new NamedPermissionSet

Every once in a while I find some code doing something similar to this: new NamedPermissionSet(“LocalIntranet”).Assert(); // … call some API that requires Intranet permissions here CodeAccessPermission.RevertAssert(); At best this code is confusing to people reading it, and at worse this code is actually doing something very different than what the author is intending to do. The…

0

Relative URL Membership Conditions

Caspol will allow you to setup a URL membership condition with a relative URL by using a command such as: caspol -ag 1. -url Foo.dll Internet -exclusive on This command probably doesn’t do exactly what you would expect though.  Namely, it does not resolve the location of foo.dll when you run the command and store…

0

SecureString Redux

A few times over the last couple of days discussion about a tool on the Internet which can attach to your process and dump out the contents of your SecureStrings has come up.  If this tool can exist, then what benefit does SecureString really provide? The fact that this tool can exist is not a…

4