RSS
 

Posts Tagged ‘Security’

Guelph Coffee and Code: October 14, 2010

14 Oct

Photo Credit: Summerland SchoolHowdy Coffee and Coders!

I am no longer fighting off a cold and am looking forward with connecting with the Study Group again to see how everyone is progressing through the book.

I do apologize for not getting the topics posted, but with the lack of response on last weeks post I wanted to make sure we had a review of the Code Access Security Chapter before moving on to our next section. If you have already read ahead, that is excellent, Thank you for your dedication.

“There is only one thing more painful than learning from experience and that is not learning from experience.” – Archibald McLeish

What: Guelph Coffee and Code
Study Group Meeting – Code Access Security Review, Next Chapter Assignment
When: Thursday, October 14, 2010 6:00 PM to 9:00 PM
Where: The Red Brick Cafe

8 Douglas St.
Guelph, Ontario N1H2S9 Canada
Map picture
 

Security Vulnerability Detected in ASP.NET

21 Sep

This is a quick post to inform the users of our group that a security vulnerability was found in ASP.NET that could potentially allow a Malicious Party access to your web.config file.  As you know there are a number of settings in the web.config that would be harmful in the wrong hands, including the Connection String to a (or multiple) Database(s), Encryption Key information (Machine Key), as well as SMTP or Impersonation details which could give the Hacker access to a Windows System Account, or an Administrative Email Account.

Be sure to ready Scott Guthrie’s Post “Important: ASP.NET Security Vulnerability” which will outline the potential threats in more detail.

For a script to detect if you are Vulnerable to this attack read Microsoft Security Research and Defense entry.

There is also a newer update by the Microsoft Security Response Center which includes a twitter account [@MSFTSecResponse] which will give more up-to-date coverage as new developments unfold.

Please make sure to make your superiors aware of this threat as it affects mostly all installations/Versions of ASP.NET on a wide range of Operating Systems.

 
 

Microsoft Event: Hack and Defend Workshop

20 Mar

Hack and Defend Workshop Microsoft’s Hack and Defend Workshop is a premium session focused on getting into the mind of a Hacker. During the course of this half-day workshop you will discover the tactics used to penetrate your PC, become aware of the most threatening viruses online, and learn how to protect yourself.

Sessions

Location: 1950 Meadowvale Boulevard, Mississauga, Ontario L5N 8L9

Date: Monday, March 29th, 2010

Morning Session: 8:30am – 11:30am [Register]
Afternoon Session: 1:00pm – 4:00pm [Register]

Note: Both the Morning and Afternoon sessions have the exact same content.

What you’ll get…

  • Security Training [3 hrs]
  • A complementary snack
  • Free Books and Software
  • Other related giveaways

 

What’s the best part?

It’s all free!