October 2007 - Blake Niemyjski

  • C# 3.0 and VB.NET 9.0 language specifications documents updated

    Microsoft has released updated documents detailing the language specifications for C# 3.0 and VB.NET 9.0 ( C# 3.0 and VB.NET 9.0 language specifications ). These documents should take you quite some time to read Smile. Enjoy!

     

    Download ( C# 3.0 Language specifications )

    Download ( VB.NET 9.0 Language specifications )

    Filed under: ,
  • XSSDetect: Cross Site Scripting detection plug-in for Visual Studio 2005

    The "Ace" team inside of Microsoft has kindly released a plug-in for Visual Studio called XSSDetect. XSSDetect is a "static code analysis plug-in that will identify Cross-Site Scripting security flaws in any managed Web Application" (Microsoft).

    "XSSDetect analyzes .NET Intermediate Language (IL) read directly from the compiled binaries. It takes apart all assemblies, modules, classes and methods down to each instruction. It then identifies statements where untrusted user data enters the application and where dangerous methods are called. These form the two sets of statements (sources and sinks) between which XSSDetect then finds dataflow paths. This is the same algorithm that is employed when an application is code reviewed manually by an experienced security analyst" ( Some technical details on how XSSDetect does Dataflow Analysis ).

     

    Source ( XSSDetect Public Beta now Available!

    Download ( XSS Detect Beta Code Analysis Tool
     

  • How to attach a MS SQL database (.mdf) file with a missing log file (.ldf)

    Tonight I ran into a dilemma where I was only supplied with a Microsoft SQL .mdf file. I thought that I would have no problems and just have to attach the database file and Microsoft SQL would rebuild the log file for me.

    I was wrong and it didn't take any longer than five minutes for me to figure that out. I thought to myself that quite a few people would have had the same problem as me and a solution would be available the World Wide Web. Thanks to Google, I eventually came across a post where a guy had available the SQL command that will attach the database file and build the log from scratch if it detects any errors.

    Here is the MSSQL command needed to attach an .mdf SQL database file with no .ldf file, enjoy!

    sp_attach_single_file_db @dbname= 'databasename', @physname= 'C:\Users\Blake\Documents\Databases\databasefile.mdf'

    You may get something like the following output to the Messages window

    File activation failure. The physical file name "C:\Program Files\Microsoft SQL Server\MSSQL\Data\databasefile_log.ldf" may be incorrect.

    New log file 'C:\Users\Blake\Documents\Databases\databasefile_log.LDF' was created.

    Converting database 'databasename' from version 100 to the current version 200.

  • Microsoft offers four free gigs of Silverlight hosting!

    Microsoft is offering four gigs of hosting space to anyone needing a place to host there Silverlight applications. I just hope a lot of people will see the importance in the stance Microsoft is taking on this subject.  So what are you waiting for? Go and get yourself some free hosting.

    "Microsoft® Silverlight™ Streaming by Windows Live™ is a companion service for Silverlight that makes it easier for developers and designers to deliver and scale rich media as part of their Silverlight applications. The service offers web designers and developers a free and convenient solution for hosting and streaming cross-platform, cross-browser media experiences and rich interactive applications that run on Windows™ and Mac. Combined with the ability to create content with Microsoft® Expression Studio and other 3rd party tools, Web designers and content publishers wishing to integrate Silverlight applications into their online properties can enjoy complete control of the end user experience" ( microsoft ).

    Source ( Microsoft Silverlight Streaming )

    Sign Up ( Get your free 4 GB hosting space now! )

  • Releasing the Source Code for the .NET Framework Libraries

     I thought that I would never see the day, that Microsoft releases the source code to the .Net framework. I'm betting that the Mono Project is having a party as we speak!
    "One of the things my team has been working to enable has been the ability for .NET developers to download and browse the source code of the .NET Framework libraries, and to easily enable debugging support in them.

    Today I'm excited to announce that we'll be providing this with the .NET 3.5 and VS 2008 release later this year.

    We'll begin by offering the source code (with source file comments included) for the .NET Base Class Libraries (System, System.IO, System.Collections, System.Configuration, System.Threading, System.Net, System.Security, System.Runtime, System.Text, etc), ASP.NET (System.Web), Windows Forms (System.Windows.Forms), ADO.NET (System.Data), XML (System.Xml), and WPF (System.Windows).  We'll then be adding more libraries in the months ahead (including WCF, Workflow, and LINQ).  The source code will be released under the Microsoft Reference License (MS-RL).

    You'll be able to download the .NET Framework source libraries via a standalone install (allowing you to use any text editor to browse it locally).  We will also provide integrated debugging support of it within VS 2008." (Scott Guthrie)

     

    Filed under:
windowscoding.com;
Copyright © 2008 Windows Coding
Microsoft and Microsoft logo's are trademarks of Microsoft Corporation.