Insiders

Smart Card Authentication Module Update Released

I’ve finally wrapped up updating the SmartCardAuthenticationModule . The link to the download is at the end of this post. Changes / Improvements Added support for ASP.NET Membership which means support for Profiles and Roles as well. Removed all custom...

Posted to Underground Coding by [security through absurdity] on Fri, Apr 30 2010

Filed under: security, authentication, authorization, smartcard, .net, c#, asp.net, clientcertificates, .net3.0

DnDns Update

Just over a week ago I was able to release a new build of DnDns. Changes: * Added DNS server detection for linux and windows * Added TCP support * Several bugs that occured casting from bytes to short * Fixed a DNS message decompression bug There's...

Posted to Underground Coding by [security through absurdity] on Sat, Mar 6 2010

Filed under: opensource, programming, dns, .net

Hiatus Almost Over

This past year has been increadibly busy and some major projects I've been working on are coming to an end, meaing I will be able to start paying some more attention to my blog. Some coming topics: .NET 2.0 version of the SmartCard Authentication...

Posted to Underground Coding by [security through absurdity] on Fri, Oct 30 2009

Security Vulnerability Analysis PlugIn Project for Fiddler

I've been running the SANS DEV544 Course Twitter account @SANSecDotNet for about a week now and was asked a simple questions by @competentgirl about the differences between WebScarab and Microsoft Fiddler Web Debugger . I've used both on occassion, but...

Posted to Underground Coding by [security through absurdity] on Fri, May 22 2009

Filed under: httpmodule, asp.net, vulnerability, fiddler, viewstate, scanner

Follow .NET Secure Coding SANS Course via Twitter

I've setup a twitter account for the SANS DEV544 course called Secure Coding in .NET: Developing Defensible Applications - follow @ SANSecDotNET to track about topics relating to .NET Secure Coding, course updates, Q&A, etc.

Posted to Underground Coding by [security through absurdity] on Sat, May 16 2009

Filed under: security, programming, .net, sans, infosec, twitter

Migrating to K2 Blackpearl - VB.net Support in K2 blackpearl Processes

Summary: This post covers migrating a K2.net 2003 Studio Project to K2 blackpearl while documenting some of the pitfalls and how to avoid or work around them. After that I'll discuss how VB.Net support plays out in K2 blackpearl. Converting a K2.net 2003...

Posted to Underground Coding by j.monty on Thu, Apr 2 2009

Filed under: blackpearl, migration, conversion, compatibility, vb.net, k2.net2003

Security Vulnerability of the Week #1: SQL Injection

Over at [Security Through Absurdity] I've posted the first in a series of articles that will explore the most common vulnerabilities and the mind-set of the developers that create them and also explore how to deal with them. The first post in the series...

Posted to Underground Coding by j.monty on Tue, Mar 3 2009

Filed under: security, sqlinjection

Smart Cards and Win7 Live ID Sign-In Assistant 6.5 (beta)

I stumbled on a beta for the new Windows Live Sign-In Assistant 6.5 Beta here: Windows 7: Windows Live ID Sign-in Assistant 6.5 (Beta) released I've been running Win7 for about a Month and I've been very happy with it. Since I have a personal interest...

Posted to Underground Coding by [security through absurdity] on Fri, Feb 20 2009

Filed under: security, authentication, fail, pin, smartcard, exposure, information leakage

It's Out! Professional K2 blackpearl®

Our hard work has paid off and the book is now in stores. "Built on Microsoft technologies including Microsoft Office SharePoint Server, SQL Server, Microsoft Office 2007, and Visual Studio 2005 and 2008, the latest K2 [blackpearl] release provides you...

Posted to Underground Coding by [security through absurdity] on Fri, Jan 23 2009

Pocket DnDns Release 1

I was asked if the DnDns .NET Resolver library I've put together works with the WinCE/PocketPC/Windows Mobile platforms. At the time, I wasn't sure, but I was pretty sure it might. I recently had some free time and I decided to give it a shot. After about...

Posted to Underground Coding by [security through absurdity] on Wed, Dec 3 2008

Filed under: pocketpc, opensource, programming, wince, mobile, dns, .net

DnDns - Updated!

I've finally got around to patching a few bugs in DnDns . I've not posted a new Release yet, so you'll need to get latest and re-build. There was a pretty major bug in the DNS Lable decompression method that I've fixed so you'll want to make sure you...

Posted to Underground Coding by [security through absurdity] on Mon, Nov 24 2008

Professional K2 [blackpearl]

It's time for a shameless plug... The end of another project draws near for me. We're finishing up Professional K2 [blackpearl] and it should be out sometime in fall or early winter. The book is now available for pre-order on Amazon and other sites -...

Posted to Underground Coding by [security through absurdity] on Fri, Aug 1 2008

Filed under: k2, wwf, .net, workflow, bpm, k2bp

DnSmtp – A .NET SMTP Client Library

Related to my recently released DNS Client library, DnDns , I’ve finally gotten around to releasing a SMTP client library. This SMTP library provides basic SMTP functionality – it’s able to deliver emails with multiple text mime parts and a few different...

Posted to Underground Coding by [security through absurdity] on Tue, Jun 24 2008

Filed under: opensource, .net, protocols, smtp, c#

DNS-O-MATIC Sync Service - .NET Windows Service

I have been a fan of OpenDNS for a while - it is an excellent free service that will bring an additional layer of security to home and small/medium business networks at the DNS level by providing content filtering, phishing protection, domain blocking...

Posted to Underground Coding by [security through absurdity] on Mon, Apr 14 2008

Filed under: opensource, .net, c#, opendns, codeplex, service

ASP.NET 2.0 SmartCard HttpModule + Role/Membership Support Coming Soon

This week I finally have had some time to take a look underneath the Membership and Roles infrastructure in ASP.NET 2.0 and have a significant update to the ASP.NET SmartCard HttpModule coming in the next couple weeks, as well as some necessary additions...

Posted to Underground Coding by [security through absurdity] on Thu, Feb 14 2008

Filed under: security, smartcard, .net, httpmodule, membership, asp.net

Blog Categories

K2