Browse by Tags

All Tags » Security (RSS)
Monday, January 21, 2008 12:15 AM

KB946932: Disabling UAC Prompt for certain apps. Not that useful...

When I found a reference earlier today to this interesting KB I thought " wow, maybe I can finally get rid of the UAC prompts on my gaming PC " (I won't remove them from the development PC under any circumnstance), so I've just finished...
Posted by Kartones | 1 comment(s)
Filed under: , , ,
Tuesday, November 06, 2007 11:55 PM

Protecting from SQL Injection in ASP.NET

Today a small post that I had in mind since some time... a quick-list of how to fortify against SQL Injection (and some more general best practices). You can do some javascript, client-side validations to avoid postbacks, but rembember: never, ever trust...
Posted by Kartones | with no comments
Filed under: , , , ,
Saturday, October 06, 2007 10:55 AM

Saturday morning reading: Security

My dog woke me up a bit early so nothing better than a few security articles and slides to start the day. This is what I'm reading right now: - The Silverlight security model ( Parts I , II and III ) - MS Access SQL Injection Cheat Sheet - LDAP &...
Posted by Kartones | with no comments
Filed under: , , , , ,
Wednesday, August 15, 2007 1:54 PM

Vista vs XP security (for laptops) SANS Paper

The SANS Institute has published an interesting paper about Vista vs XP SP2 security features for laptop users. The paper compares existing (and improved) features and the new features added in vista (like Bitlocker or UAC). It is interesting to read...
Posted by Kartones | with no comments
Filed under: , ,
Tuesday, July 31, 2007 1:15 AM

Summer == Less posts

Lately my posting frecuency has decreased, but it'll never stop ;) The reasons are multiple: It's summer, and in Madrid it means hot, hot, hot (we're getting nearly 40 degrees celsius some days!). And what better to combat hot temperatures...
Posted by Kartones | 1 comment(s)
Filed under: , , , , , , ,
Sunday, July 22, 2007 2:06 PM

New book review: Writing Secure code for Windows Vista

Getting to work again on computers related stuff, I've done a new book review, which you can read at the Book Reviews section .
Posted by Kartones | with no comments
Filed under: , ,
Monday, June 11, 2007 12:01 AM

Google Gears: A bit unsafe?

Google has recently presented Google Gears , a local DB storage system that currently allows to read feeds offline, and will be used in Google Docs and probably other services in the near future. I tried it for some days, but I've actually uninstalled...
Posted by Kartones | with no comments
Filed under: , , ,
Wednesday, June 06, 2007 9:18 PM

ExitWindowsEx not working with Windows XP if computer is locked

Just a quick post of a problem I addressed today while finishing my current assignment. I used the ExitWindowsEx() API call to logoff the user (with the force close flag). In Vista it worked without any problem, logging out the user whenever he was using...
Posted by Kartones | with no comments
Filed under: , , , , ,
Wednesday, May 16, 2007 11:31 PM

Quick tips for developing under Windows Vista

Now that I'm having quite a lot of development (and fighting with the OS) under Vista, here you are some quick tips that will help you a lot to develop efficiently with Visual Studio 2005. Navigate to C:\Program Files\Microsoft Visual Studio 8\Common7...
Posted by Kartones | with no comments
Filed under: , , , , , , , ,
Tuesday, May 15, 2007 10:28 PM

5 Things we can learn as developers from videogames

Yesterday, while travelling to work, I thought about what things PC videogames (almost) always do today that should be applied to general development. This are my five ones: Efficient and painless update system : Updates in MMORPGs are very common (both...
Posted by Kartones | 2 comment(s)
Filed under: , ,
Wednesday, May 02, 2007 10:46 PM

Quantum cryptography hacked

Instead of posting about the number of the week , I think it's more interesting to post that quantum cryptography has been hacked . More precisely, wiretrapped (near 40% of information was sniffed). It was a scientific test and would probably fail and...
Posted by Kartones | 1 comment(s)
Filed under: ,
Wednesday, April 04, 2007 6:05 AM

Cracking a WEP Wifi in less than 2 minutes

It is well known that WEP encryption isn't very safe. The problem is that now it can be done in less than 2 minutes with a 95% of success :O It works as previous attacks, by taking traffic and analyzing it to obtain the cypher key. And that's not all...
Posted by Kartones | with no comments
Filed under: , , ,
Wednesday, March 07, 2007 11:07 AM

Firekeeper: A browser IDS/IPS for Firefox

The Mozilla development group has released an alpha version of Firekeeper , a browser IDS / IPS that secures user browsing by detecting, warning and blocking browser based attack attempts. It scans HTTP/HTTPS response headers, body and URLs, and has a...
Posted by Kartones | with no comments
Filed under: , , ,
Sunday, February 11, 2007 11:58 AM

An interesting article about Windows Vista security model

Reading some security related RSS feeds, I've came upon an interesting article about the new Vista security model. It explains not only what most of the new features mean ( UAC , UIPI , Integrity Levels , ASLR and the XP-SP2 existing DEP ) with examples...
Posted by Kartones | 2 comment(s)
Filed under: ,
Friday, January 26, 2007 9:52 PM

New Cryptographic Algorithms in Visual Studio Orcas

Seems that sooner or later I'll have to switch to Windows Vista... I've just discovered the new CNG API ( Cryptography API: Next Generation )... and apart from new features , I've digged a bit into the new cryptographic algorithms it brings...
Posted by Kartones | with no comments
Filed under: ,