Welcome to MSDN Blogs Sign in | Join | Help

March 2004 - Posts

Leaking names

A short blog tonight. There are many pieces of information that can be useful to an attacker when they are trying to gain access to your organisation or when they are already "in" and want to do some damage. Two things that may not be immediately obvious
Posted by ptorr | 2 Comments
Filed under:

Crash

The other day I wrote about Burnout . Well there’s a cool kind-of related video up on the new Microsoft XNA web site called “Crash.” You should check it out .
Posted by ptorr | 7 Comments
Filed under:

Evidence is important, even if it grants no permissions

In a comment to my old VSTO security blog entry, Enrico Sabbadin asks why we can't just remove the Zone evidence from an assembly before creating the AppDomain. Good question, and Siew Moi bugged me about blogging this a long time ago as well, so I guess
Posted by ptorr | 4 Comments
Filed under: ,

Developing as Non-Admin

Keith Brown writes a comment in one of my older posts about a chapter in his book dealing with developing code as a non-Admin . A great read if you're still one of those people running as an Administrator because you think you need to in order to do programming.
Posted by ptorr | 4 Comments
Filed under: ,

Strange Japanese Television Shows

I just finished my last blog entry , which prompted me to visit the PSB website to see what was new. Well whadayaknow, the video to their next killer single "Flamboyant" is on the website. But I'm not just gushing about the 'Boys in this blog entry --
Posted by ptorr | 1 Comments
Filed under: ,

Balancing Security and Usability

I'm often tempted to write about viruses and what I think the next "innovation" might be, but then I get scared that I might get put in jail (or deported) should any of my ideas ever see the light of day. (Not that I think the virus writers need any help
Posted by ptorr | 14 Comments
Filed under: , ,

Windows XP SP 2

I'm running Windows XP SP 2 RC1 now, and I've already logged a handful of bugs -- mostly against the new IE security settings :-) -- but I haven't had any problems yet. (Well, my tablet froze on me last night, but it hasn't happened again so I don't know
Posted by ptorr | 2 Comments
Filed under: ,

I want my Burnout 3

This post has nothing to do with code or security. Move along ;-) One of my current favourite XBox games is Burnout 2: Point of Impact . It's not a new game -- I originally acquired it mid last year -- but I just started playing it again because I was
Posted by ptorr | 7 Comments
Filed under:

The horse has already bolted

A while ago (yes, I'm very slow) Ivan had a couple of blogs about removing the ability to turn off CAS in the runtime ( here and here ). Whilst I am sure the CLR team has some good reasons for doing so, many of the comments on the entries exhibit a common
Posted by ptorr | 13 Comments
Filed under:
 
Page view tracker