|
I have a developer background, but in a new job, I fell into the role of security expert for Microsoft's SQL Server (v7 & 2000) and IIS (v4 & 5). I am contracted to a US Dept. of Defense agency. When they were doing a big security push, they didn't have any IIS or SQL Server "experts/gurus." I'm no self-proclaimed expert, but because I was familiar with both thanks to my MCDBA cert, I was tasks with locking them down. In the last few months, I've learned quite a bit about security on these to systems. The military bases their security off the specifications created by a group of software companies & govt agencies such as Microsoft, Sun, IBM, HP, CIA, and the NSA. There's a gold & platinum standard. These standards are used by many of the people in the private sector... the military uses the platinum standard.
What is thethe point of this posting? I was thinking about writing a few articles based on this security. Would this be something of interest to others?
-AC
|
|
|
|
|
Andrew Connell wrote:
Would this be something of interest to others?
Hell yes! 
We can either just carry on moaning about IIS security or we can learn how to lock it down as is needed.
A systematic article on locking down IIS and SQL would be very useful, especially if it comes from real world experience and not just theoretical pondering 
Paul Watson
Bluegrass
Cape Town, South Africa
Ray Cassick wrote:
Well I am not female, not gay and I am not Paul Watson
|
|
|
|
|
Right now, I'm playing with some undocumented Outlook Express interfaces. Based on this, I am planning to write a COM SDK/library on Outlook Express that would have the following features-
allow enumeration of folders,
creation/deletion/copying/renaming of folders,
getting folder locations and properties,
traversing folder hierarchy,
accesing message stores,
accessing message properties,
getting message contents,
accessing addressbook entries,
common mail-related notifications,
will be COM based and component will include support for scripting clients,
and will probably work with all majoe OE versions( OE4+ to OE6).
'My capacity for happiness', he added, 'you could fit into a matchbox without taking out the matches first'.
- Marvin, the robot.
Amit Dey
sonork: 100:18407
msn: visualcdev
|
|
|
|
|
Sounds cool, Amit.
Isn't this similar to CDO though?
Cheers,
Simon
"VB.NET ... the STD of choice", me, internal company memo
|
|
|
|
|
Not really. CDO is more for MS Outlook. The cool thing about this is I'm using undocumented some COM API. I have tried out my code and it seems to work for OE 5.0,OE5.5 and 6.0 with some modifications.
'My capacity for happiness', he added, 'you could fit into a matchbox without taking out the matches first'.
- Marvin, the robot.
Amit Dey
sonork: 100:18407
msn: visualcdev
|
|
|
|
|
Sounds cool. You should include a way to send a complete message or just open a message with some of the fields already filled out (i.e. Subject, TO, etc).
If you have a problem with my spelling, just remember that's not my fault. I [as well as everyone
else who learned to spell after 1976] blame it on
Robert A. Kolpek for U.S. Patent 4,136,395.
|
|
|
|
|
I haven't gotten to writing a complete new message but OE message and folder enumeration and extraction seems to work great.  Eventually it will support message creation at a very low level and dynamic message manipulation(like adding signatures to all mails).
'My capacity for happiness', he added, 'you could fit into a matchbox without taking out the matches first'.
- Marvin, the robot.
Amit Dey
sonork: 100:18407
msn: visualcdev
|
|
|
|
|
Sure I'm interested. I also found something to make plug-ins for OE... I wonder if we have the same source though...
Would we be able to catch some events?
Let me know!
Luc
---------------
Tired of Spam? Introducing InboxShield® for Microsoft® Outlook®
http://www.edovia.com
|
|
|
|
|
Plugins for OE? like toolbars,bands,menuitems etc? now that's interesting. The thing with me is that all my code is totally non-visual and will have no support for any user interface items(with OE I guess we still need to hack with hooks,FindWindow() or something). I'm trying so that all of the messageboxes(like make OE default client) are also suppressed and this seems to work well.
So maybe if we could put the user interface elements together with my COM object for all folder and store info for something new that also offers toolbars and menubars.
'My capacity for happiness', he added, 'you could fit into a matchbox without taking out the matches first'.
- Marvin, the robot.
Amit Dey
sonork: 100:18407
msn: visualcdev
|
|
|
|
|
I haven't got time to read and understand the code I found but all I know is that it's a big hack and that it does not work very well.
I'm interested in making my product available for OE but I don't count on it to be as performant as in Outlook...
I'll let you know when I find my source back ( I lost it!!! )
Luc
---------------
Tired of Spam? Introducing InboxShield® for Microsoft® Outlook®
http://www.edovia.com
|
|
|
|
|
Hi Luc,
Naw! I'm not doing any major hacking. Just using a few undocumented MS interfaces regarding Outlook Express.
If you think the effort will be worthwhile, maybe we can talk more about the tech side of things?
'My capacity for happiness', he added, 'you could fit into a matchbox without taking out the matches first'.
- Marvin, the robot.
Amit Dey
sonork: 100:18407
msn: visualcdev
|
|
|
|
|
Wonderful! Keep working!!!
-BHKien
|
|
|
|
|
An article about that messy bug with the .NET Form designer, deleting either code or even controls from the code without notice.
From my experiments, it's due to a tiny namespace resolution bug. This makes the form designer believe a given control or methods are not used anymore.
A nice tutorial to avoid this bug would be welcome.
And of course, if Everett does not fix this bug, would be welcome twice!
How low can you go ?
(MS rant)
|
|
|
|
|
I think Microsoft fixed this bug. You can get the patch from the URL below.
http://msdn.microsoft.com/vstudio/downloads/updates/datalossifx.asp
|
|
|
|
|
Actually, on closer inspection, I see that this only applies to Webforms, so if the bug you're talking about isn't in the Webforms designer, then never mind, and a workaround would definitely be appreciated.
|
|
|
|
|
I am going to check this out.
How low can you go ?
(MS rant)
|
|
|
|
|
Ability to Debug a .NET RCW : this would end the DllImport type mapping knightmare. Nuff said, everybody who has been there already knows what I am talking about...
How low can you go ?
(MS rant)
|
|
|
|
|
Would be nice as an extension since the VS.NET IDE is more programmable, and as one can hardly say attributes are intuitive to use.
How low can you go ?
(MS rant)
|
|
|
|
|
I am currently working on a papaer which takes self-contained applications and identifying directions and issues with deploying externalized DLL's, creating reference, and distributing component code. Is this an article that would could be published here? I did not see one written on this subject.
---------------------------------------------
Once I thought I was wrong
but I was happy to discover that was a mistake.
Condor
|
|
|
|
|
theRealCondor wrote:
Is this an article that would could be published here?
I for one would be very interested to read it 
Dylan Kenneally
London, UK
|
|
|
|
|
Yes Sir! It is my intent to publish it here. I posted this to see if this was the type of topic that the site would publish. After writing all of it up (it is done and in draft form...soon to go through an editting) I will submit it for publication here.
_____________________________________________
I have a tendancy to where my mind on my sleeve
I have a habit of losing my shirt...
|
|
|
|
|
Does it use COM?
'My capacity for happiness', he added, 'you could fit into a matchbox without taking out the matches first'.
- Marvin, the robot.
Amit Dey
sonork: 100:18407
msn: visualcdev
|
|
|
|
|
Amit Dey wrote:
Does it use COM?
OUCH! That is one area that I have had trouble getting good answers (or any answer for that matter). When you get into .NET DLL's managed on an MTS box, is it a COM object to a .NET consumer??? I hope to put together the resources to begin evaluating and test this whole thing. Maybe for article II -- .NET objects in COM
_____________________________________________
I have a tendancy to where my mind on my sleeve
I have a habit of losing my shirt...
|
|
|
|
|
How I create ram file ( to hear music by winamp ) ?
|
|
|
|
|
A .ram file is a RealVideo file. Download the RealProducer encoding tool from RealNetworks. From what I remember, the basic encoder is free.
How low can you go ?
(MS rant)
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
