Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!


Archived Months
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
all groups > dotnet security > november 2006

Filter by week: 1 2 3 4 5

Encrypt Email with Certificate Natively in .Net
Posted by josh NO[at]SPAM youinspire.me.uk at 11/29/2006 9:34:06 AM
I wrote the following code using the ASPEncrypt .Net Component: Dim objMail As IMailSender = New MailSender Dim strEmailAddress As String objMail.Username = "xxx" objMail.Password = "xxx" objMail.Host = "xxx" objMail.Subject = subject ...more >>


.NET Applications in Linux
Posted by sen at 11/28/2006 10:03:00 PM
Want to explore on .NET applications development and deployment in Linux for the applications currently developed and deployed in Windows XP env. Please advice regarding the setup to up done, compatiblity,.....more >>

Using Caspol to change Security Policy - Code Groups # different on different PC ???
Posted by Joe at 11/28/2006 5:23:49 PM
Hi On my pc I use Caspol -ag 1.4 Fulltrust - to change intranet setting On another pc I need to use Caspol -cg 1.2 Fulltrust - to change intranet setting Is this possible??? I want to write a utility to set Intranet to Fulltrust but how can I determine what the intranet is 1.2 or 1.4 ...more >>

Assembly Throws Network Exception...
Posted by David++ at 11/28/2006 7:08:02 AM
Hi folks, Having some trouble running a .NET 2.0 assembly from a Network Share. Assembly is on Windows Server 2003, SP1 Have installed .NET 2.0 dotnetfx Have attempted to add full trust to the network via - Caspol.exe -cg 1.2 FullTrust Does not work.. Also tried - CasPol.exe ...more >>

Code signing - recommended cerificate provider?
Posted by John Blight at 11/27/2006 1:34:01 AM
We're looking to sign not just executable files, but also Microsoft Visio template (VST and VTX) and stencil (VSS) files, and possibly drawing files (VSD and VDX), that contain VBA code. Such files may be in Visio 2002, 2003 and 2007 format. Does anyone have any recommendations for a certif...more >>

Encrypt data
Posted by crino at 11/24/2006 2:18:34 AM
Hi, i'm trying to encrypt data with a publickey exctracted from certificate file but i got error!? this is my code: using Microsoft.Web.Services3.Security.X509; using System.Security.Cryptography.X509Certificates; using System.Security.Cryptography; //exctract the key X509Certificate...more >>

Running an assembly from a shared folder on the network
Posted by João Costa at 11/23/2006 1:07:01 AM
Hello all, I have an application that runs fine locally, however when I place it on a network share it issues an exception, however this does not happen on the machine the application was developed on. I fully trusted the assembly and It worked, however the share folder sould be trusted ...more >>

Create X509 certificate in memory *without* makecert
Posted by e.loman NO[at]SPAM gmail.com at 11/22/2006 11:59:14 PM
Hi, Is it possible to create an X509Certificate in memory without pre-creating a certificate file using makecert? The thing is, I want to create a X509 certificate, with a public key and other data that is submitted by a client user, and sign that certificate. Is this possible? Kind r...more >>



Unauthorised exception using WebBrowser control
Posted by Matt Adamson at 11/22/2006 2:49:48 PM
Guys, Not sure on the best forum for this. We are getting an unauthorised exception when using the web browser control as you can see from the call stack below TestCase 'Tranmit.Sprinter.WebApp.Testing.Purchasing.Invoicing.Edit.EditInvoiceTest.EditInvoice_3' failed: System.Unauthorized...more >>

Code Access Security for Windows Service
Posted by awburns NO[at]SPAM gmail.com at 11/22/2006 8:59:13 AM
Okay, this might well be a newbie question. Sorry about the cross-post from General, but I realised this was where I should have posted. I've written a Windows service based upon the ServiceBase class. The service, and all the classes it uses are in one assembly, myservice.exe. I don't expect ...more >>

Howto encrypt configuration sections using Enterprise Library ?
Posted by dragoncino NO[at]SPAM yahoo.it at 11/21/2006 5:29:44 AM
Hello to everybody, I need to encrypt the dataConfiguration or connectionStrings section of the app.config file (using Enterprise Libary January 2006). On some sources on internet (e.g.: http://msdn.microsoft.com/msdnmag/issues/05/07/DataPoints/) I have found that there is the possibility to en...more >>

Assembly Minimum Security Requirements
Posted by Giovanni at 11/20/2006 1:23:01 PM
Hi, Using VS 2005 Pro., I have built a Class Library (DLL) with several functions, subs, etc... I would like to determine the minimum security requirements. For some reason, the "Security" tab does NOT appear when designing Class Libraries (DLL's), therefore, I cannot use the "Calcul...more >>

X509Certificate2.Verify fails
Posted by Tomasz Grobelny at 11/20/2006 12:00:00 AM
I have two X509 certificates: one issued by CA on my local network (mmc certificates snap-in->Personal->All tasks->Request new certificate...) and the second one generated by makecert (I have Root Agency certificate in my trusted CA certificate store, the certificate appears to be trusted accord...more >>

The remote server returned an error: (403) Forbidden - even with a valid verisign certificate
Posted by aswathsn NO[at]SPAM gmail.com at 11/18/2006 9:31:29 AM
Hello Folks, Here is my problem: I have a console app that is trying to connect to an asp.net webservice hosted by a third party and runs in a secure mode(HTTPS). My code is running on Windows 2000 Professional and the web service is running on Windows 2003 Server ("SERVER"). As I said the ...more >>

SignedCms.ComputeSignature(CmsSigner) - Keyset does not exist
Posted by kplkumar at 11/17/2006 6:47:16 AM
I have searched quite a bit and could not find an answer to this error I am getting. ContentInfo contentInfo = new ContentInfo(msgBytes); SignedCms signedCms = new SignedCms(contentInfo); CmsSigner cmsSigner = new CmsSigner(Certificate); // pass X509 certificate signedCms.ComputeSign...more >>

Need help with DirectorySearcher FILTER using SID.
Posted by Pucca at 11/15/2006 7:04:02 PM
Hi, I'm using vs2005, .net 2.0. I have the following method that retrieves the AD object's current login name. The search is returnning null when it shouldn't. I think there's problem with my byte array's allocation. Or maybe there's another way to do this? I saw 2.5.5.17 SID format in a ...more >>

Setting CAS Policy for WinForm control in WebForm
Posted by Neil.Smith NO[at]SPAM cityofbristol.ac.uk at 11/15/2006 2:09:15 AM
Hello, Interesting problem that someone may have an idea about. I have developed a simple windows user control that is embedded in a asp.net web form like so: <object id="Object2" classid="http://myserver/cobcapplaunch/COBCApplicationLauncher.exe#COBCApplicationLauncher.AnotherControl" he...more >>

Minimum Permissions Required to Run ASP.NET
Posted by corey.burnett NO[at]SPAM gmail.com at 11/14/2006 10:41:09 AM
I have a web server running IIS 6. The network security team here has completely locked down the server. They have installed an application called Cisco Security Agent (CSA). What CSA does is deny or allow access to certain files and folders. Currently they have it set up very restrictively ...more >>

Redirect when User is Unauthorized
Posted by David at 11/14/2006 7:43:01 AM
Hello, I am using Windows Authentication and Role based authorization to secure my web application. I would like to redirect to an Unauthorized page if a user tries to access the web site and does not have the proper credentials. I first tried adding a section to the customErrors web.conf...more >>

How do I use windowsIdentity to start a process in .net?
Posted by brett.mack NO[at]SPAM gmail.com at 11/14/2006 6:42:17 AM
Hello, and thanks in advance. I'm using the logonuser function within vb.net to obtain a windowsIdentity. Now how do I start a process using it, within vb.net? I need all functions after obtaining the windowsIdentity to use it. ...more >>

Do i need to got Https:// throught the website ???
Posted by Ananth Ramasamy Meenachi at 11/13/2006 3:36:02 AM
Hi All, An organization has a website which goes with windows authentication to access their website and this website is accessed by their employee around 60,000 and accessed with a frequency atleast once in a day or more. They use https:// throught the website, Does is necessary ?...more >>

How to decrypt CAPICOM data i .NET 2.0
Posted by Karel Kral at 11/13/2006 12:00:00 AM
Hello, I have CAPICOM encrypted data. Data cames from VB6 application (see sample bellow). Now I want to decrypt this data in VB.NET (or C#). Are there native .NET 2.0 library to decrypt CAPICOM data or I must have import CAPICOM interop and use this one? Example of VB.NET encryption: Di...more >>

how to add "Authorization: Basic" for a web service call
Posted by Ottavio at 11/10/2006 3:17:20 AM
Hello, I'm having some problems with the authentication during a web service call I know I have to add the "Authorization: Basic xxxxxxxx" in the http header (not soap header) but I can't find a way to add it. I've tryed to use ethereal to watch what I'm sending and I can see all the header (...more >>

LocalSystem network access problem
Posted by Scewbedew at 11/10/2006 2:15:01 AM
I have a C# Service running as localSystem, and that service needs to access a network share on another computer. When attempting to access the share, my service gets an "Access denied" error even though the security settings on the share should allow access. (Everyone: Read) If I run my s...more >>

IE C# ActiveX without permissons
Posted by Brutus at 11/9/2006 9:45:57 AM
Hi, I'm porting a VB ActiveX to C# .Net. The C# ActiveX is called from IE as following: <OBJECT id="myControl1" name="myControl1" classid="ClassLibrary1.dll#ClassLibrary1.Class2" width="0" height="0"> </OBJECT> The class is created and runs Ok until the following line string path = Pa...more >>

Winform: Call a vbscript with elevated privileges
Posted by Jim Andersen at 11/9/2006 12:00:00 AM
I am making a .NET 2.0 WinForms application. It lets a "normal" user select one or more scripts to be run with Admin (sort of) privileges. And their actions get logged in a database. How do I run a script as another user? It's not super secret stuff we are talking about. Embedding the nam...more >>

How to show the windows 'Connect To' dialog from C#
Posted by Brad Marshall at 11/8/2006 11:16:02 AM
I am trying to build an application that uses Active Directory to perform authorization and authentication. The client application is a windows forms 'smart client'. The client application needs to get the System.Security.Principal.WindowsIdentity.GetCurrent().Token and send it to the middle...more >>

FullTrust on network drive
Posted by Martin Hart at 11/7/2006 6:25:48 PM
Hi: I am trying to run a .NET 2.0 app from a network drive, but I'm getting an error on startup. I have configured the .NET security as follows: My Computer / Runtime Security Policy / Machine / Code Groups / All_Code / LocalIntranet_Zone = FullTrust I think the problem is that I'm usi...more >>

Code Access Policy Zone Problem
Posted by Fran Parker at 11/7/2006 3:04:36 PM
Hi, I'm having a problem related to Code Access Policy zones. I have a .NET 2.0 executable that when run directly from a local drive letter (e.g. c:\Test\MyEXE.EXE) works just fine. However, if I share the folder that the EXE is in and then attempt to run it through the share, it will fail t...more >>

SIgning a dll after compilation
Posted by Hagay Lupesko at 11/7/2006 2:51:59 AM
Hi all, I need to sign a dll after it was compiled and linked. Is this possible? Thanks, Hagay. ...more >>

Why am I getting errors when I want to rebuild the TreeView contro
Posted by Pucca at 11/6/2006 12:48:02 PM
Hi, I'm able to get the Domain object using GetDomain . I want to rebuild my tree using this new domain so I pass in the new DNS. I update that in the DirectoryEntry object's path. But I'm getting the following error message: DirectoryServicesCOMException(ox8007202B): A referral was return...more >>

User creation....
Posted by Joe at 11/6/2006 12:26:02 PM
I am fairly new at .NET programming so excuse this basic question. I have an application that I would like to create a user in AD with based on a Template account that exists. The information about the user will be provided by a provisioning database. My problem is I am not sure of the best...more >>

Login error when opening a deployed project
Posted by chris at 11/6/2006 9:20:38 AM
I've developed a Windows Forms Application in Visual Studio 2003. I built an MSI package using the setup and deployment projects setup wizard. I ran the MSI package on my machine (where I developed the application) to install it and I can run the application just fine. I deployed it on another m...more >>

Is there a function that I can call to validate a domain?
Posted by Pucca at 11/5/2006 2:45:01 PM
Hi, I'm using vs2005 and C#. In my application I am allowing the user to enter a string representing a domain that they would like the appl to connect to and build a TreeView control based on AD objects in the domain that they entered. Is there a function that I can call to validate the stri...more >>

Forms Authentication with Active Directory, login control crashes
Posted by etierra at 11/3/2006 8:11:02 PM
Hi, I'm developing an ASP.net 2.0 application that use Forms Authentication. I’m using the login control that came with V.S. 2005. I configured my web.config to use Active Directory Membership/Authentication. Everything works fine. I can login using the correct username and password, and...more >>

Security Exception
Posted by Danilo Rizzo at 11/2/2006 2:40:07 PM
I developed a c# console application, but when i run this application i have this result: Exception not handled: Syste.Security.SecurityExceptions: StrongNameIdentityPermission Can you help me?! i have signed my application in this way: sn -s sn.snk and add path in assembly.cs If i t...more >>

Is all .NET assembles are vulnerable to decompilation ?
Posted by vighnesh at 11/1/2006 12:00:00 AM
Hi All Is there anyway to protect .NET assemblies from being decompiled ? As I came to know that there is a tool called .NET Reflector to decompile the assembly to Source code. Does this mean all .NET assembles are vulnerable? If not Please advice, how could we protect from decompilation.a ...more >>


DevelopmentNow Blog