Shawn Cicoria - CedarLogic

Perspectives and Observations on Technology

Recent Posts

Sponsors

Tags

General





Community

Email Notifications

Blogs I Read

Archives

Other

Use OpenDNS

October 2010 - Posts

Note to self – cURL download utility…

Time to time, we all need this capability.  I keep forgetting what the link/name of this tool is.

http://en.wikipedia.org/wiki/CURL

http://curl.haxx.se/

Posted: 10-08-2010 2:27 PM by cicorias | with no comments
Filed under:
Really should have a custom error page regardless…

Throughout the blogosphere there’s been reports of an issue with ASP.NET that will bring a site to it’s knees – or so, it’s been overblown and reported as such. 

Microsoft has released an advisory here that discusses the matter.

The workaround for now is something that any public website should’ve been doing anyway.  That is, implement a custom error handling page and suppress revealing detailed errors.  This is a normal part of a security audit and if you follow the STRIDE threat modeling you should have this as part of your checklist of things that you should ensure your following.

[1] http://www.microsoft.com/technet/security/advisory/2416728.mspx

Posted: 10-01-2010 7:19 PM by cicorias | with no comments
Filed under: ,