|
Here at the Microsoft PDC, I noticed something in a demo which surprised me a little: If, from a web page, the user downloads and runs a .EXE from a web site, and that .EXE is a .NET managed executable, the user will NOT get a security warning. The .NET program will be "sandboxed" (gee, I thought MS didn't like sandboxing  ), so the user is safe.
I like that. I tried it myself -- wrote a .NET exe, which was NOT signed with Authenticode, and then tried downloading it via a web page that looked like this:
Click <a href="foo.exe">here</a>
It worked as I had seen in the demo: foo.exe downloads and runs, with no security warning, but as soon as foo.exe tries to do something "bad," e.g. open a file, a security exception is thrown. Cool. And a bit better than the Java way, because Java applets download inside the IE frame, but .NET exes can open Windows and stuff -- they look like regular client apps.
My questions are:
(1) How does this work? My guess is, IE downloads the EXE, looks at its header and sees that the bit is set indicating it's a .NET EXE, so it knows that it doesn't need to put up a security warning since the CLR will sandbox the program.
(2) Is this a feature of IE6? If I downloaded the EXE in an earlier version of IE, would it work the old way (put up a security warning based on the Authenticode stamp on the EXE)?
Mike Morearty
mike@morearty.com
http://www.morearty.com - handy code and programs
|
|
|
|
|
Mike,
In your VS.NET Release Candidate that you received at PDC, check out the help for an article called "Security in .NET: Enforce Code Access Rights with the Common Language Runtime". It talks a little about the SAFER initiative and code verification.
Cheers!
Colin
|
|
|
|
|
.NET exes can open Windows and stuff -- they look like regular client apps.
That is very very scary. Please tell me there's at least a "Warning: applet window" message.
--Mike--
http://home.inreach.com/mdunn/
This posting is provided "as was" with no warranties, guarantees, lotteries, or any of those little bags of peanuts you get on planes. You assume all risk for crossing the street without holding mommy's hand. © 2001 Mike's Classy Software. Member FDIC. If rash develops, discontinue use.
![Heart | [heart]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/love.gif) your ![Green Alien | [Alien]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/alien.gif) with ![Good Stuff | [The good stuff]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/vegemite.gif) and ![Beer | [beer]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/beer.gif)
|
|
|
|
|
Yes, there is such a message. Over the app's window, a little "speech balloon" comes up, which says:
.NET Security Information
This application is running in a partially trusted context.
Some functionality in the application may be disabled due to
security restrictions.
This message comes up on each top-level window the program creates. I haven't yet delved into exactly what such a program is and is not allowed to do, but basically it's similar to the sandbox model that Java has. E.g. they can't touch the local file system (except for a small scratch area called IsolatedStorage).
Mike Morearty
mike@morearty.com
http://www.morearty.com
|
|
|
|
|
I have seen and heard several references to how you can create relationships between datatables and then produce a dataview on more than one table; however, all of the code samples I can find always call the default view for a single table rather than building a custom view.
Does anyone know where I can find or have and example of a dataview that is based upon more than one datatable.
quist
|
|
|
|
|
We have created a web service for our clients. Now we need to additionally allow the clients to call the Web Service from a Unix platform. Any ideas on how this can be accomplished.
Thx.
Mark
|
|
|
|
|
Web Services are based on open-standard XML/SOAP. Visual Studio .NET automates the translation from the HTTP-based protocol to a class interface by creating a proxy class. As long as your UNIX clients can do HTTP, then they can see the resulting XML from the call and interpret it. I don't have any specifics for UNIX, but it shouldn't be too hard to find information on XML/SOAP calls.
Colin Bowern, Consultant
Enterprise Platform Solutions
Microsoft Services (Canada)
|
|
|
|
|
I think .NET will be great for IT departments, consulting firms, service providers, and the likes. From their press releases, I also think that MS develop .NET with these people in mind.
However, I haven't heard their views on .NET for commercial application development.
Personally, I don't think .NET haven't much to offer on this area except improve time-to-market. However, .NET runtime will surely penalize apps runtime performance.
Any views on this one?
|
|
|
|
|
The Common Language Runtime offers some great stories around performance (Just-In-Time and pre-compiled apps). As far as commercial applications, it is already being used in some earlier adopters. Crystal Decisions is one of the first out the door with their version of Crystal Reports built on .NET. Expect to see a bunch more out soon now that the Release Candidate is available.
Cheers!
Colin Bowern, Consultant
Enterprise Platform Solutions
Microsoft Services (Canada)
|
|
|
|
|
VS.NET RC1 is available for download for MSDN members.
|
|
|
|
|
I come from Poland and forgot about my English 
I just instal MS Visual Studio .NET Beta 2 from MSDN DVD.
I know that problem is very old, but i can't find solve of this.
This DVD is from July. There is a bug whith reduced functionaly.
How i can change it???
HELP
Tobiasz
|
|
|
|
|
I actually had a lot of trouble with the DVD getting read at all, although I admit I've not used it yet ( still waiting for a book to arrive ). What do you mean by reduced functionality ? It's a beta, so it wouldn't surprise me if some things do not work, but unless you're specific about what you mean, any problems with installing etc., I don't see how anyone can hope to help you.
Christian
As I learn the innermost secrets of the around me, they reward me in many ways to keep quiet.
Men with pierced ears are better prepared for marriage. They've experienced pain and bought Jewellery.
|
|
|
|
|
Sorry for the late reply. There are 2 issues that I can think of that you may be referring to:
1 - RC2 had a bug in the VBScript. There is a download available from the VS.Net webpage on MSDN.
2 - The time-limit built-in. If you do an update from the VS help menu, MS has an SP that fixes that.
Phil Boyd
MCP
CPT, AR
You may be gone, but we will never forget your sacrifice.
"Proud to be an American..." Lee Greenwood
|
|
|
|
|
Hi everybody,
I tried to install the .net framework on my Windows 2000 Server SP2. But the installation of the Windows installer V 2.0 crashed. I have tried everything to fix this problem with register and unregister of msiexec.exe and regsvr32 msi.dll but nothing helped. I really would like to install the .net framework, but if I not can circumvent this problem with the Windows Installer this will not be possible. Does anybody know why the upgrade of the Windows Installer V1.1 to Version 2.0 can be done correctly ?
|
|
|
|
|
Hi people !,
help please !! how can you facilitate Web Service to Windows Forms communication ? (or at the least, what's it called ?)
what i mean is, suppose you invoke a Web Service function that should update a TextBox on separate Windows Forms application . they are both on the same machine.
thanks ! any help would be greatly appreciated !!!!
|
|
|
|
|
If you have the Visual Studio .NET Release Candidate (see http://msdn.microsoft.com/vstudio/nextgen/beta.asp), check out the following help topic "Walkthrough: Calling XML Web Services from Windows Forms"
Cheers!
Colin Bowern, Consultant
Enterprise Platform Solutions
Microsoft Services (Canada)
|
|
|
|
|
hi:
so many people said c# just like java! now i have a task to do something
in c# and .net just like do in java applet! But so far, i can't find a way to
do this.Doesn't .net have this utility? Plesea help me !
(by the way, for we must draw graphics on the panel in webpage, if we can
access the gdi of it, my task will be easy,but i can't do that too!)
thanks a lot?
|
|
|
|
|
|
its not about .NET though
also webforms are pretty good stuff
|
|
|
|
|
Hi,
Having traditionally written C++ windows applicatons for a number of years, I am looking forward to geting to know the .NET technologies.
While starting to read about what is available the first thing that springs to mind is how are these applications deployed, what OS's support this.
There is a lot of talk about cross-platform compatibilty but does that mean when you are deploying your application on non-.NET compliant systems e.g. I assume win95, win98,ME,non-Microsoft OS's then you install the necessary .NET components?
Could anyone point me in the direction of any articles that addresses this area.
Thanks
Neil
|
|
|
|
|
Best place is on MSDN in the Deploying .NET Framework Applications*.
If you have high level questions about .NET then msdn.microsoft.com/net* is the place to start.
About the cross-platform compatibility; the platform you want to deploy to will have to have a .NET framework written for it. The MONO project is doing this for Linux so that you can run .NET apps on Linux. I am unsure though about other versions of Windows or other OSs.
Hope that helps
*links open in current browser window
regards,
Paul Watson
Bluegrass
Cape Town, South Africa
"The greatest thing you will ever learn is to love, and be loved in return" - Moulin Rouge
"In other words, the developer is dealing with an elephant, the accountant is dealing with a bunny rabbit." by Stan Shannon - 16/10/2001
|
|
|
|
|
The .NET Framework will be available for Windows 95 through XP. Some installation packages such as InstallShield Developer and Wise Installer allow you to package a "merge module" for the .NET Framework, thus ensuring that it is installed on the target machine if it is not already there.
MSDN is a great resource and all of the technical content is available free at http://msdn.microsoft.com
Cheers!
Colin Bowern, Consultant
Enterprise Platform Solutions
Microsoft Services (Canada)
|
|
|
|
|
Hi,
If anybody has worked on returning NameValueCollection from webservice, I hope you might have come accross this typical error message.
You must implement the Add(System.String) method on
System.Collections.Specialized.NameValueCollection because it inherits from
ICollection.
Please let me know if anybody has a solution
Pooran Prasad R.
Itreya Technologies Pvt. Ltd.,
Bangalore, India
pooran.prasad@itreya.com
|
|
|
|
|
We are seeking people knowledgeable in all facets of .NET for a short-term freelance technical documentation role. Role involves creating tests and testing methods to measure knowledge of the subject matter. For serious inquiries send an email testcoordinator@techprofiles.com
|
|
|
|
|
I've played around with the Soap Toolkit a bit and i'd like to take a look at the .Net soap stuff but I can't seem to find any C++ SOAP examples for .Net.
What I need to do is build a C++/MFC windows app that can talk SOAP. Not only does it need to understand soap but it needs to be able to handles complex types from a SOAP service writen in Java. The Java side serializes a java class and I need to be able to deserialize it.
any pointers or examples? I can find nothing on the ms site.
thanks
mike
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
