Groups | Blog | Home


Archived Months
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007


all groups > dotnet security > march 2006 > threads for march 1 - 7, 2006

Filter by week: 1 2 3 4 5

Can't access Process.Modules from my win form.
Posted by John Fang at 3/6/2006 8:13:12 PM
I'm trying to create a simple Process View. But when I'm accessing Process' Modules proeprty, I get a access denied error. How do I get around this code access security restriction? John ...more >>

Can't find CryptImportKey in .NET !!!!!
Posted by zabutimaxim NO[at]SPAM gmail.com at 3/6/2006 1:43:25 AM
Hi, I can't find analog of CryptImportKey API in System.Security.Cryptography. I have application which using CryptImportKey API and all the customers already has encrypted data which encyrpted with some blob key that my application imports using the CryptImportKey. Now I want to rewrite...more >>

ClickOnce problem - different computed hash specified in manifest
Posted by Nhu Huynh at 3/6/2006 12:00:00 AM
Hi, I tried to deploy a Winform application using ClickOnce to a Web server. The deployment process was completed successfully. However, when i tried to install it from the Web server, it fails with the following exception: Activation of http://hcm-ctl1/ABCApp/ABCApp.application resulted in...more >>

Repost: How to protect ADO.NET connection string under WindowsForm
Posted by MilanB at 3/5/2006 3:03:01 AM
Sorry, for repost, but there are no suggestion for this problem solving: Any suggestion please: //------------------------------------- Hello I build WindowsForm application, that use MS Access database. I wish to protect AccessDB password that I use in connection string. Application will ...more >>

Client Authentication
Posted by bwardulv at 3/3/2006 5:24:05 PM
Hello, I received a certificate from a customer to access their web service. I installed the certificate which ends up in the "current user - other people" store when you select "Automatically select the certificate store based on the type of certificate". The certificate was issued by a ...more >>

Need a secure web based database application setup recommendation.
Posted by rjames.clarke NO[at]SPAM gmail.com at 3/3/2006 6:33:12 AM
I am writing an application that is web based. I am planning to use .NET with SQL Server as the database. The client will be desktop, and not browser based. It will allow multiple companies to access their data from central database. The client companies will be entering a lot of varied dat...more >>

authentication best practices
Posted by Perecli Manole at 3/3/2006 5:20:13 AM
I have a "click-once" windows forms application distributed to many clients. This app uses web services behind the scenes to populate sensitive company data. I want to make this application behave similarly to a web application in the following ways: 1. User needs to authenticate before use ...more >>

.NET 1.1 security policies broke after installing .NET 2.0
Posted by Perecli Manole at 3/3/2006 5:09:13 AM
I have an ActiveX control written in .NET 1.1 imbedded in several web pages on our Intranet. I used .NET 1.1 security policies to basically make this control safe to all the client machines in our domain. When .NET 2.0 came out I noticed that every machine that installed .NET 2.0 caused the se...more >>



HttpWebRequest using Certificates
Posted by Josef Brunner at 3/3/2006 12:00:00 AM
Hi everybody, my VB.NET (Framework 2.0) client application has to do a HttpWebRequest (for reading web-pages and downloading files) on a web server. The server uses a self-signed certifiacte and the client application should also use a self-signed certificate (of course, signed by the same ...more >>

File IO Permissions
Posted by Aaron Sellers at 3/2/2006 5:05:56 PM
Hi all, I am trying to write a piece of code that will allow me to check if the current user has permission to access (read, write, etc.) a certain folder before I try to access it for the read, write, etc. I tried to use FileIOPermission class and the Demand method, but it doesn't appear...more >>

How do I map between UnicodeEncoding in .net 1.1 and 2.0 (serious issue)
Posted by Morten Petteroe at 3/2/2006 3:44:06 PM
Hi, I am having big problems using unicode encoding (even when i specifically make it UTF-8 instead of UTF-16) when generating hashes. I use hashes for checking requests for tampering, as well as hashing password for storing in a database. My problem is that the same hash generation met...more >>

Security Error over LAN
Posted by Mike Griffin at 3/2/2006 1:49:22 PM
I wrote an internal tool for our program using .NET 1.1 C# that accesses MS Access DBs on the LAN and an INI file in the same directory as the app. Before we had a change, I was able to get the app to work by utilizing our IT's decision to promote the LocalIntranet Zone to FullTrust in the se...more >>

Resetting AD Password
Posted by Rik Brooks at 3/2/2006 10:23:27 AM
I'm writing an ASP.NET app using .NET 2.0. I'd like to be able to allow my help desk personell reset the AD password for a user in case that user forgets their password. I need to be able to do this without a password question. The reason that I can't use the password question and answer is ...more >>

Private key generation
Posted by Francesco at 3/2/2006 2:31:25 AM
Hi, I've read that in a certificate request the private key is generated by CA and then sent to requester. (http://technet2.microsoft.com/WindowsServer/en/Library/d7cd44f4-b39a-4d35-bb56-a239f72b7e4c1033.mspx) Is this correct? I believe that private and public keys are created by client (...more >>

Does Web sites which designed by .NET support Run as feature?
Posted by Microlong® at 3/2/2006 12:43:27 AM
Firstly, I have security group which named SGA. Secondly, I have a account which named TEST. It is a doman account. I developed a Web site which integrated Windows Authentication and I want to all users that should join in SGA can access this web site. After end user logins successfully, What ...more >>

Problem with ClickOnce and App_Data folder
Posted by Nhu Huynh at 3/2/2006 12:00:00 AM
Hi, We have a medium .NET 2.0 Windows Application (WinForm) project which has an App_Data subfolder in it. Now we want to deploy that WinForm app using ClickOnce with Web deployment strategy. Our problem is once the project is published on the Web server, there is no way the App_Data can be a...more >>

Separate authorization from login
Posted by Marc at 3/1/2006 5:17:31 AM
A common computer will be used by multiple users with different levels of trust and authorization to run an application. Although it will be a WinForms app the front end security will be more like a web app. A person will go up to common computer that has windows running and launch app and pr...more >>

WebClient using Certificate Auth
Posted by Josef Brunner at 3/1/2006 12:00:00 AM
Hi everybody, we need to have our application access a web server and download files etc. from it. Is there a way that the WebClient object can use a client certificate to authenticate against the web-server? If not, what would be "the second best" way to do client authentication? (I kn...more >>

protect physical file
Posted by beachboy at 3/1/2006 12:00:00 AM
Hello all, I have a private section for members, and all page contents are protected by login. Is any way/method I can protect all files (doc, jpg, pdf) from physical access, e.g: user can type the full path in address bar on IE, then they can view the doc. C# | .NET Framework 1.1 Thank...more >>


DevelopmentNow Blog