Browse by Tags

All Tags » Software Security (RSS)
Persistent Authentication versus Session Mechanisms
When you're dealing with users in a web environment, invariably you'll want to know who's who. Because HTTP is stateless, web applications expect some random and difficult-to-guess piece of data with each request that's unique for each user. In most modern...

Posted by Alex | with no comments

C# and VB.NET Security Throwdown!
.NET doesn't care what language you write in - as long as your code compiles to CIL , it's a .NET application. There are plenty of .NET languages out there, but the most commonly used ones are C# and Visual Basic .NET (VB.NET). Since both languages end...

Posted by Alex | 1 comment(s)

Filed under: , ,

SoCalCodeCamp Presentation - "Top Ten Tips for Tenacious Defense for ASP.NET Application"
I think it was a good talk - too bad I only got through three tips :) View more presentations or upload your own. You can download the slides here if you have a Slideshare account, or just send me an email. Share this post: email it! | bookmark it! |...

Posted by Alex | with no comments

@SoCalCodeCamp, Speaking
I'll be at SoCalCodeCamp this weekend (January 24-25, 2009), attending sessions and hanging out. I'll also be speaking on Sunday, January 25, at 9:00AM in UH 250 , giving a presentation entitled " Top Ten Tips for Tenacious Defense in ASP.NET ". I like...

Posted by Alex | with no comments

More ASP.NET CSRF Protection Options
Barry Dorrans created a filter for CSRF protection in ASP.NET. It's inspired by the ASP.NET MVC CSRF token approach. It's a simple and effective protection mechanism when you can't use the ViewStateUserKey because you've disabled ViewState. It doesn't...

Posted by Alex | 1 comment(s)

More Posts Next page »