Monthly Archives: May 2008

SQL Server Security Best Practices

Posted on May 28, 2008 by Dominick Baier

Bob wrote me an email as a response to this post. He also directed me to this whitepaper he wrote about SQL Server Security. Interesting read!

Posted in Uncategorized | Leave a comment

OpenID Phishing Demo

Posted on May 26, 2008 by Dominick Baier

Funny and educational: http://idtheft.fun.de/

Posted in IdentityModel | Leave a comment

System Accounts and SQL Server 2005

Posted on May 26, 2008 by Dominick Baier

I recently ran into a strange situation – I was expecting an “access denied” but it didn’t happen (yes – security guys are strange people ;). Here’s the long story: I was writing some test code for LINQ to SQL … Continue reading →

Posted in Uncategorized | Leave a comment

Avoid unhandled Exceptions in WCF Error Handlers

Posted on May 23, 2008 by Dominick Baier

The IErrorHandler interface in WCF allows to write some central error handling code that gets invoked whenever an unhandled exception bubbles up from your service. There are two methods to implement: ProvideFault – called on the request thread to turn … Continue reading →

Posted in WCF | Leave a comment

How to change validity period of issued certificates in Windows Certificate Services

Posted on May 18, 2008 by Dominick Baier

http://support.microsoft.com/kb/254632  

Posted in Uncategorized | Leave a comment

Two important Security changes in .NET 3.5 SP1

Posted on May 15, 2008 by Dominick Baier

Shawn details the two big security changes in .NET 3.5 SP1 on his blog: Strong Name Bypass Full Trust on the Local Intranet We have discussed both changes internally – and I have mixed feelings about them. I guess the … Continue reading →

Posted in Uncategorized | Leave a comment

Improved IisRegMgmt

Posted on May 14, 2008 by Dominick Baier

Thanks to CarlosAg from the IIS team, I was able to improve my tool for registering IIS 7 management modules. IisRegMgmt01.zip

Posted in Uncategorized | Leave a comment

P2P and WCF: The PeerName Tool

Posted on May 14, 2008 by Dominick Baier

To play around with peer name registration and resolution, I wrote a little tool that makes this easy (yes – I know all this functionality is also available via netsh – but I wanted something more specialized). Registering Resolving PeerName.zip … Continue reading →

Posted in WCF | Leave a comment

Using IdentityModel: Tracing

Posted on May 12, 2008 by Dominick Baier

While reading through some of the code of System.IdentityModel, I noticed that there is some diagnostics tracing going on. Just add a trace listener for the source ‘System.IdentityModel’ to your config file. HTH

Posted in IdentityModel, WCF | Leave a comment

P2P and WCF: Some Resources

Posted on May 2, 2008 by Dominick Baier

If you want to know more about P2P and its related protocols and components, here’s a list of online resource I found useful while researching: P2P team blog Peer Channel blog Peer Channel protocol specification P2P on TechNet Teredo “The … Continue reading →

Posted in WCF | Leave a comment