Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!


Archived Months
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
all groups > dotnet security > february 2007

Filter by week: 1 2 3 4

ADAM / AD Proxy Bind
Posted by Rod Clingaman at 2/28/2007 11:13:21 AM
I am working with ADAM and have successfully setup a user using the Proxy Bind Redirection with AD, based on the MSFT step-by-step guide. Is anyone aware of how to setup up the Proxy Bind for users in ADAM programmatically? I have written VBS scripts to set up non-binding users, OUs, set attribute...more >>


CAPICOM problem with .NET 2.0
Posted by efrolov NO[at]SPAM gmail.com at 2/28/2007 7:04:05 AM
RSACryptoProvider creation problem: I used some code for RSACryptoProvider creation with smart card and CAPICOM COM object The code worked well in Framework 1.1 but when I tried the same code in Framework 2.0 I got an following Cryptographic exception: "Unable to open the access token of the c...more >>

Program crashes when running accross network, but fine when on pc
Posted by Camper Joe at 2/26/2007 7:25:03 AM
Hi Our application crashes when running it from a remote pc (\\server\app\app.exe), but when I run it from my pc (c:\app\app.exe) it is fine. It seem to happen when we use ADO.Net Any ideas? Thanks...more >>

A cryptography solution for a client/server winforms app
Posted by DXRick at 2/22/2007 2:35:46 PM
Hi, I am learning C#, .NET 2.0, and Winforms to learn the things that are covered by the MCTS exam 70-536. I am writing a client server Quicken like application where the user's account files are saved on the server. I am now looking at encryption for the sending of the user data between the...more >>

Fail to access to networked folders
Posted by Speech Lover at 2/21/2007 3:46:08 PM
I am using ASP.NET 1.1. I am trying to manipulate remote shared folders and files through UNC format. For example: //server/dir1/abc.txt When I ran my c# code, I got an error: Unknown user name or bad password When I searched the Internet and it appears I can use Impersonate to change...more >>

Determing security demand for ServiceDescriptionImporter()
Posted by Keith Patrick at 2/21/2007 3:34:38 PM
I'm trying to create an instance of System.Web.Services.Description.ServiceDescriptionImporter (in .Net 1.1) in an assembly that refuses all permissions and then requests the individual ones it needs. Problem is, when I do this, I get a security demand as soon as I call the method that conta...more >>

web app - strong named assemblies
Posted by Dav at 2/20/2007 9:12:00 PM
I have several business layer assemblies that I would like to share in several different web applications. I plan to strong name them and install them in the GAC. My understanding is the web applications run with Full Trust and will be able to call methods in the business layer assemblies. ...more >>

Impersonation in non domain member server
Posted by Johann Granados at 2/19/2007 4:08:49 PM
Hi everybody, I'm developing an ASP.NET application which calls business components in a remote server located at the DMZ (this is, a non domain member server). The problem I'm facing is that because the server is not a domain member, it is not able to access the active directory in order ...more >>



Remove Downloaded updates before install?
Posted by Disconnected at 2/16/2007 6:36:02 PM
I have been experiencing conflict between Flash 9 and .NET2 programing parameters! I believe that the critical security updates that Microsoft is downloading into my P.C. are the problem! (and not the cure they are touting them as!) I have always trusted msn security and have my P.C. set to r...more >>

A twist to "Logon User at Domain"
Posted by Radek.Jedrasiak NO[at]SPAM gmail.com at 2/16/2007 4:33:05 AM
Hi all, just scanned the postings and i'm alittle suprised. There seams to be no way, to make a user logon/authenticate at a domain WITHOUT the user making his username AND PASSWORD available to the application initiating the logon/ authentication process.... Is that right? I'm referi...more >>

Validate certificate
Posted by Cris at 2/15/2007 9:35:05 AM
Hi, First of all, i must tell you I'm so newbie in this fields. I've some knowledge, but it's not so much. I have a SOA architecture in .net 2.0, i have a frontend made in PHP. The users access to frontend using a smartcard that has a certificate x509v3. The frontend read this and send to ...more >>

Unable to run external program exe's
Posted by Taps at 2/15/2007 8:50:34 AM
Hi, Wanted to deploy a console application and give it the least amount of privileges to run successfully. It calls some other 3rd party programs like gpg.exe, wsftppro.exe. These programs are all installed on the machine. The console app calls these programs fine if I use my credentials (Ad...more >>

Request.UrlReferrer + IE7 + "Invalid Certificate" = bad news
Posted by CynicalIrony NO[at]SPAM gmail.com at 2/15/2007 8:10:57 AM
Currently we are working on a secure application (SSL, Client Certs all that good jazz) when we discovered IE7 has an issue reporting the referring url when an Invalid SSL certificate is encountered. The solution we have come up with will pass a hashed value as a querystring to the validation ap...more >>

How to generate validationKey ??
Posted by Bragadiru at 2/15/2007 12:00:00 AM
Hi all, I want to protect my web.config - connectionStrings section like in http://msdn2.microsoft.com/en-us/library/dtkwfdky(VS.80).aspx - with RSAProtectedConfigurationProvider. But i don't want to use the decryptKey+validationKey from that example. How can I generate my own keys ? An ...more >>

RsaCryptoServiceProvider doubt
Posted by Victor Pereira at 2/14/2007 4:48:26 PM
Hi, I have a certificate and it's private key. I'm accessing my certificate and my private key using the X509Certificate2. My problem is: I can't pass to the RsaCryptoServiceProvider class my Private and Public key. How can i do it ? Thanks in advance, Victor ...more >>

How to bypass Forms Authentication on selected pages programmatica
Posted by ajmehra at 2/13/2007 10:52:00 AM
Hi I am trying to bypass Forms Authentication on certain pages programmatically. Any thoughts will be appreciated. Thanks, AJ...more >>

Do any microsoft buildtime dependancies C#/C/c++/VB/etc. need to be updated for the 2007 policy on daylight savings time?
Posted by Daniel at 2/12/2007 7:49:56 PM
Do any microsoft buildtime dependancies C#/C/c++/VB/etc. need to be updated for the 2007 policy on daylight savings time? I know the OS needs to be updated but I care now about C libraries, .net binaries, etc. that microsoft maintains which have coded in them logic around datetime. e.g. the C...more >>

Client Certificate Selection
Posted by CynicalIrony NO[at]SPAM gmail.com at 2/12/2007 2:00:01 PM
I have what I hope to be a simple question. I'm currently working on a project that uses IIS to request a Client Cert (X509) from a CAC/ Smartcard. However, we want to get away from IIS mandating this requirement and have ASP.NET (C#) request this cert from the client. Is there anyway in .NET to...more >>

Books on .net security
Posted by Bill Gower at 2/9/2007 10:05:56 AM
What is the best book out there right now on .Net Security? I am looking for something that covers more from the developer angle and is current. Bill ...more >>

Client certificates do not show up installing the last Root Update
Posted by claudio at 2/9/2007 3:24:00 AM
After having installed the Jan 31st 2007 Root Update on Windows 2003 Server I've lost the possibility to use almost all my client certificates when accessing https pages of web sites on my machine. Only certs from a given CA are displayed. Not those from my local CA for instance. The CA ce...more >>

Could not establish secure channel for SSL/TLS.
Posted by mikem at 2/8/2007 6:56:20 AM
I am trying to make web service calls via HttpWebRequest to a secure server that requires a client certificate. The server appears to be a Sun-ONE-Web-Server/6.1 and I am told that they are using a Nortel SSL accelerator. The client is an ASP.NET application running on IIS6 / windows 2003. I ...more >>

Display of encrypted data
Posted by ASchuetze at 2/7/2007 10:29:19 PM
Hi, id like to know why sometimes encrypted data looks like the 'normal' encrypted stuff (e.g. Z€Õ1Ù0}“Oy1Çø¡D+[‹Uö¶’XNb¹CnÁŠ€h}°ì˜_œ ̏ƒ=]œ{qÅ) and sometimes the are nearly only squares if I use the default-windows-editor to view within the file. And thi...more >>

Impersonation in .NET 2.0
Posted by Markus Eßmayr at 2/5/2007 2:23:44 PM
Hello! In my application I need to impersonate a user whose credentials (username, domain, password) are stored somewhere in an encrypted form. My research in MSDN and other internet resources always showed the need of importing the "LogonUser" function via P/Invoke for creating the handle t...more >>

Retrieving the private key associated with a certificate
Posted by cRCaT at 2/5/2007 12:47:03 PM
Hi, I have a problem getting the private key associated with a certificate I get using IEnroll interface. After retrieving the certificate I want to use an RSACryptoServiceProvider to digitally sign content. I need either the private key data or the PrivateKey property of the X509Certificate...more >>

windows defender
Posted by steveg114 at 2/3/2007 2:45:00 AM
try to remove unwanted items but error 0x8050800f shows ...more >>

Defender has to be turned on every time computer is turned on
Posted by lucky613 at 2/2/2007 2:55:02 PM
Last week Live One Care said my subscrition was expired. Live's site shows it is not. Now it shows status as good, however, when I open Live One Care, Defender is no longer there, and every time I boot up my pc, I get a message that Defender is not turned on. I click on the option to turn o...more >>

Any chance to differ local group or domain group from windowsIdentity groups?
Posted by DAXU NO[at]SPAM HOTMAIL.COM at 2/2/2007 7:00:42 AM
Hi, When a user belongs to local admin, but not domain admin group, can I still use windowsidentity.groups or windowsprincipal.isinrole? The thing is that I need to make sure that the user belongs to domain admin group(the builtin administrators group in a domain). If I use windowsIdentity ...more >>


DevelopmentNow Blog