Etikettarkiv: datorsäkerhet

New IDG column

This time, it’s about the recently discovered flaws in WinZip 9.0′s AES support and the importance of knowing exactly what it is that a security solution protects against. Read it here (as always, in Swedish) Update: Better yet, read it here, with nicer … Läs mer

Publicerat i writing | Etiketter , | Lämna en kommentar

Quickies of the day

Google being irrational in the best of ways: Google expects to bring in $eB ($2,718,281,828) in their IPO. If you ask me, they’re worth at least $πB. There has been a lot of buzz about the newest publication from Microft’s … Läs mer

Publicerat i music | Etiketter , , | Lämna en kommentar

Quickies of the day

Anil John writes about developing ASP.NET applications that run under Partial Trust. The whole Code Access Security framework in .Net is a complex beast, and I fear that most developers never will learn enough to actually use it properly, leaving … Läs mer

Publicerat i programming | Etiketter , , | 4 kommentar

Quickies of the day

Jiri has an interesting comparison between the state of infrastructure security as opposed to application security. Michael Howard has the slides from what appear to be an excellent presentation about Secure coding issues up (by way of Sergey Simakov The … Läs mer

Publicerat i programming | Etiketter , | Lämna en kommentar

Microsoft PAG on ”Improving Web Application Security”

Anil John points me to the Microsoft Pattern and Practices site. I’ve stumbled over the ”Application blocks” examples that they have up once or twice, but I never went to their front page to see what it’s all about. I … Läs mer

Publicerat i programming | Etiketter , , | Lämna en kommentar

Interesting validation framework

The most important part of developing secure (and robust) systems is to validate all input that comes from the outside (and for large systems, even between components). However, writing validation code isn’t usually very fun, and so like many other … Läs mer

Publicerat i programming | Etiketter , , | Lämna en kommentar

Google cracked?

It looks like google has been cracked! (Well, as long as your browser handles IDN, Internationalized domain names, at least )

Publicerat i misc | Etiketter , , | Lämna en kommentar

Keith Brown on managed code security

This is an interesting article about code security in the CLR, and how little teeth the declarative security features in the CLR have when it’s running fully trusted code. I did know that some naughty things (like calling private methods) … Läs mer

Publicerat i programming | Etiketter , | Lämna en kommentar