Browse by Tags
All Tags
»
Security
(
)
Starting in the .NET Framework 2.0, some of the Cryptographic Classes no longer work if FIPS compliance is forced on the Server. Currently, none of the Managed hashing classes will work on a FIPS enabled server. Attempting to use those results in the...
Friday, July 06, 2007 2:42 PM
One Step Ahead (Or Behind?)
I recently had a discussion with a friend about security. His claim was, "I am always one step ahead of attacks". I was a little taken back by that, since the opposite is probably the case. Attackers are always one step ahead of us. They are...
Tuesday, April 03, 2007 8:43 PM
Is SHA1 dead?
There have been studies over the past years over the SHA1 hash algorithm, probably the most scrutinized hash algorithm in use. Many studies have come to the conclusion that SHA1 is flawed because it produces hash collisions. A hash collision is where...
I have just signed up for a website. (OK, not really, but let's pretend). Like most websites these days, it requires some sort of registration. Basically it asks for a username, e-mail, and a password. So I fill all this stuff out, and click "OK". a few...
Tuesday, February 13, 2007 6:51 PM
Security Sin #1
There are many sins for good security practices, much more than 7. One of the worst things you can do is force your user to use a specific character set when creating a password. I recently encountered this on Western Union's website, a site meant for...
Friday, February 02, 2007 11:10 PM
Make Your Programs Impersonate
Sometimes it is useful for your Programs to impersonate under a different user's context. The .NET Framework provides a little help for that, but it still requires a litle help from Platform Invoke. We can impersonate by using the WindowsIdentity class...
