Feed Yourself:
Subscribe by Email:
|
|
|
On this page....
 Email Us
Archives
| March, 2007 (1) |
| January, 2007 (3) |
| December, 2006 (9) |
| November, 2006 (9) |
| October, 2006 (1) |
| September, 2006 (3) |
| August, 2006 (1) |
| July, 2006 (1) |
| June, 2006 (4) |
| May, 2006 (5) |
| April, 2006 (6) |
| March, 2006 (5) |
| February, 2006 (5) |
| January, 2006 (5) |
| December, 2005 (2) |
Navigation
Categories
Disclaimer
The opinions expressed in this site are those of the individual authors and
do not necessarily represent the official view of Ardent Development nor its employees, subsidiaries, partners,
or customers.
© Copyright 2008, Ardent Development
Powered by: newtelligence dasBlog 1.8.5223.1
|
|
|
|
 Tuesday, March 28, 2006
|
|
|
From http://mcpmag.com/columns/article.asp?editorialsid=1275:
An IT training firm in the U.K. conducted a stunt (or promotion, depending on your feelings about it) to demonstrate that users in London's Golden Mile, its financial district, need more security training. They stood alongside the road and handed out CDs claiming to contain a special Valentine's Day promotion. While no numbers have been provided, a spokesperson for the firm indicated that the CD, when inserted, would "call home" to the firm indicating the user had run it.
The CDs had written on the outside that you ought not to do this because it might be a violation of policy. Despite this, some employees ran the CDs anyway.
As a security conscious guy, this makes me scream, "Aaaaaaaaaaaarrrrrrrrrrrggggggggggghhhhhhhhhhhh." <heaving sigh>
This column also has some interesting thoughts on the Search Across Computers feature of the Google Desktop that you might want to read. Personally I loathe the Google Desktop. I love the Google Deskbar which has been discontinued as a standalone product. Too bad (thankfully I have a copy of the installer backed up for the future).
Posted by Derek Hatchard 3/28/2006 10:51:19 AM (Atlantic Standard Time, UTC-04:00)
|
|
Tuesday, March 21, 2006
|
|
Membership in the .NET framework 2.0 allows you to add security to your application with little to no code.
When trying to enforce strong password rules in our church software I encountered an interesting problem.
At first I modified the web.config by adding the following line to our membership provider section.
passwordStrengthRegularExpression="(?=.{8,})[a-z]+[^a-z]+|[^a-z]+[a-z]+"
RegEx explained: 8 characters or more in length, at least 1 lowercase letter, at least 1 character that is not a lower letter.
I removed:
minRequiredPasswordLength="0"
minRequiredNonalphanumericCharacters="1"
After some testing I found that even when following the password rules, a password change would fail.
The ChangePassword control, which is part of the Login suite of controls, doesn’t give you any information as to why the password changed failed.
After a few reviews of my RegEx and confirming that the syntax is correct in code and with some useful online regular expression testers (see links below), I tried changing the password using the following code:
MembershipUser mUser = Membership.GetUser(); // gets the current logged in user
//change the password
mUser.ChangePassword(mUser.GetPassword(), “invalidpassword”);
That caused the following exception: System.ArgumentException: Non alpha numeric characters in 'newPassword' needs to be greater than or equal to '1'.
So I added this line:
minRequiredNonalphanumericCharacters="0"
And our password complexity rule started working properly.
I won’t start a debate on the merit of setting the minimum required non alphanumeric characters (say that ten times) to 1, but hopefully this will help someone somewhere some time.
Links:
JavaScript Regular Expression Tester
http://www.roblocher.com/technotes/regexp.aspx
.NET Regular Expression Tester
http://www.dotnetcoders.com/web/Learning/Regex/RegexTester.aspx
Posted by Sebastien Aube 3/21/2006 4:28:48 PM (Atlantic Standard Time, UTC-04:00)
|
|
Monday, February 20, 2006
|
|
|
I didn't realize that the Express Editions of Visual Studio 2005 are only free until November 2006.
http://msdn.microsoft.com/vstudio/express/support/faq/default.aspx#pricing:
We originally announced pricing of Visual Studio Express at US$49. We are now offering Visual Studio Express for free, as a limited-in-time promotional offer, until November 6, 2006. Note that we are also offering SQL Server 2005 Express Edition as a free download, and that this offer is not limited to the same promotional pricing period as Visual Studio Express.
Posted by Derek Hatchard 2/20/2006 8:50:46 PM (Atlantic Standard Time, UTC-04:00)
|
|
Saturday, February 18, 2006
|
|
|
Keane Canada is looking for 20 Mainframe Programmer/Analysts in Halifax, Nova Scotia. I hope they pay well because these jobs are, um, not terribly appealing:
Required Skills:
- COBOL
- JCL
- DB2
- Strong analysis skills
- Strong communication skills
- Independent Learner
Be part of a significant project maintaining software components based on specifications and test changes. Work hours will be early (8:00-5:00) & late (12:00-9:00) shifts with late shifts every other week (50% of the time).
COBOL and JCL with night shifts half the time. Ugh.
Posted by Derek Hatchard 2/18/2006 9:35:36 AM (Atlantic Standard Time, UTC-04:00)
|
|
Friday, February 17, 2006
|
|
|
Are you going to MIX 06? I really wish I could make it but too much is going on here to make room in my schedule. Grrrr. I'm going to regret not going to this conference. It looks like some really interesting stuff is going to happen. The one I most hope is available online (live or on-demand):
http://blog.mix06.com/blog/archive/2006/01/24/58.aspx: Bill Gates in an unscripted conversation with Tim O'Reilly. I love listening to Tim O'Reilly speak. If you haven't heard him, check out some of the podcasts featuring him over at IT Conversations (http://www.google.com/custom?q=Tim+O%27Reilly&sitesearch=itconversations.com).
Posted by Derek Hatchard 2/17/2006 10:55:29 AM (Atlantic Standard Time, UTC-04:00)
|
|
Wednesday, February 15, 2006
|
|
|
It's all over the news sites this week, but in case you missed it: a definition file update for the beta release of Microsoft Anti-Spyware incorrectly identified Norton AntiVirus as a password-stealing trojan virus. Then again, not everyone thinks that calling Norton AV a virus is off-base: http://it.slashdot.org/it/06/02/11/2259232.shtml.
Posted by Derek Hatchard 2/15/2006 9:27:07 AM (Atlantic Standard Time, UTC-04:00)
|
|
Friday, February 03, 2006
|
|
|
After a round of voting from a short list amongst friends and family, we have a final 3 set of logo options for our new church software. We would really appreciate your comments on which logo you think is best. Leave a comment below or send us some feedback at http://www.ardentdev.com/Feedback/. Thanks!
Logo 1:
Logo 2:
Logo 3:
Posted by Derek Hatchard 2/3/2006 4:28:29 PM (Atlantic Standard Time, UTC-04:00)
|
|
Wednesday, January 25, 2006
|
|
|
I spoke at the Fredericton .NET User Group last night on Team System. It went well - a lot of the stuff in Team System is fun to show and professional developers really resonate with it.
Well... I use the Address toolbar in the Windows taskbar. It just so happened that the last site I visited via that toolbar was www.x-rates.com, which is where I regularly check the current US to Canadian dollar exchange rate. In the middle of my presentation I noticed the URL and it dawned on me that it might not be obvious to everyone that the site is, um, family friendly. So if you were at the presentation and the noticed the URL, X is for exchange.
Posted by Derek Hatchard 1/25/2006 8:15:00 PM (Atlantic Standard Time, UTC-04:00)
|
|
Tuesday, January 17, 2006
|
|
|
To check for a network connection in .NET 2.0 use this:
System.Net.NetworkInformation.NetworkInterface.GetIsNetworkAvailable()
To monitor a change in IP address or a change in network availability, use the events from the NetworkChange class:
System.Net.NetworkInformation.NetworkChange.NetworkAvailabilityChanged
System.Net.NetworkInformation.NetworkChange.NetworkAddressChanged
Posted by Derek Hatchard 1/17/2006 9:15:15 PM (Atlantic Standard Time, UTC-04:00)
|
|
Friday, January 06, 2006
|
|
|
What are the .NET Framework and Visual Basic .NET features that every VB developer should know? I suggest the following as a starting list (in no particular order):
- Object-oriented features: classes, objects, constructors, inheritance, interfaces, polymorphism, methods, overloading
- Shared (static) Classes and Methods
- Converting data types and casting objects
- Manipulating strings and using StringBuilder
- Basic File I/O (open, read, write)
- ADO.NET: DataSet, *DataAdapter, *Command, and *DataReader classes
- Basic XML processing (opening a file/stream and finding an element)
- Exception handling / Try-Catch blocks
- Difference between late binding and early binding (and the existence of Option Strict On)
- Assemblies, referencing DLLs, and importing namespaces
- Basic collections (lists, dictionaries, arrays)
- Security fundamentals (CAS, authentication vs. authorization, validating input)
- Basics of threading
- Basics of garbage collection
- Spitting out data and getting data back (varies with type of application of course)
Comment away! Please don't just say C# (or Ruby)... I'm not looking for yet another VB vs. C# debate.
Posted by Derek Hatchard 1/6/2006 3:41:18 PM (Atlantic Standard Time, UTC-04:00)
|
|
|
|