Welcome to MSDN Blogs Sign in | Join | Help

Browse by Tags

All Tags » Scott   (RSS)

SSLChainSaver v2 released

Two years ago I released the first version of the SSLChainSaver tool. This tool helps you diagnose and repair SSL problems on Windows Mobile devices. After a very long delay, Version 2 is now up on the Microsoft download center. I wasn't able to release Read More...
Posted Sunday, May 18, 2008 1:07 PM by Scott Yost | 16 Comments
Filed under: ,

Why can't I copy programs out of \Windows?

I've seen people internally and externally ask for help copying files out of \Windows on the device, usually EXEs and DLL files. I'm not sure what their end goal - sometimes it's to try those binaries on a different device but there are probably other Read More...
Posted Saturday, December 29, 2007 2:23 PM by Scott Yost | 14 Comments
Filed under:

Do SDETs dream of electric sheep?

I read Joel Spolsky's blog from time to time. I am a little embarrassed to admit that I took the following entry a bit personally. Apparently—and this is all based on blog rumors and innuendo—Microsoft has had a long term policy of eliminating Read More...
Posted Thursday, December 20, 2007 11:26 PM by Scott Yost | 8 Comments
Filed under:

All About "Application Locked"

I have been working on this post slowly for several days, but Reed and Steve are seriously kicking my butt on posting solid developer-focused technical security content. Read their blog - they covered a lot of this material sooner and better than I did. Read More...
Posted Wednesday, May 30, 2007 12:06 AM by Scott Yost | 12 Comments

Ask the Hacker Curmudgeon: How can I minimize the chance of getting a useful answer to my question?

Protect your question with an impenetrable cloak of vagueness. 1) Choose a subject line that conveys no information. This means that the subject matter expert needs to choose between spending more time on your message to figure out what it's about, or Read More...
Posted Monday, May 28, 2007 2:45 PM by Scott Yost | 1 Comments
Filed under: ,

What do you mean by "locked"?

There are a few different things that people might mean when they say their phone is "locked". I wanted to provide this post to help define the different types of lock. SIM Locked This typically means that the phone will only work on the network of one Read More...
Posted Monday, May 14, 2007 10:48 AM by Scott Yost | 18 Comments
Filed under:

Windows Mobile 6 Storage Card Encryption FAQ

My colleague Jason Langridge wrote a post about the storage card encryption feature in WM6. This is one of the features I worked on, so I'd like to host some FAQs about it here. What scenario is the feature designed to mitigate? It's fairly easy to remove Read More...
Posted Monday, March 26, 2007 6:43 PM by Scott Yost | 146 Comments
Filed under: ,

The Curious Case Of The Four-byte Writes

Everybody who has worked at Microsoft for long enough has their war stories. I'll share one of my first, from Windows Mobile 6 development. It Sounded Simple Enough My first full feature at Microsoft was the storage card encryption feature in WM6. My Read More...
Posted Wednesday, February 14, 2007 12:34 AM by Scott Yost | 6 Comments

Certificate Improvements in Windows Mobile 6

As faithful blog readers already know, there were several limitations related to certificates that caused tons of customer pain on WM5. Now that WM6 is public, it gives me great pleasure to announce the following changes that we made in WM6: Certificate Read More...
Posted Wednesday, February 07, 2007 9:07 PM by Scott Yost | 62 Comments

Who is GWES and why does it keep apologizing?

I’ve seen this question a few times on the newsgroup so I thought I’d take a stab at it. We’re having another freak winter storm in Redmond so it’s not like I can leave work anyway… What is GWES? Gwes is the Graphical Windowing and Event Subsystem. It’s Read More...
Posted Wednesday, January 10, 2007 8:32 PM by Scott Yost | 23 Comments
Filed under:

Why does my signed cab still show the "Unknown Publisher" prompt?

At install time, we crack open the cab file and check for a signature on every executable (exe and dll) inside the cab. If any of the binaries are unsigned (or signed with a cert that doesn't chain to the code execution stores) then we'll display the Read More...
Posted Thursday, December 07, 2006 4:31 PM by Scott Yost | 10 Comments
Filed under:

What is the metabase?

Why do you care? This might be interesting to you if - you've ever wondered why people change security policy 4119 - you've ever developed a CeRapiInvoke DLL - you've ever wondered why DMProcessConfigXML behaves differently for an untrusted process vs. Read More...
Posted Monday, October 30, 2006 12:31 PM by Scott Yost | 11 Comments
Filed under:

Your 100 Feature Dollars

A few weeks ago I asked how you'd spend 100 feature dollars on Windows Mobile. When we do this exercise, we typically brainstorm a list of features that we'd like to do or that have been requested in the past. We cost the features ourselves, and then Read More...
Posted Tuesday, August 29, 2006 11:30 AM by Scott Yost | 50 Comments
Filed under:

Introducing the SslChainSaver

Say hello to the SslChainSaver tool. This is a tool that I wrote internally to troubleshoot SSL connections and I'm finally able to offer it publically. Use this tool when you want to to add new root or intermediate certificates to a device for an SSL Read More...
Posted Friday, August 11, 2006 9:26 AM by Scott Yost | 60 Comments
Filed under: ,

What would you do with $100?

We go through this exercise during the planning stages with customers sometimes. I like it because "to ship is to choose" - it's easy to describe things you want, but we have to ship the product eventually and some things don't make it. Deciding what Read More...
Posted Tuesday, August 08, 2006 5:52 PM by Scott Yost | 106 Comments
Filed under:
More Posts Next page »
 
Page view tracker