The Curious Engineer

All blogs / Security

Eugene Siu's Thoughts on Security

learn.microsoft.com/en-us/archive/blogs/esiu

Share my latest security research and techniques

SecurityWeb developmentMicrosoft blogsMSDN archive

’05’10’15’20’25
Posts
36 from 10 Nov 2004 to 15 Nov 2008
Posting
archived, read-only
Kind
personal blog
Feed
https://learn.microsoft.com/en-us/archive/blogs/esiu/feed.xml

2008 6

  1. (In)Security of MultiByteToWideChar and WideCharToMultiByte (Part 2)
  2. (In)Security of MultiByteToWideChar and WideCharToMultiByte (Part 1)
  3. My favorite security blogs and podcasts
  4. “Out of Band” security patch MS08-067
  5. What is unique about patch Tuesday of October 2008?
  6. <script>alert()</script>

2007 20

  1. Troubleshooting Networking and IPSec Issues
  2. ASP.NET ValidateRequest does not mitigate XSS completely
  3. True test of a security geek
  4. Given enough eyeballs all bugs are shallow: True or False?
  5. System.URI.AbsolutePath Vs Phishing Attack
  6. Web Service Security Guidance
  7. More eyeballs for .Net Framework code
  8. Anti-Malware and Spyware help for home users
  9. HTTP Header Injection Vulnerabilities
  10. Reset Outlook connections without restart
  11. Silverlight security MSDN magazine article
  12. Just learned how to cross-post via MetaWeblog API
  13. IE Developer Toolbar helps me hack
  14. Exchange 2007 RPC interfaces are locked down
  15. My first passphrase
  16. Distribution List is more locked down in Exchange 2007 to reduce spam
  17. Is anonymous read-only site immune to XSS?
  18. I am excited about EV Cert
  19. Why do browsers show cert warnings for Outlook Web Access 2007 by default?
  20. To configure and test IP block list from Spamhaus.org for Exchange 2007

2005 6

  1. Network Service Vs Local System
  2. About NTLM/Kerberos and Constrained Delegation in W2k3
  3. About LDAP injection
  4. View calendar via Date and Time Properties as non-admin
  5. How to enable Remote Desktop for non-admin?
  6. Running as non-admin is not as hard as I imagine

2004 4

  1. Why is a JPG file forced to be saved as BMP in IE?
  2. What is the maximum size of post requests to IIS?
  3. Do you have an easy way to find out what error codes mean?
  4. Nifty feature of Outlook Appointment/Meeting