is the the general proceedure I'm using: VB.net 'This is how I encoded: Dim xmlPublicKey As String = "MyKeyPublic" '...more >>

SecurityPermission XP SP2
Posted by SealedClassSingleton at 10/13/2004 7:19:04 AM
Hi, I'm launching a winform app from a network share which must be run in fulltrust mode. In case the .NET security settings aren't adjusted on the workstation where the app is launched, I want to display a messagebox to contact the helpdesk in order to adjust the security settings. Code...more >>



Newbie Security layout, limited number of users and NT groups
Posted by Phil at 10/13/2004 6:47:10 AM
Hi, I have an application running on on internal network. The security we think we want to use is NT Authentication and breakdown further by determining if a particular user is in an NT group. We have 7 NT groups allowed to access the app. For each group there are only a handful of users...more >>

Client Certificate not reaching server
Posted by NRao at 10/12/2004 9:29:05 AM
Hello Everbody, I have a class lib which is accessing a .aspx on web through httpwebrequest and sending xml through post method. Server people provided me a .cer file. I am adding that certificate file to httpwebrequest. But their side they do not find the certificate. I tried following wa...more >>

HTTP Protocol Violation Underlying connection to server closed err
Posted by Rajiv at 10/12/2004 8:37:01 AM
Hello, I developed a No touch deployment client which accesses data through a web service. The application worked really well until I installed .NET framework 1.1 SP1. It worked well without the Service Pack1. But now it throws a HTTP Protocol violation. Is there any fix to this problem. I...more >>

Constructor and type permissions.
Posted by Kevin Burton at 10/12/2004 8:35:28 AM
I feel a little overwhelmed at the options available with security permissions. I have several "wrapper" classes that contain/construct specific classes. I want the wrapper classes to be the only way that these "raw" classes are constructed and accessed. So for example if I have a "wrapper" ...more >>

SubFolder Security
Posted by Mohamed at 10/11/2004 12:00:45 PM
Hi all I am using .NET FrameWork 1.1 and i include in my project a folder named "Forum" and i want that nobody can enter the forum folder wizout logining into the system the forum is a subdirectory in my project thanks ...more >>

SSO advice
Posted by Michaelr at 10/11/2004 9:45:01 AM
We are looking to implement Single Sign On (SSO) for our intranet and other internal applications. Our plan is to have an ASP.NET “portal page” which will examine the WindowsIndentity of the IIS-authenticated user, and present links for the applications that the user has authorization....more >>

Method to determine permissions required by my application.
Posted by pradeepkumar.t NO[at]SPAM gmail.com at 10/11/2004 5:26:06 AM
I have just forayed into the world of CAS. Presently I am determining which permissions are required by my application which runs in a partially trusted environment. I find it tough to determine which permissions are required by my application. Of course it would seem intuitive that as the appli...more >>

Signing COM DLLs with Strong Name
Posted by Lisa at 10/10/2004 11:05:04 PM
Hi, I am facing a problem regarding signing COM DLLs with strong name. I have a VB COM DLL (lets call it A) which references another VB COM DLL (say B). I am referencing the DLLs A and B in my .NET Class Library (say NETApp). The assembly NETApp.dll is signed with strong name. Since, NE...more >>

ArgumentException with MsgBox when working with code access security
Posted by Gabriel Michaud at 10/9/2004 10:31:22 PM
Hello, Can anyone explain to me why I get an ArgumentException on the MsgBox with the following code? I'm studying for the 70-306 exam and I'm experimenting with code access security. Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Cl...more >>

Trim user input of spaces, tabs, and others
Posted by Shabam at 10/9/2004 12:32:43 PM
Is there a function in dotnet that allows me to trim user input so that: 1) It gets rid of leading/trailing spaces, tabs, newlines and whatever other non-printing characters 2) Gets rid of all tabs, newlines, and whatever other non-printing characters anywhere else, preferably replacing them w...more >>

WindowsIdentity.currentuse() dont not windows 98
Posted by Yuri at 10/8/2004 11:59:04 AM
which would be the solution to catch the name of the user?...more >>

Valid email addresses
Posted by Shabam at 10/8/2004 6:32:47 AM
I have a form that takes in a series of comma-delisted email addresses. The system needs to check that each mail is a valid mail, and that only certain letters are allowed. These emails are then stored in a database, where the system sends mails out to. Each user has a limit as to how many ema...more >>

Encrypt with .Net, decrypt with Crypto API?
Posted by Trevor Barry at 10/8/2004 3:47:03 AM
Hi I have some server based .Net code that creates an encrypted blob that is stored in active directory. The encryption is done with the TripleDESCryptoServiceProvider which needs an 8 byte initialisation vector, a key and the plaintext. I have .Net client side code that picks up the val...more >>


DevelopmentNow Blog