Browse by Tags

Microsoft Threat Analysis & Modeling 2.0 beta 2

For everyone out there caring about security (this filter clause should be a tautology) this blog post should be the trigger to a "start downloading immediately" action. So here's the link: http://www.microsoft.com/downloads/details.aspx?familyid=aa5589bd-fb2c-40cf-aec5-dc4319b491dd&displaylang=en...

Posted to B# .NET Blog (Weblog) by bart on 03-27-2006
MSDN Security Evenings

I'm very happy to announce the MSDN Security Evenings in Belgium where I'll deliver an (approx) 2h30 Dutch-speaking talk about the art of secure programming in various high schools/universities throughout the country. For the French-speaking part of Belgium, Grégory Renard will deliver a talk. More information...

Posted to B# .NET Blog (Weblog) by bart on 03-25-2006
Happy 2006 - 2005 in security figures

To all of my blog readers: a great 2006 with a bunch of superb product releases and development excitement. OMG, I hate those kind of posts :-). Anyway, below you'll find some Secunia figures about security bulletins in 2005. Enjoy! SQL...

Posted to B# .NET Blog (Weblog) by bart on 01-04-2006
Office 2003 SP2 installation time

Hop, go to http://update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en to scan your computer for Office 2003 updates. The list looks as follows: Office 2003 Service Pack 2 Visio 2003 Service Pack 2 Project 2003 Service Pack 2 OneNot 2003 Service Pack 2 Update for Outlook 2003 Junk Email Filter...

Posted to B# .NET Blog (Weblog) by bart on 09-28-2005
"19 Deadly Sins of Software Security" by Michael Howard, David LeBlanc, John Viega

Looks a promising successor for the "Writing Secure Code 2nd Edition" which every serious developer should have on his/her bookshelf (after reading it of course :-)). More information on Amazon where I just ordered the book. This *really* was the last blog post before my (OOF) holidays. I'll be offline...

Posted to B# .NET Blog (Weblog) by bart on 08-20-2005
SHA-1 also insecure? (cont'd)

A couple of months ago I did a post on "SHA-1 also insecure?" . SHA-1 is one of today's hashing algorithms ( hash function ) that's widely used. Simply stated, a hash is a one-way function H that takes a variable-length message M as a parameter and returns a fixed-length hash value h, i.e. h = H(M) ...

Posted to B# .NET Blog (Weblog) by bart on 08-19-2005
Demo of "Attachment Execution Service internals" in Windows XP SP2 and Windows Server 2003 SP1

The introduction Oh my god, I couldn't stop to work the night before I leave for a short one-week holiday :o. But hey, there are holidays for, isn't it? :d Let's turn serious now. Last week I've been spending my free time on writing some security-related demo scripts, including the XP SP2 and W2K3 SP1...

Posted to B# .NET Blog (Weblog) by bart on 08-19-2005
Why preparing security demos can hurt ... I killed lsass.exe by mistake :o

Tonight I was doing a little demo prep for security-related stuff in Windows Server 2003. One of the things I was preparing is the " service account credentials " problem. As you probably know, Windows services run in the context of a user (just like any other process does). Typically such a user is...

Posted to B# .NET Blog (Weblog) by bart on 08-18-2005
Windows Vista Security - About Secure Startup, TPM, EFS, Syskey and much more

Introduction In this post, I'll cover the Windows Vista Secure Startup feature to present you one of the big security enhancements made in the Windows code-named Longhorn wave. To go short, Secure Startup is a new security feature in Vista that addresses the concern of better data protection, based on...

Posted to B# .NET Blog (Weblog) by bart on 08-17-2005
Want to read nonsense? "The Committee to Fight Microsoft ... " - Just a little reaction

Take a look at this . In my very opinion, this Andy Martin guy hasn't ever written a piece of code nor dos he know about complexity of software nowadays. In fact, I want to quote the book "Exploiting software" by Hoglund and McGraw, Addison Wesley, 2004 on page 14 about "The Trinity of Trouble": The...

Posted to B# .NET Blog (Weblog) by bart on 08-12-2005

Page 2 of 5 (41 items) < Previous 1 2 3 4 5 Next >