DotNetKicks.com : Stories kicked by CraigStuntz

ASP.NET session hijacking with Google and ELMAH

Mon, 09 Jan 2012 11:17:10 GMT

ELMAH is one those libraries which is both beautiful in its simplicity yet powerful in what it allows you to do. Combine the power of ELMAH with the convenience of NuGet and you can be up and running with absolutely invaluable error logging and handling in literally a couple of minutes. Yet, as the old adage goes, with great power comes great responsibility and if you're not responsible with how you implement ELMAH, you're also only a couple of minutes away from making session hijacking of your ASP.NET app - and many other exploits - very, very easy.

.Net's Sort Is Not Secure. Don't Use It. Here's a better one.

Fri, 06 Jan 2012 01:57:26 GMT

.Net's Array.Sort (up to at least version 4.0) has serious weaknesses

A Monadic Pratt Parser in F#

Thu, 29 Dec 2011 14:30:03 GMT

A blog post detailing the creation of a monadic pratt parser implemented in F#. Demonstrates the combination of Pratt parsing with parser combinators.

5 Ways That Postsharp Can SOLIDify Your Code: Logging and Auditing

Thu, 03 Mar 2011 15:42:20 GMT

Matt Groves's journey through the top 5 aspects inevitably meets logging and auditing. But rather than staying at the "Hello, world" level, Matt explains how the aspect can be optimized for performance, and shows how the aspect optimizer, a feature of the professional edition of PostSharp, makes the difference.

5 Ways That Postsharp Can SOLIDify Your Code: Caching

Wed, 16 Feb 2011 15:03:24 GMT

Sometimes there's just no way to speed up an operation. Maybe it's dependent on a service that's on some external web server, or maybe it's a very processor intensive operation, or maybe it's fast by itself, but a bunch of concurrent requests would suck up all your resources. There are lots of reasons to use caching. PostSharp itself doesn't provide a caching framework for you (again, PostSharp isn't reinventing the wheel, it's just making it easier to use), but it does provide you with a way to (surprise) reduce boilerplate code, stop repeating yourself, and separate concerns into their own classes.

5 Ways Postsharp Can SOLIDify Your Code: Lazy Loading of Dependencies

Wed, 09 Feb 2011 14:30:18 GMT

Matthew Groves discusses how combining aspect-oriented programming and a service locator can provide an attractive alternative to dependency injection containers. Dependencies are loaded lazily when a property or field is first fetched, and there's no reference to the service locator in source code.

Lucene.Net needs your help (or it will die)

Mon, 01 Nov 2010 21:00:52 GMT

The Apache Foundation wants to kill Lucene.net. If you use it please chime in and help. This post explains a bit more in detail why this is happening

The Scrum Compliance

Wed, 13 Oct 2010 17:02:17 GMT

Former Scrum Alliance Creative Director resigns, renounces certifications, and calls for complete overhaul of the organization.

ASP.NET MVC, session and concurrent requests: not what you'd expect

Wed, 29 Sep 2010 06:45:52 GMT

ASP.NET Session handling causes problems when single session is accessed from more than one request (such as AJAX requests).

OpenID for ASP.NET MVC, A Quick Setup

Sun, 26 Sep 2010 18:00:52 GMT

If you need to get your ASP.NET MVC website setup with some basic OpenID Authentication, I can help get you started. All you need is a DLL, a view, and two controller actions.

ASP.NET and the Padding Oracle Attack: Wrap-up

Mon, 20 Sep 2010 18:00:52 GMT

Based on the news that was released at the time, it appeared that this vulnerability was just an issue AES. It turns out that this was false and that that this attack works against ANY BLOCK CIPHER meaning 3DES was also vulnerable. This wrap-up links to some mitigation techniques and also discusses how to protect against padding oracle attacks using Digital Signatures.

Getting Started with Code Contracts in VS2010

Wed, 15 Sep 2010 21:00:52 GMT

A good overview of the coding by contracts in visual studio

Overriding a .svc Request With Routing

Fri, 17 Sep 2010 12:45:52 GMT

One useful feature of routing in ASP.NET is that requests for files that exist on disk are ignored by routing. Thus requests for static files and for .aspx and .svc files don't run through the routing system.

Creating your own ModelMetadataProvider to handle custom attributes

Tue, 14 Sep 2010 16:08:07 GMT

In this post we're going to create our own metadataprovider for mvc to handle our custom attributes or other situations.

Unit Testing Html Helpers for ASP.NET MVC

Tue, 14 Sep 2010 13:34:22 GMT

How to write unit tests for HTML helpers (which might use HttpContext or ViewContext) without needing a mocking framework.

How to Enable Client Side Validation in ASP.NET MVC 2

Fri, 17 Sep 2010 14:15:52 GMT

Last night I was teaching MVC framework as part of an ASP.NET course. One of the things that I showed the students was how to use data annotations for server side validation. I got a question about how to enable client side validation in MVC 2 and decided to write about it in a post. So here it goes.

Free ebook: Moving to Microsoft Visual Studio 2010

Tue, 14 Sep 2010 16:30:52 GMT

Microsoft offers a free ebook: Moving to Microsoft Visual Studio 2010 (Microsoft Press, 2011; 336 pages), written by Patrice Pelland, Pascal Paré, and Ken Haines.

Chained null checks and the Maybe monad

Wed, 15 Sep 2010 05:15:52 GMT

A great many programmers have met a situation where, while accessing a nested object property (e.g., person.Address.PostCode), they have to do several null checks. This requirement frequently pops up in XML parsing where missing elements and attributes can return null when you attempt to access them (and subsequently trying to access Value throws a NullReferenceException). In this article, I'll show how a take on the Maybe monad in C#, coupled with use of extension methods, can be used to improve readability.

Repository and Unit of Work Patterns with Entity Framework

Mon, 21 Jun 2010 12:45:52 GMT

In the past I wrote two posts about the Repository and the Unit of Work patterns (here and here). Today I want to show a better and less naive solution for imposing the Unit of Work and the Repository patterns with Entity Framework.

IQueryable Can Kill Your Dog, Steal Your Wife, Kill Your Will To Live,

Wed, 12 May 2010 19:30:52 GMT

If you take a quick detour over to StackOverflow, you'll realize very, very quickly that, when it comes to wholly and full-heartedly screwing up your Linq to SQL statements, the screw-up almost always involves a misunderstanding of the purpose and...

DiffPlex - a .NET Diff Generator

Fri, 05 Mar 2010 08:15:00 GMT

DiffPlex is a combination of a .NET Diffing Library with both a Silverlight and HTML diff viewer. It is released open source on CodePlex under the MS-PL license.

ASP.NET MVC 2 Localization complete guide

Thu, 25 Feb 2010 09:45:05 GMT

This is a full guide for localizing asp.net mvc 2 web application covering following aspects: views localization, simple culture switching mechanism, model validation messages localization, DisplayName attribute localization and problem solving with caching(OutputCache) and localization.

jQuery 1.4.2. Released

Sat, 20 Feb 2010 15:31:56 GMT

jQuery 1.4.2 is now out! This is the second minor release on top of jQuery 1.4, fixing some outstanding bugs from the 1.4 release and landing some nice improvements.

MaleExtra Reviews - Complete Penis Enlargement System

Sat, 20 Feb 2010 15:22:15 GMT

MaleExtra is the ultimate penis enlargement and male enhancement system with DVD of penishealth exercise & Instant Performer Penis Pills by Natural Herbalz at www.Naturalherbalz.com

Buy Anders' Pascal 4 dev laptop

Wed, 17 Feb 2010 07:30:03 GMT

Ebay auction for Anders Hejlsberg's (lead architect at MS on the .NET platform) old laptop on which he developed Turbo Pascal 4. Proceeds go towards Haiti relief. Pretty damn cool, and (at least right now) cheap!