The Curious Engineer

All blogs / Security

David LeBlanc's Web Log

learn.microsoft.com/en-us/archive/blogs/david_leblanc

SecurityC++Microsoft blogsMSDN archive

’10’15’20’25
Posts
83 from 20 Mar 2007 to 22 Mar 2018
Posting
archived, read-only
Kind
personal blog
Feed
https://learn.microsoft.com/en-us/archive/blogs/david_leblanc/feed.xml

2018 1

  1. SafeInt moved to github

2011 2

  1. Compilers, Integers and Optimizations
  2. Bugs and Consequences

2010 8

  1. Another technique for Fixing DLL Preloading attacks
  2. MS10-048 – Getting the Math Right
  3. Acrobat is Getting a Sandbox
  4. DSig Q & A
  5. Office 2010 Digital Signatures and XAdES
  6. New “Improved” Site
  7. You don’t have to be faster than the bear
  8. Don’t Use Office RC4 Encryption. Really. Just don’t do it.

2009 4

  1. Office 2007 SP2 Encryption Settings
  2. Legacy RC4 Example on Codeplex
  3. MS-Offcrypto Example Update
  4. MS-Offcrypto Examples

2008 29

  1. Office Crypto KDF Details
  2. New, Improved Office Crypto
  3. SafeInt Compiles on gcc!
  4. Improvements in Office Security
  5. SafeInt 3 on CodePlex!
  6. Chrome Getting a Bit Rusty
  7. Why can't you comment?
  8. Ptrdiff_t is evil
  9. Yikes! Vista Security to be Obliterated!
  10. Don’t Feed or Tease the Bears…
  11. More on Checking Allocations
  12. Checking Allocations & Potential for Int Mayhem
  13. More Checking for Pointer Math
  14. Evil Compiler Tricks, and Checking for Pointer Math
  15. Visual C++ Defenses and 64-bit
  16. Use of ASLR, NX, etc
  17. DLL Preloading Attacks
  18. Terminating your app on heap corruption
  19. HD vs. Blu-ray (2)
  20. HD vs. Blu-Ray
  21. 15 Most Influential Security People
  22. MulDiv Mayhem
  23. Unsafe String Handling with strncpy
  24. Templatized Min/Max Solved!
  25. Templatized Min/Max is a bad idea!
  26. A good reason to install SP3
  27. How we know which file formats are used
  28. Office SP3 and File formats
  29. USB Virtual PC’s

2007 39

  1. Implementation vs. Design Defects
  2. Securing Existing Code
  3. How to cause a regression
  4. More on Sandboxing – Network Implications
  5. Writing Secure Code 3
  6. Checking Password Complexity
  7. Safebool
  8. C++ operator overloading trivia
  9. On the Other Hand…
  10. Blog Comment Spam is Really, Really, Really Annoying
  11. Threat Modeling the Bold Button is Boring
  12. Office 2003 SP3
  13. DREAD and the PHB
  14. DREADful
  15. More on C++ code auditing
  16. Avoiding C++ vulnerabilities
  17. Practical Windows Sandboxing – Part 3
  18. Practical Windows Sandboxing, Part 2
  19. Logon ID SIDs
  20. Practical Windows Sandboxing – Part 1
  21. Security Dependencies Follow-up
  22. Process Tokens and Default DACLs
  23. Misc Ramblings
  24. More on Exception Handlers
  25. Is it a Read, Write or Execute AV?
  26. Fun with Template Specialization
  27. Why Threads Are A Bad Idea
  28. Some Failures Are Better Than Others
  29. Crashes Are Bad, OK?
  30. It Might Not Be A Vulnerability If…
  31. Exception Handlers Are Baaad
  32. Even More Cool Integer Tricks
  33. Being Part of the Solution
  34. Word 2007 Blog Feature’s Password Handling
  35. What's still exploitable?
  36. Impersonation isn't dangerous
  37. Economics of the Vulnerability Finding Game
  38. More Fun with Integers
  39. Finally starting a blog