Advances in Certificate Spoofing

An interesting developing news story in this otherwise slow week has been about a security research effort to spoof SSL certificates. The group has found a way to generate hash collisions between a pair of certificates when the certificate authority uses the MD5 hash function. MD5 is an algorithm that was developed in the early…

0

Submit a Session for MIX

The deadline for external presenters to submit their session ideas for MIX 2009 is January 23rd. You can send your submissions to mixprpsl@microsoft.com. Here’s what you need to include in the submission. Title: Ideally, the title is short, catchy, and descriptive Abstract: One or two sentences that describe what an attendee would hear and learn…

0

VSLive 2009 in San Francisco

VSLive is a Microsoft sponsored conference for developers working with Visual Studio and .Net. The 2009 conference is February 24-26 in San Francisco (with workshop days before and after the sessions). Here are some of the sessions that WCF developers might be interested in. Build Distributed Apps in .NET 3.5 SP1 (pre-conference workshop) by Rockford…

1

Testing REST Services

Pablo Cibraro published an article the other day demonstrating how to write unit and integration tests for services built using the WCF REST Starter Kit. One of the things Pablo includes is object mocking for the operation context, which I’ve had people ask for help with in the past. Sample code is included for an…

0

Sam Ruby to Chair HTML WG

I saw an announcement the other day that Sam Ruby will become co-chair of the W3C HTML working group at the beginning of next year. The HTML working group impacts web application development more than most other standards even though there’s rarely a direct dependency on their deliverables. Sam has been very pragmatic in working…

0

Limited Time Free Book Offer

Microsoft Press has been doing a 25th anniversary book offer where they put up a free pdf download for selected books for a limited time. The December books include one that you might be interested in if you’re doing network programming. Understanding IPv6 by Joe Davies The other book this month is Writing Secure Code…

1

Orcas SP1 Update

An update to Orcas SP1 is being rolled out that will be available through Windows Update. The update contains application compatibility fixes for the .NET Framework following the Orcas SP1 release. If for some reason you need to install it directly, the downloadable package is available now. Microsoft .NET Framework 3.5 Family Update for Windows…

0

Reliable Authentication Delays

Why does turning on reliable sessions sometimes cause the client to take much longer to fail an authentication check? As part of doing an authenticated operation, the client must send a request to the server that contains information about the client’s identity. This is just an abstract description of what actually goes on. The identity…

1

Silverlight Cross Domain Checker

After writing the series on the Silverlight cross domain policy format I ran across a quick utility by Frank La Vigne for checking the cross domain policy files on a server. It’s one of those simple deals that lets you type in a domain name and see what policy files it offers. If you need…

0

Service Extension Model

Many of the WCF runtime classes that support adding new state do so through a common extension model. The extension model has three pieces: an extensible runtime object whose behavior can be modified by attaching state exceptions, extensions that modify the runtime object, and a collection that holds all of the extensions being used with…

3