Thursday, December 28, 2006

C# Class Picturebox Improved for Aspect Ratio & Photograph Display in .Net

The key difference between Picturebox and the Photobox class implemented in this blog entry is that the Photobox class supports aspect ratio scaling and is appropriate for displaying photographs in an application.

Tuesday, December 26, 2006

SSL and TSL Essentials

By now, we are growing accustomed to the staggering success of the Internet and digital commerce performed over it. Millions of people—with billions of dollars—rely on the Web to execute critical transactions every day. All of those transactions require trust.

Users must trust the authenticity of the Web site; users must trust that their sensitive information remains confidential as it traverses the Internet and users must trust that no malicious hacker has modified their requests.

Security technology provides that trust. And on the Web, the Secure Sockets Layer (SSL) protocol is THE security technology.

Read the rest here at www.NetworkSystemDesignLine.com

Thanks for reading,

Cory Trese
cory.trese@gmail.com
http://www.corytrese.com/

Thursday, December 21, 2006

Interview with Joyce Park

Joyce Park is the co-founder and CTO of Renkoo.  I saw this blog entry, and interview with Joyce Park from Friendster and it has a series of questions about getting shitcanned for blogging.  I think a more interesting topic is blogging after you get shitcanned, something I know a little bit about.  But unlike this person, I gave in and edited my entries.

Wednesday, December 20, 2006

Google Kills SOAP?

From Google Deprecates Their SOAP Search API:

The AJAX Search API is great for web applications and users that want to bling their blog, but does not provide the flexibility of the SOAP API. I am surprised that it has not been replaced with a GData API instead. The developer community has been discussing this and do not seem happy with the change. Discussion on the forums have pointed out that Yahoo! has a REST Search API. Live Search also has a SOAP API available.

This worries me.  What is Google doing?  Trying to kill off developer mind share?

Tuesday, December 19, 2006

ASP.Net 1.1 Does Not Stop XSS or Cross-Site Scripting

The built in protection in ASP.Net 1.1 is broken.

The "ValidateInput()" method does not work.  It ignores null characters and so does IE.  So, all your 'ValidatePageInput="true"' does nothing.  You are not safe.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnaspp/html/scriptingprotection.asp

Write your own HTTPModule or buy mine.