May 2008 Entries

"On the Insecurity of Microsoft's Identity Metasystem Cardspace"

Hot on the heels of the OpenID phishing demonstration comes a proof of concept entitled "On the Insecurity of Microsoft’s Identity Metasystem Cardspace". Setting aside the valid concerns of DNS poisoning the proof of concept makes use of SSL certificates; the proof of concept requires a user to install and trust a new root certificate. The assumption is that a user will blindly do this, I am not so sure; especially as both IE7 and Firefox will throw full screen certificate errors before allowing a browser to proceed. The user would have to choose to proceed, install a new root...

posted @ Thursday, May 29, 2008 3:59 PM | Feedback (1)

WCF Callbacks; a beginners guide

On Channel9 last week Amiga forever! wanted to know how to pass multiple parameters to a WCF callback; so as I covered callbacks at DDD Scotland briefly this seemed like a perfect excuse to illustrate how to create a callback in WCF. So why do we want callbacks? One of remoting's more useful features was the ability for a server to trigger events on a client; WCF callbacks provide the same sort of facility. To start lets create a new WCF project by choosing the WCF Service Library in VS2008; You can see I'm targeting...

posted @ Thursday, May 29, 2008 2:55 PM | Feedback (41)

The UK Speaker Community

Speaking is a serious business .... Technorati Tags: DDDIE,DDDIE08,Chinposin

posted @ Friday, May 23, 2008 11:01 AM | Feedback (2)

Web services - We don't need no web server

Yesterday I gave a presentation on WCF at DDD Scotland; the presentation and sample code is available for download. Feedback included "a most enlightening talk." "excellent delivery/pace/humour/depth on a topic of interest" "very practical" "Good quality slides; Alive for this time of the morning" (Well I was first on!) Technorati Tags: DDD Scotland

posted @ Sunday, May 11, 2008 9:10 PM | Feedback (1)