Σεπτέμβριος 2010 - Δημοσιεύσεις

ASP.NET Security Vulnerability Or Not
20 Σεπτεμβρίου 10 12:36 μμ | spantos | 0 σχόλια   

Last week two security researchers, Thai Duong and Juliano Rizzo, have discovered a bug in the default encryption mechanism used to protect the cookies normally used to implement Forms Authentication in ASP.NET. Using their tool (the Padding Oracle Exploit Tool or POET), they can repeatedly modify an ASP.NET Forms Authentication cookie encrypted using AES and, by examining the errors

Διαβάστε περισσότερα »

Δημοσίευση στην κατηγορία: Web, ASP.NET, C#, Security

ASP.NET Column based Profile Provider
01 Σεπτεμβρίου 10 05:45 μμ | spantos | 0 σχόλια   

Some of my colleagues are often reluctant to use ASP.NET 2.0 profile provider to store profile data for their web applications. The main reason for this is the fact that the default SqlProfileProvider that ships with ASP.NET 2.0 “blobicizes” Profile data using string, XML or binary serialization prior to storing information in SQL Server. This obviously puts a rather large overhead

Διαβάστε περισσότερα »

Δημοσίευση στην κατηγορία: ASP.NET