Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!


Archived Months
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007


all groups > dotnet security > march 2007

Filter by week: 1 2 3 4 5

SslSteam causes spurious http connection attempts
Posted by davidkclark at 3/27/2007 12:57:25 PM
Hello, Problem: SslStream seems to try to open http connections to various machines on the internet unrelated to the address of the SSL server requested. This fails for machines not connected to the internet and causes delays. Details: I am using the SslStream class to create an SSL conne...more >>

Setting the permissions on certificates
Posted by markus.shure NO[at]SPAM gmail.com at 3/25/2007 5:35:15 PM
Hey, is there are way to set the permissions on the certificate when it's been added to the Windows certificate repository? I'm currently using the 'X509Store' class to add certificates to the repository using the flag options to persist the private key but I'd like to be able to add them to the...more >>

Office 2007 signature line
Posted by mstrcontrol NO[at]SPAM gmail.com at 3/22/2007 9:36:10 AM
Greetings All, I'm not sure if this is the place to post, if not, please indicate me where to post it. I just got my hands on my new Office 2007 instalation disc, and everything was smoothly during the instalation. But I am a curious guy and was looking over each folder of the CD and I came...more >>

Xmldsig Countersignature DigestValue
Posted by Iguana at 3/22/2007 5:32:25 AM
Hi! How can i calculate DigestValue for Reference to signature ( ... uri="#signatureId" ...)? I try this code: xmlElement - signature from xml file; SignedXml signature = new SignedXml(); signature.LoadXml((XmlElement)xmlElement); Transform t = new System.Security.Cryptography.Xml.XmlDsigC...more >>

Authorization Manager redistribution/use on XP?
Posted by Markus Leder at 3/21/2007 6:38:43 AM
My question in summary (read further down for details): ==> Is it possible to install, use and redistribute AuthorizationManager (DLL and MMC) within a custom product also on XP? --- In a previous project we successfully used Windows 2003 AuthenticationManager (AzMan) for fine-grained ...more >>

Digital Signature on E-mails with .NET 1.1
Posted by Diego Marcet at 3/20/2007 1:54:18 PM
Hi! I've been looking for a way to digitally sign an e-mail with .NET 1.1 and I haven't been able to find any way of doing this except by buying a third party product or using CDO/OOM/ExtMAPI. I read somewhere that an e-mail can be signed by attaching a pk* file, is this true? is ...more >>

Creating a PKCS#7 from a PKCS#1
Posted by gherme at 3/17/2007 10:59:39 AM
Hi, Could anyone tell me if it's possible to create a PKCS#7 from a previously generated PKCS#1, using a keypair ( the PrivateKey) and the CryptoAPI? Or is this a bad aproach to the rigth way to get a PKCS#7 using just the KeyPair (without certificate) and CryptoAPI? I'm in the way to begin ...more >>

is there some location (c.f. [CommonAppData]) where even limited users can modify/write files?
Posted by Bob Eaton at 3/16/2007 12:00:00 AM
I'm having trouble porting something to Vista because my C# assembly (in the global assembly cache) needs to have a location where it can read/write/modify a file. With Administrator accounts, it works fine, but with a limited account it can't write to the location where the file is stored ...more >>



Removing the "Inherit permissions from parent" from an NTFS folder using System.Security.AccessControl
Posted by Rahul at 3/15/2007 1:02:11 AM
Hello, I am trying to remove all the ACEs present on a local NTFS folder using C# -> System.Security.AccessControl. What I want is just to remove any permission (inherited or explicit) present on that particular folder and replace those permissions with access permissions of my own. I am t...more >>

limited account permission and writing to system areas?
Posted by Bob Eaton at 3/15/2007 12:00:00 AM
I'm dealing with a security problem in a global assembly that I've created and need some guidance. The assembly is used by many different client programs, so the installer of each one installs it in the Global Assembly Cache (which may end up with multiple versions in a side-by-side fashion...more >>

what encoding does system.xml.xmldocument.save(string path) use to save the xml document if there is no <?xml... in the front of the xml document?
Posted by Daniel at 3/14/2007 9:13:29 PM
what encoding does system.xml.xmldocument.save(string path) use to save the xml document if there is no <?xml... in the front of the xml document? ...more >>

WindowsIdentity - Invalid token; it cannot be duplicated
Posted by Kamal at 3/14/2007 6:39:13 AM
I am having invalid token, it cannot be duplicated error 70% of the time on one machine. We are creating and validating the current user. The following line of code raise exception. System.Security.Principal.WindowsIdentity winIden=new System.Security.Principal.WindowsIdentity(iToken); ...more >>

AzMan AccessCheck problem with Active Directory Groups
Posted by hocky.johansson NO[at]SPAM gmail.com at 3/12/2007 5:58:38 AM
I have trouble using AD groups assigned to Roles in AzMan. The AccessCheck function works great when I assign AD Users direct to AzMan Roles. If I put an AD User into an AD Group then assign the AD Group to my Role in AzMan the AccessCheck always return false?!? AD is running on one 2003 server...more >>

How to authenticate the client of my assembly
Posted by adriano.labate NO[at]SPAM romandie.com at 3/12/2007 1:46:17 AM
Hi, I am really new to .NET security. I hope that someone could help me or give hints to resolve this quite simple problem : I have to develop a .NET application that will connect to a database. The assembly has to be called by a .NET Windows service issued by a partner. I want to be sur...more >>

Encrypted XML in framework 1.1
Posted by Kim H at 3/12/2007 12:00:00 AM
I have been working with signed XML in .NET framework 1.1 using the SignedXml class. Now I also have to handle signed and encrypted XML, but does framework 1.1 support encrypted XML at all? I can see .NET 2.0 does, but I have my doubts about 1.1. Thanks, Kim ...more >>

Windows authendicate
Posted by Johnny E. Jensen at 3/9/2007 7:34:42 PM
Hey I'am writing a Windows application using C#. I would like to do this: Application Start: Is User Authendicated (windows) does user exists in Administrators or in MyAppGroup ( MyAppGroup = the AD group for users running the application) If IsUser Authendicated = False or not...more >>

RSACryptoServiceProvider minimum key-length
Posted by wip NO[at]SPAM pdi.at at 3/9/2007 3:51:07 AM
hi, i have to use RSA within .net 2.0 and i have to use a 256 bit key- length. RSACryptoServiceProvider requires a min. length of 384 bit. my current solution-ideas are: s1.) use the RSACryptoServiceProvider and bypass the min. length with reflections are some similar hack. s2.) use a thi...more >>

.NET CAS vs OS security
Posted by DXRick at 3/8/2007 4:39:08 PM
I decided to test an encryption program I wrote to see what the different types of permission tests actually do when running the application from a restricted user account. I found that if the user attempts to write to a file at "C:\" I end up getting an application exception only at the poin...more >>

Exception applying Digital Signature in VS.NET
Posted by alexpicchio NO[at]SPAM tiscali.it at 3/8/2007 3:01:51 AM
Hi! I'm trying to apply a digital signature using a SYSGILLO CSP Provider in the Visual Studio .NET environment (framework 1.1/2.0). When I run the following code, the program prompts me for PIN and then I receive the following exception at the last line of the code below (rsa.SignData). A...more >>

File / Folder security
Posted by Waleed Zahran at 3/7/2007 6:20:39 PM
Dears, We used to use permchecker.hassaccess (DLL Component) to check if the user has access to a specified file in ASP, is there anyone who knows how to check if the logged user has access to open a specific file/folder using ASP.NET or C#.NET? Thank you in advanced. yours waleed za...more >>

Can't get basic encryption to work
Posted by DXRick at 3/5/2007 11:05:27 PM
I am just trying to encrypt some data and am pretty much copying the code that the MSDN docs have for the RijndaelManaged class: RijndaelManaged cryptAlg = null; MemoryStream mStream = null; CryptoStream cStream = null; StreamWriter sWriter = null; try { cryptAlg = new RijndaelManage...more >>

Permission issue: Accessing AzMan store in ADAM from ASP.NET worker process
Posted by chen at 3/2/2007 1:09:59 PM
Running into a problem that fails in the AzAuthorizationStoreClass.Initialize call with "The system cannot find the file specified. (Exception from HRESULT: 0x80070002)". I've followed the "How To: Use ADAM for Roles in ASP.NET 2.0" to setup ADAM & AzMan store [http://msdn2.microsoft.com/en-us...more >>

SQL Server AD Authentication
Posted by RichieRich at 3/2/2007 4:18:26 AM
I need to use the Enterprise Library to access SQL Server 2000 database however the SQL user has to be an AD user because the DB server is setup for Windows authentication only. This is a ASP.NET web app using the 1.1 Framework. Am I in the right place to ask for ideas on how to configure ...more >>

AD-authentication with custom roles in SQL-db ?
Posted by Reinhard at 3/1/2007 11:29:29 PM
I am writing an asp 2.0 website where existing AD users can log in. I am using ActiveDirectoryMembershipProvider for this task and it works. Now I need to define roles for these users (admin, author, user...) These roles are not defined as groups in AD (in fact there could be other web-applic...more >>

Prevent plugin assemblies from running naughty code
Posted by Ben Daniel at 3/1/2007 9:46:01 PM
Hi folks, I'm a newbie to .net and am working on my first major c# project which has a requirement of plugins. I was thinking of implementing this by loading all assemblies in a certain directory and instantiating any types derived from my base plugin type. It's a big concern that the plugi...more >>


DevelopmentNow Blog