The Curious Engineer

All blogs / Security

.NET Security Blog

learn.microsoft.com/en-us/archive/blogs/shawnfa

SecurityC# / .NETMicrosoft blogsMSDN archive

’05’10’15’20’25
Posts
364 from 20 Jun 2003 to 21 Apr 2010
Posting
archived, read-only
Kind
personal blog
Feed
https://learn.microsoft.com/en-us/archive/blogs/shawnfa/feed.xml

2010 2

  1. Declarative Security and Reflection
  2. Is CAS dead in .NET 4?

2009 18

  1. Using SecAnnotate to Analyze Your Assemblies for Transparency Violations – An Example
  2. SecAnnotate Beta
  3. Differences Between the Security Rule Sets
  4. Transparency Models: A Tale of Two Levels
  5. Transparency as Enforcement in CLR v4
  6. Bridging the Gap Between Transparent and Critical Code
  7. Transparency 101: Basic Transparency Rules
  8. CLR v4 Security Policy Roundup
  9. Temporarily re-enabling CAS policy during migration
  10. Coding with Security Policy in .NET 4 part 2 – Explicit uses of CAS policy
  11. More Implicit Uses of CAS Policy: loadFromRemoteSources
  12. CLR 4 Security on Channel 9
  13. Visual Studio 10 Security Tab Changes
  14. Coding with Security Policy in .NET 4.0 – Implicit uses of CAS policy
  15. Sandboxing in .NET 4.0
  16. Security Policy in the v4 CLR
  17. .NET 4.0 Security
  18. Authenticated Symmetric Encryption in .NET

2008 11

  1. MD5 on Silverlight
  2. CryptoConfig
  3. Using RSACryptoServiceProvider for RSA-SHA256 signatures
  4. CLR Security Team CodePlex Site
  5. Dr. Dobbs Looks at Silverlight Security
  6. Strong Name Bypass
  7. FullTrust on the LocalIntranet
  8. Disabling the FIPS Algorithm Check
  9. CAS and Native Code
  10. Which Groups Does WindowsIdentity.Groups Return?
  11. Manifested Controls Redux

2007 22

  1. Transparency as Least Privilege
  2. Avoiding Assembly Level Declarative Security
  3. CLR Inside Out: Digging into IDisposable
  4. Silverlight Security Cheat Sheet
  5. Silverlight Security III: Inheritance
  6. Silverlight Security II: What Makes a Method Critical
  7. The Silverlight Security Model
  8. Bypassing the Authenticode Signature Check on Startup
  9. Loading an Assembly as a Byte Array
  10. TemplateControl.control
  11. Using the MMC Snap-In to Configure 64 Bit CAS Policy
  12. Tying your IE Hosted Control to a Manifest
  13. Manifests for IE Hosted Controls
  14. Specifying Permissions for IE Controls in Orcas
  15. Enumerating Evidence
  16. Assembly Provided Evidence
  17. Introduction to the Orcas Add-In Model
  18. Please do not use the .NET 2.0 HMACSHA512 and HMACSHA384 Classes
  19. Elliptic Curve Diffie-Hellman
  20. Elliptic Curve DSA
  21. New Crypto Algorithms in Orcas
  22. Combining Strong Names with Authenticode

2006 61

  1. Happy Holidays!
  2. Evidence Must Be Serializable
  3. new NamedPermissionSet
  4. Relative URL Membership Conditions
  5. SecureString Redux
  6. Quickly Testing Code Under Different Cultures
  7. XML Digital Signature Verification with Unknown URI Schemes
  8. Kenny Kerr Explores UAC
  9. The Differences Between Rijndael and AES
  10. Using Lightweight CodeGen from Partial Trust
  11. RestrictedMemberAccess
  12. RSACryptoServiceProvider, Impersonation, and Ephemeral Keys
  13. [WeddingPermission(SecurityAction.Demand, Unrestricted=true)]
  14. What Evidence does Internet Explorer Give an Assembly
  15. $20 on Double Zero, $20 on LUA please
  16. ClickOnce Same Site Permissions
  17. Sandboxed Applications Can’t Elevate Their Own Permissions
  18. Every CLR has Independent CAS Policy
  19. Column Guides in Visual Studio
  20. Reducing Startup Time Due To Strong Name Verification
  21. APTCA and SQL Server 2005
  22. CLR Inside Out: Using Strong Name Signatures
  23. Avoiding Deny and Permit Only: Take 2
  24. Browsing the SSCLI in Visual Studio
  25. Special Permissions in the SSCLI
  26. Test Signing in Action: IronPython Beta 7
  27. Why the Simple Sandboxing API Requires an ApplicationBase
  28. Handling Custom Zones with the HostSecurityManager
  29. SSCLI Zone Mappings
  30. Custom Zones and the CLR
  31. How does the CLR figure out Zone evidence?
  32. Simple Sandboxing and the LoadFrom Demand
  33. Category Cleanup
  34. Visual Studio Tip: Editing Project Files
  35. Sharing a Strong Name Key File Across Projects
  36. 5 Reasons to Choose Simple Sandboxing
  37. Adding a UAC Manifest to Managed Code
  38. FxCop Transparency Rules
  39. What Happens When You Fully Sign a Test Signed Assembly
  40. Getting Information about an X509Certificate's Key Container
  41. Debugging a Partial Trust ClickOnce Application
  42. SSCLI v2
  43. Why Can't I See Extended SecurityException Information?
  44. Return of the Mailbag
  45. Impersonation and Exception Filters in v2.0
  46. Enveloped PKCS #7 Signatures
  47. APTCA and Custom Attributes
  48. The best part about today ...
  49. SN v2.0 Works With PFX Files
  50. What Happens If Security Policy Files Are Missing?
  51. Which Package are the Security Tools In?
  52. Deny and PermitOnly Are Not For Sandboxing
  53. UAC Policy Settings
  54. Detecting that You're Running in a ClickOnce Application
  55. Isolated Storage and ClickOnce
  56. How Do You Customize Your Policy?
  57. LinkDemands and InheritenceDemands Occur at JIT Time
  58. PrincipalPermission and Finalizers
  59. Mike Rousos on Registry Security
  60. RSACryptoServiceProvider::Encrypt Does Not Provide Deterministic Output
  61. Debugging ADMHost

2005 95

  1. Happy Holidays
  2. What Do You Want to See in Crypto / ClickOnce?
  3. New and Improved Security in the .NET Framework 2.0
  4. Process Requires FullTrust
  5. Authenticode and Assemblies
  6. A Look at the Xbox 360 CPU Design
  7. CryptEncrypt and RSACryptoServiceProvider::Encrypt
  8. Why Can't I See My Partially Trusted ClickOnce Applications in Task Manager?
  9. Where Does the Stack Walk Start or: Why Do Demands from Main Always Succeed?
  10. Finding the Source Code for an Assembly
  11. All About RSAParameters
  12. Don't Roundtrip Ciphertext Via a String Encoding
  13. What can an ApplicationTrust tell us about an AppDomain
  14. Comments in the blog
  15. Adding SignatureProperties to SignedXml
  16. Debugging Lightweight CodeGen in VS
  17. Using Host Protection
  18. Host Protection
  19. MSDN Security Issue
  20. Exploring the ADMHost Sample
  21. New Security Features in Visual Studio 2005
  22. Tour the CLR Security Team
  23. Discover Techniques for Safely Hosting Untrusted Add-Ins with the .NET Framework 2.0
  24. Transparency and Member Visibility
  25. Using Add-Ins with a ClickOnce Deployed Application
  26. RequestOptional Removes Permissions
  27. Creating Partial Trust Directories
  28. PDC '05: Quote of the Day
  29. PDC '05: Lunch with Apple
  30. PDC '05: Let There Be Light
  31. PDC '05: Developer Powered
  32. Marking Your Code Transparent
  33. OptionsGui.py
  34. StateWindow.py
  35. IronPython + MDbg = good times
  36. When the Opposite of Transparent isn't Opaque
  37. Getting Help with your .NET Questions
  38. What's New in Security for v2.0
  39. Securing AppDomain Data
  40. Comparing Java and .NET Security
  41. A Closer Look at the Simple Sandboxed AppDomain
  42. The Simple Sandboxing API
  43. 3 Years, 3 Pounds
  44. Profiling Signed Assemblies
  45. Bootstrapping your Application's AppDomainManager
  46. Setting up an AppDomainManager
  47. Loading the Same Assembly with Different Evidence
  48. Don't Sign C++/CLI Assemblies with Attributes
  49. Heading to New York
  50. Configuring the TrustManager
  51. A New Machine
  52. Viewing IL at Debug Time
  53. Console Applications requre UIPermission
  54. Dynamic Assemblies and Declarative Security
  55. Yiru on Debugging LCG
  56. Mike Downen Starts Blogging
  57. Receiving Session Lock and Unlock Notifications
  58. FullTrust Means FullTrust
  59. Enforcing FIPS Certified Cryptography
  60. Security Off Wrap Up
  61. Forcing Security to Stay On
  62. Whidbey's Security Off Model
  63. Beta 2, Get Yer Beta 2
  64. Security and the Papal Election
  65. Trusting Applications with their Strong Name
  66. When to Strongly Name an Application Entry Point
  67. Happy Birthday Channel 9
  68. More on First Pass Exception Issues
  69. Reading a File from Partial Trust
  70. Safe Impersonation With Whidbey
  71. Safely Impersonating Another User
  72. How to Impersonate
  73. X509CertificateEx is now X509Certificate2
  74. BCL Blog Day
  75. Don't Deny SkipVerification
  76. When is ReflectionPermission Needed?
  77. Reid Talks about Security State and NGEN
  78. The Difference Between the Strong Name Hash and Hash Evidence
  79. CLR Bloggers Redux
  80. Public Key Tokens
  81. Mindless Link Propagation
  82. Feedback on Link and Disjunctive Demands
  83. Does Being in the GAC Grant FullTrust?
  84. Blogging around the CLR
  85. Allowing Partially Trusted Callers
  86. Running IE with SAFER
  87. A Few Observations about Raw Signatures
  88. Finding the Raw Strong Name Signature
  89. Shri Starts Blogging
  90. What Happens When You Sign With A Larger Key
  91. Generating Larger Keys with SN
  92. ClickOnce vs MSI on MSDN
  93. Mike Stall on Finding the Real Exception Call stack
  94. Removing Permissions From FullTrust
  95. How to link to an ActiveX Control from a Strongly Named Assembly

2004 146

  1. Using CasPol to Fully Trust a Share
  2. Home for the Holidays
  3. Why Do I Still Get an Exception Accessing a File with Full FileIOPermission?
  4. Hitting the Mailbag
  5. Handling Assemblies that Won't Load: Method 2.1
  6. Handling Entry Assemblies that Won't Load: Method 2
  7. Handling Entry Assemblies that Won't Load: Method 1.1
  8. Handling Entry Assemblies that Won't Load: Method 1
  9. Managed StrongName Refactoring Complete
  10. MS.StrongNameSignatures.cs
  11. MS.StrongNameKeyFile.cs
  12. MS.StrongNameKeys.cs
  13. MS.StrongNameKeyStore.cs
  14. MS.StrongNameMS.StrongName.txt
  15. MS.StrongNameRegistry.cs
  16. MS.StrongNameUtility.cs
  17. MS.StrongNameVerificationResult.cs
  18. MS.StrongNameNativeNativeMethods.cs
  19. MS.StrongNameNativeStrongNameInFlags.cs
  20. MS.StrongNameNativeStrongNameKeyGenFlags.cs
  21. MS.StrongNameNativeStrongNameOutFlags.cs
  22. msnCommand.cs
  23. msnCommands.cs
  24. msnLog.cs
  25. msnmsn.txt
  26. msnmsn.cs
  27. Failing to Run in Partial Trust Gracefully
  28. Refactoring the Managed StrongName Project
  29. Extracting Public Key Blobs
  30. Next Generation Hardware Speculation
  31. Managed Hosting API Take 3: the Host SecurityManager
  32. An Interesting Take On Two-Factor Authentication
  33. What's the FullTrust List For Anyway?
  34. Customizing the AppDomain Creation Process
  35. ZoneSandboxAppDomainManager.cs
  36. The Managed Hosting API
  37. Peter Torr Provides More Details on Sandboxing AppDomains
  38. Another Fix for the Infamous Calc Problem
  39. An Enhanced Version of the Sandboxed AppDomain
  40. David Starts Blogging
  41. Easily Creating a StrongNameMembershipCondition for an Assembly
  42. Creating an AppDomain with limited permissions
  43. Getting the Current Permissions in a Named Permission Set
  44. The Locations of the Other Policy Levels
  45. I'm Published!
  46. What to do when CasPol throws SecurityExceptions
  47. Grunk Posts on File Canonicalization for FileIOPermission
  48. Does StrongNameSignatureVerificationEx Cache Registry Lookup Results?
  49. Replacing Calc with Calculator Plus
  50. Mike Stall's (Relatively)New Debugger Blog
  51. The Return of ManagedStrongName: Key Containers
  52. Why Can't I Change the KeySize of Asymmetric Algoritms or: The Joys of Backwards Compatibility
  53. How To Tell if Two PermissionSets Are The Same
  54. Finding Out The Current User in the Debugger
  55. How do you use MigPol?
  56. FormatMessage Shortcut for Win32 Error Codes
  57. Spot the Defect: Modifying the Security Policy in Code
  58. How I Learned to Stop Worrying and Love the GC
  59. Deploying Policy on v1.0 and 1.1 of the CLR
  60. .NET 1.0 SP 3 and .NET 1.1 SP 1 Released
  61. New ILAsm Support For Assembly-Level Security
  62. Assembly Level Declarative Security
  63. All About Assert Part IV: When Assert Won't Help
  64. All About Assert Part III: Dispelling the Myths
  65. All About Assert Part II: What Assert Is Good For
  66. All About Assert Part I: What Assert Actually Does
  67. Post Build Assembly Modification Or: Why Won't SN -Vr Work on Tampered Assemblies
  68. SafeHandle
  69. Matt Pietrek on How Iterators Work
  70. Whidbey's New SecurityException
  71. Using DecryptDocument with Super-Encrypted Data
  72. Bye Bye Mr. CIO Guy
  73. Why == and the Equals Method Return Different Results for Floating Point Values
  74. Eric Explains Why Generic Parameters Have Only One Letter
  75. What Happens When My Application Throws An Unhandled Exception
  76. Generating StrongName Keys
  77. ClickOnce Bootstrapper Manifest Generator
  78. Chat with the Crypto API Team ... For Real This Time
  79. New Debugger Features for Whidbey
  80. What's in a Name
  81. Whidbey Beta 1 Ships
  82. Managed Strong Names: Verification and the msn.exe tool
  83. Managed StrongName API
  84. Chat with the Crypto API Team
  85. Calli is not Verifiable
  86. What's the Deal with the ECMA Key?
  87. Checking For A Valid Strong Name Signature
  88. WinDbg 6.3.17 Released
  89. Running Processes as a Different User
  90. A .NET Developer's Guide to Windows Security
  91. Making Strings More Secure
  92. Programming Language Evolution and Text on Potato Chips
  93. Using the XSLT Transform with XML Signatures
  94. Managed DPAPI Part II: ProtectedMemory
  95. Managed DPAPI Part I: ProtectedData
  96. New Microsoft Crypto Newsgroup
  97. Arrays and SOS
  98. Writing Managed Code With VC++ 2005
  99. xml:id and SignedXml
  100. XmlIdSignedXml.cs
  101. Why Doesn't .NET Support Deterministic Finalization?
  102. ClickOnce Overview in May's MSDN Magazine
  103. Customizable CAS Defaults
  104. P/Invoke Wiki
  105. New VC++ Toolkit 2003
  106. Signing Assemblies With C# in Whidbey
  107. Generating a Key from a Password
  108. Ivan Writes about Strong Name Signing with Smart Cards
  109. Whidbey's Secure CRT
  110. Using XPath to Sign Specific XML
  111. Searching for Custom ID Tags With Signed XML
  112. Signing Specific XML With References
  113. What's New in XML For Whidbey
  114. Why Won't using Throw a NullReferenceException
  115. PKCS#12 in .NET
  116. Whidbey Tech Preview
  117. Creating ACLs for Custom Objects
  118. Opening a command prompt for your project
  119. WinXP SP2
  120. So What's This WinFS Thing All About Anyway?
  121. New Security Tool Available for Download
  122. Delay Signing
  123. Security in the Visual Studio Tools for Office Suite
  124. Debugging the Debugger
  125. Same Site Socket Permission
  126. More Details on Portable Crypto Operations
  127. Which Cryptographic Operations are Available?
  128. How Exceptions Work in Rotor (and the CLR)
  129. Further Strengthening Hash Algorithms
  130. Kerberos Overview and Weaknesses
  131. Debugging Unmanaged Code Calling Back Into Managed
  132. Part 4 of the Java vs .NET Comparison Posted
  133. Fun with the Visual Studio Find Combo Box
  134. Don't Click Here If You Value Your Productivity
  135. Introduction to ObjectSpaces
  136. Creating a SecurityElement from XML
  137. Using the Hashing Transforms (or How Do I Compute a Hash Block by Block)
  138. Roundtripping Encrypted Data Through Text
  139. MSDN TV Talks about CAS
  140. Using XML Encryption With CipherReferences, Part 2 - Remote Data
  141. Comparison of .NET and Java Security
  142. Using XML Encryption With CipherReferences, Part 1 - Local Data
  143. Whidbey Security Presentation from the PDC
  144. ClickOnce on the .Net Rocks Radio Show
  145. More Secure XML Digital Signatures
  146. ClickOnce Activation Errors on the PDC Whidbey / Longhorn Build

2003 9

  1. Moving
  2. XML Encryption in .Net
  3. ClickOnce and Security
  4. XML Digital Signatures in .Net
  5. Custom Security Object Samples
  6. Another ClickOnce Article
  7. New ClickOnce Article on MSDN
  8. How to provide extra trust for an Internet Explorer hosted assembly
  9. My application works from my local machine, but throws a SecurityException when I move it to a network share