Category: ASP.NET security

Advice From Successful Freelancers: Starting and Maintaining A Freelancer Career

For the e-book, Advice from Successful Freelancers: How They Built Their Careers & How You Can Too!, I asked ten questions of freelancers who were living their dream …

This is a common claim, and completely preposterous. Even if you could decompile to the absolute original source, including comments, local variable names etc, that wouldn’t make the application Open Source Software. The Open Source movement is about software licences …

Authorization is the process of determining the accessibility to a resource for a previously authenticated user. Note that authorization can only work on authenticated users, hence ensuring that no un-authenticated user can access the application. The syntax for specifying authorization …

According to MSDN, “When using impersonation, ASP.NET applications can optionally execute with the identity of the client on whose behalf they are operating. The usual reason for doing this is to avoid dealing with authentication and authorization issues in the …

Passport authentication is a centralized authentication service that uses Microsoft’s Passport Service to authenticate the users of an application. It allows the users to create a single sign-in name and password to access any site that has implemented the Passport …

Windows Authentication is used to validate a user based on the user’s Windows Account; however, this is only applicable in intranet environments where the administrator has full control over the users in the network. The following code snippet illustrates how …

A client generates a request for a protected resource.
IIS receives the request, and if the requestor is authenticated by IIS, or if IIS Anonymous Access is enabled, the request gets passed on to the ASP.NET application. Because the authentication mode …

The ASP.NET security framework accomplishes this by working in conjunction with the various security subsystems present in the machine where ASP.NET is installed. This includes security provided by the operating system ( NTFS file access permissions ) as well as

…

Time for a short commercial break: O’Reilly has just announced the Rough Cuts version of Programming ASP.NET AJAX, the second edition of Programming Atlas. I am currently revising the Atlas book for the final ASP.NET AJAX …

Just a quick note: Microsoft has just released Beta 1 of the next Visual Studio code-named “Orcas” (Team System and Professional Edition and TFS) for MSDN subscribers. A public download for everyone, however, are the “Orcas” …

Just saw that Microsoft unveilled the official name of the technology formerly known as WPF/E: Silverlight. All related downloads like the browser plugins, the SDK and the samples have been renamed accordingly. Strange, I would have …

Atlas supported page methods: A functionality to embed web service methods into .aspx pages and consume them with JavaScript. For instance, if you had the following method:

[WebMethod]
string sayHello() {
return “Hello”;
}

—you could consume this method from JavaScript …