all groups > dotnet security > september 2005 > threads for september 1 - 7, 2005
Filter by week: 1 2 3 4 5
Are .NET Caches Secure from Memory Dumps etc?
Posted by WebDev01 at 9/7/2005 11:21:02 PM
I'm curious to know if sensitive data I store in, for example, the
HttpApplicationState, is safe from being obtained by non-authorised users?
If it is not safe, how does one go about accessing the information?
Mini-dump to examine stacks and heaps etc?
Basically I use the registry to stor... more >>
WindowsPrincipal in a component used in classic ASP always returns the same identity
Posted by radomil at 9/7/2005 5:36:06 AM
Hi
I have created a component in .NET to use in a classic ASP application
on an intranet. It should use the Windows authentication and
WindowsPrincipal.IsInRole() method to check which groups the user
belongs to:
....
AppDomain ad = Thread.GetDomain();
ad.SetPrincipalPolicy(PrincipalPolic... more >>
Refresh .Net Framework policy
Posted by tanguy at 9/7/2005 2:36:03 AM
Hi,
I need some info after strange behavior from .Net Framework security update...
I developed an activeX in C# (ie: a dll) and I need now to allow this
activeX to run on the client computers without any manual action (such as
configure the .Net framework policy). I create an exe file whic... more >>
Encrypting Logon Passwords
Posted by Larry Williams at 9/6/2005 5:16:37 PM
I've got a few posts that are all related but I've gotten a little farther
and figured I should make a new post.
I am writting a VB dotNet program that has to restart the PC halfway
through. In order to ensure it restarts with the same userid and password I
have to setup the following re... more >>
Windows service and Certificate
Posted by Laurent at 9/6/2005 11:54:48 AM
Kikoo,
Je cherche un exemple de code de service windows qui utilise un
Certificat X509, sans avoir besoin de se logger dans windows.
Je me galère avec l'API Crypt32.
Merci.
Hello,
I'm looking for a code sample in for a windows service which use a X509
Certificate without login on ... more >>
Failure Audit errors on device name
Posted by srikash at 9/6/2005 9:18:26 AM
Hi
I'm testing a vb.net console application that's kicked off by a
scheduled basis on hourly basis. I'm using Enterprise Library mainly
for Data access & logging. I have recompiled the source code leaving
out instrumentation functionality as it's creating quite a few security
violations.
T... more >>
File Permission System.UnauthorizedAccessException
Posted by Tom at 9/6/2005 12:00:00 AM
Hi friends
I am trying to modify a file on my computer but I get an error which says
the following. "System.UnauthorizedAccessException: Access to the path.
I also tried FileIOPermission
FileIOPermission fio = new
FileIOPermission(FileIOPermissionAccess.AllAccess, paramMP3.fileComplete);
... more >>
HttpWebRequest & https
Posted by Sharon at 9/6/2005 12:00:00 AM
Hi all.
When using WebRequest.Create("https://...")
Is the communication secured?
Also, when using Msxml2.XMLHTTP.3.0 open method
with https protocol in the url, is the communication secured?
The second question is not dot net related, but if you
know the answer, I'll appreciate it.
Thanks.
... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
How to protect *.mdb file from direct access by client
Posted by AJang at 9/5/2005 4:32:04 PM
In windows 2000, we can map file extention ".mdb" to 404.dll (which IIS
lockdown installed) to protect
microscodt access databases from direct access by client.
In Windows 2003 server, the above method do not work. In fact we can't
register 404.dll at all.
In Machine.Config, we add
<add ... more >>
Patterns for security
Posted by STom at 9/4/2005 3:27:14 PM
I have several clients that are entering into situations where credit card
information is flowing through their system. So from a public web server, a
person enters their credit card information, the information must flow to an
application server (possibly even through BizTalk) and then onto e... more >>
Possibtl to Create a Code Group Programmatically?
Posted by n_o_s_p_a__m NO[at]SPAM mail.com at 9/2/2005 9:00:16 AM
Hello,
I am hosting a user contol from a project of type windows control
library inside an asp.net page (using the object tag). This control
communicates with a Web service.
I am able to get it working only if:
A) I create a custom code group with the 3 permissions: Web Access,
Security,... more >>
CredentialCache.DefaultCredentials is empty
Posted by Sam Santiago at 9/1/2005 2:31:48 PM
Are they any common reasons why the credentials object returned from =
CredentialCache.DefaultCredentials would be empty - use name and =
password are the empty string? I am writing an Office Add-In and this =
call is not retrieving the user's login as specified in the =
documentation.
Tha... more >>
security warning with https
Posted by Hatim Ali at 9/1/2005 9:05:30 AM
Hello folks,
I've integrated my ASP.NET website with a portal on web. My website opens in
a frame provided by the web portal. The portal uses https protocol. Now when
i open my website IE displays a security warning saying "This page contains
both secure and un-secure items. Do you want to ... more >>
LsaStorePrivateData and VB .Net
Posted by Larry Williams at 9/1/2005 6:22:05 AM
I'm trying to setup an automatic logon process. I've gotten this to work in
VB.Net and setting the necessary registry entries. However I don't want the
password to appear in the registry and was told in another post that I should
use LsaStorePrivateData
(http://msdn.microsoft.com/library/d... more >>
Single sign on in asp.net
Posted by Suman at 9/1/2005 4:07:02 AM
Hi,
I am facing some problem using ADS Single On to program from ASP .Net pages.
The scenario is: User has logged onto Windows using AD profile. My asp .net
application, while launched, needs to know the profile already logged in and
use the credential for rest part of my application. ... more >>
|