Category Archives: Uncategorized

Windows Integrity Mechanism

Another very interesting security feature (even revolutionary for Windows) in Vista/2008 is mandatory access control (as opposed to discretionary access control). Michael just posted the link to the new technical reference. Enjoy.

Posted in Uncategorized | Leave a comment

Windows Service Hardening

I am pretty impressed with the changes and new features for good old NT Services in Vista/Server 2008. My favourite feature is, that every service can now have a distinct SID that can be used to ACL kernel objects. Imagine … Continue reading

Posted in Uncategorized | Leave a comment

New WCF Security Samples

Justin wrote me an email this morning: “Dominick, I hope you are well. There are several new WCF-security samples posted at http://wcf.netfx3.com/files/53/default.aspx (today) I thought you might be interested, especially if you are planning on writing that WCF security book…” … Continue reading

Posted in Uncategorized | Leave a comment

WCF Security Webcast

Im Rahmen der WCF/WF Webcast Serie auf MSDN Deutschland haben Christian Weyer und ich einen Webcast über WCF Security gemacht. Der ist jetzt downloadbar. Viel Spass!  

Posted in Uncategorized | Leave a comment

Hit by Identity 1.0

I am moving soon to another city – that means I will have a new address, new telephone number etc. I realized at how many sites I have to change my details (e.g. for delivery). Wouldn’t life be much better … Continue reading

Posted in Uncategorized | Leave a comment

Information Card Kits for ASP.NET and HTML

Microsoft just released two kits to make it easier to integrate information cards into HTML and ASP.NET based applications. woohoo. A quick look reveals a new class for decrypting tokens and a helper to bridge the gap to membership. Looks … Continue reading

Posted in Uncategorized | Leave a comment

Feature Complete Version of the ASP.NET CardSpace Control

UPDATE: new version available here. After I made some incremental changes and releases of my CardSpace control (found some bugs, got some feedback), I wanted to consolidate all the information along with a new version and some new features here. … Continue reading

Posted in Uncategorized | Leave a comment

Recorded Sessions from IMTC

The Irish folks are great – not only they organized a fantastic community conference – they also recorded all the sessions… http://www.askasqlguru.com/category/imtc/ Have fun!  

Posted in Uncategorized | Leave a comment

MSDN Security Code Clips

In Zusammarbeit mit MSDN Deutschland habe ich einen ganzen Schwung Screencasts rund um sichere Softwareentwicklung erstellt (unterteilt in die Bereiche Allgemein, Client Entwicklung, ASP.NET, WCF und CardSpace). Die Startseite findet Ihr hier:http://www.microsoft.com/germany/msdn/solve/knowhow/sicherheit/default.mspx  

Posted in Uncategorized | Leave a comment

MSDN UK CardSpace Nuggets

I recently did four short screencasts for MSDN UK on various aspects of CardSpace. The focus more on self issued cards and are divided into the following topics: Implementation Strategies The Role of Certificates ASP.NET Integration WCF Integration Also find … Continue reading

Posted in Uncategorized | Leave a comment