Tobin Titus : April 2005

Saturday, April 30, 2005 10:26 PM

Charlotte Code Camp

I just got a moment to settle down and write a quick bit about the Charlotte Code Camp. It was a great experience despite the fact that I really only got to watch two presentations. Bill had a pretty cool presentation on speech server.

posted by admin | 2 Comments

Friday, April 29, 2005 12:45 AM

Exploit using System.String? Not Really

I've been playing around in the CLR for some time just playing with quirks and oddities. I noted some time ago that non-printable characters were easily stored in strings. This really wasn't a suprise except that a null character ("\0")

posted by admin | 4 Comments

Wednesday, April 27, 2005 11:05 PM

Old News, But Blog-worthy

There was an old article posted some time ago by James Gosling at Sun. I've been meaning to post about it but every time I had a spare moment, someone yanked it from me. In any case, in this article Gosling was shouting some ideas that Microsoft

posted by admin | 0 Comments

Monday, April 25, 2005 11:57 PM

Absent

As many of you probably DIDN'T notice, I haven't blogged in about a week. Things have been nuts on my end. My wife and I are getting prepared to move back to Greenville, SC. Work has been slammed -- keeping all of my spare time tied up.

posted by admin | 0 Comments

Tuesday, April 19, 2005 8:53 AM

Selected for Microsoft Workshop

Today, I received a request from Microsoft and I must say that I am deeply honored. I cannot provide the details just yet other than to say it is to review the content of a workshop. I cannot wait to get started! While I'm on the topic

posted by admin | 1 Comments

Saturday, April 16, 2005 11:53 PM

.NET Security No No

OK. I'm going to cover this one time for guys in the peanut gallery. Microsoft wised up some time ago and started shipping their Windows Server 2003 product with nearly every feature, apart from logging in, turned off. This was in response to the

posted by admin | 1 Comments

Friday, April 15, 2005 9:40 AM

DoS through TCP sequence number vulnerability

SecurityFocus is reporting that multiple vendors are affected by a newly found design flaw in common TCP implementations. The flaw allows remote attackers to effectively end a TCP session by sending an RST or SYN packet with an approximated TCP

posted by admin | 3 Comments

Thursday, April 14, 2005 11:28 PM

Which kind of leader are you?

Bill Ryan had this on his blog, so I thought I'd give it a try to. Here's what it says I am: What Famous Leader Are You?personality tests by similarminds.com

posted by admin | 0 Comments

Thursday, April 14, 2005 2:35 PM

Googling for web.config and other source code

I don't remember which blogger pointed this out to me, but I wont take credit for the means of searching google in this fashion. However, there are some seriously misguided folks out there that obviously don't know the first thing about security.

posted by admin | 0 Comments

Thursday, April 14, 2005 4:50 AM

BlueTooth Sniper Rifle

Are you sitting at home thinking "Man, I really want to be a computer security geek, but I want to look like a terrorist plotting to take down buildings all at the same time." Well, this article has just the thing. A sniper rifle to pick off

posted by admin | 1 Comments

Tuesday, April 12, 2005 11:11 PM

More String / StringBuilder Quirks

Circular References Between Classes: I find it odd just how many circular references there are between StringBuilder and String. String.Format uses StringBuilder.AppendFormat while the StringBuilder.Chars property uses String.SetChar() (an internal

posted by admin | 0 Comments

Sunday, April 10, 2005 6:01 PM

Updating Controls From Worker Threads

I thought this was an issue that has been hashed over enough times, but the other day I was asked this question and I'm still amazed that many folks are unfamiliar with this concept. In WinForms applications, sometimes its desirable to execute a long

posted by admin | 4 Comments

Saturday, April 09, 2005 11:50 AM

Home Network Paranoia

Some have called me paranoid, but I have a slogan of "Friends don't let friends use wireless networks." The reason for this is that wireless networks compromise the need for physical access to a network to perform any attack on the internal network.

posted by admin | 3 Comments

Saturday, April 09, 2005 11:13 AM

ASP.NET 2.0 Quickstarts Available

For those of you that don't know, the ASP.NET 2.0 SDK quickstarts are available. Obviously, these are just an overview, but it helps to get yourself up and running fairly quickly with features new and old. Check them out at http://beta.asp.net/QUICKSTART/aspnet/doc/default.asp

posted by admin | 0 Comments

Saturday, April 09, 2005 2:08 AM

File uploading in a web environment - Part #1

A recent question was asked on the ASP.NET forums: "i'm building a page to let people upload images to my site. they are supposed to see the images after uploading them.i wondered if somebody can take ane "exe" file, change the extension to "jpg",

posted by admin | 0 Comments

Friday, April 08, 2005 9:37 AM

Minutemen Incident -- So funny!

msn.com is still set as my home page. This morning there was an article posted that had me chuckling to myself because of the picture at the top of the article. It was a picture of an ILLEGAL IMIGRANT holding up a T-Shirt. I will never call

posted by admin | 0 Comments

Thursday, April 07, 2005 10:43 PM

Canonicalization issues and File Paths

I posted (or, reposted) an old article I wrote on my old blog about canonicalization issues with file paths. Check it out at: http://www.codemilitia.com/blogs/tobin.titus/articles/category/1003.aspx

posted by admin | 0 Comments

Friday, April 08, 2005 12:26 AM

Universal Registration and Login a bad idea (repost)

( this is a repost from an old blog of mine) In a day and age when you are either griping about security or banging out articles on how to increase code security, it's hard to believe what I saw with my own eyes today. A large and well-known website

posted by admin | 1 Comments

Friday, April 08, 2005 12:18 AM