Monday, May 30, 2005

Enterprise Library-download

Enterprise Library

MSDN .NET Framework Developer Center: Downloads

MSDN .NET Framework Developer Center: Downloads: "Downloads

Find code samples and downloads for the .NET Framework.

SDKs, Redistributables & Service Packs
Stay up-to-date with these downloadable service packs, updates, samples, and related components for the .NET Framework.

Tools & Utilities
Learn about the various utility applications available for use with the .NET Framework.

* CLR Profiler
* Fx Cop

Code Samples
Download these .NET samples to learn more about building Microsoft Windows-based applications, Web applications, and XML Web services. "

MSDN .NET Framework Developer Center: Tools & Utilities

MSDN .NET Framework Developer Center: Tools & Utilities: "Tools & Utilities

Learn about these downloadable utilities and related software components that can be used to enhance your development experience or your applications.
"

Threat Modeling Web Applications

Threat Modeling Web ApplicationsThis guidance presents the patterns & practices approach to creating threat models for Web applications. Threat modeling is an engineering technique you can use to help you identify threats, attacks, vulnerabilities, and countermeasures that could affect your application. You can use threat modeling to shape your application's design, meet your company's security objectives, and reduce risk.

Data Security: Stop SQL Injection Attacks Before They Stop You -- MSDN Magazine, September 2004

Data Security: Stop SQL Injection Attacks Before They Stop You -- MSDN Magazine, September 2004: "rmed with advanced server-side technologies like ASP.NET and powerful database servers such as Microsoft� SQL Server�, developers are able to create dynamic, data-driven Web sites with incredible ease. But the power of ASP.NET and SQL can easily be used against you by hackers mounting an all-too-common class of attack�the SQL injection attack.
The basic idea behind a SQL injection attack is this: you create a Web page that allows the user to enter text into a textbox that will be used to execute a query against a database. A hacker enters a malformed SQL statement into the textbox that changes the nature of the query so that it can be used to break into, alter, or damage the back-end database. How is this possible? Let me illustrate with an example."

.NET Framework Developer Center: Microsoft .NET Framework 1.1 and 2.0 (Beta) Compatibility

.NET Framework Developer Center: Microsoft .NET Framework 1.1 and 2.0 (Beta) Compatibility: "The Microsoft .NET Framework 2.0 builds on the success of the Microsoft .NET Framework 1.0 and 1.1 to provide the best runtime environment for Web and Microsoft Windows client applications. Microsoft's compatibility goal for .NET Framework 1.1 applications is that they should work smoothly on the .NET Framework 2.0 except for a set of documented changes. During the Beta 2 release, we have not yet achieved this goal and are seeking feedback on application issues that can be addressed before the release of the .NET Framework 2.0. This document discusses application compatibility scenarios and provides recommendations on best practices for different segments."

.NET Framework Developer Center: Compatibility Testing Scenarios

.NET Framework Developer Center: Compatibility Testing Scenarios: "This document outlines best practices for testing a managed application or component for compatibility with newer runtime versions. It covers different configurations you should test to ensure that the application continues to run properly. Full details on compatibility are available in Microsoft .NET Framework 1.1 and 2.0 (Beta) Compatibility. If you have not already read that document, we recommend that you read that before proceeding.
Summary

Many applications using managed code require that a particular version of the .NET Framework be present on the machine. Some applications redistribute a particular release of the.NET Framework. In some cases, applications that were developed on a specific version of the .NET Framework may encounter issues when trying to execute on a newer version of the Framework. As explained in Microsoft .NET Framework 1.1 and 2.0 (Beta) Compatibility, managed applications run by default on the version of the Framework they were built against. However, in certain situations where only a newer version of the Framework is available or a hosting application requires a particular version, an application may run against a newer version. To ensure the best customer experience, we recommend that you test your applications for compatibility according to the steps described below."

Tuesday, May 24, 2005

XML Developer Center: XML Columns: Fun with IXMLHttpRequest and RSS

XML Developer Center: XML Columns: Fun with IXMLHttpRequest and RSS: "Introduction

Recently there's been a lot of buzz about using Javascript and IXMLHttpRequest in Web applications, generated in large part by the recent article Ajax: A New Approach to Web Applications by Jesse James Garrett, which coined the term Asynchronous Javascript and XML (AJAX). The renaissance of the technique formerly known as remote scripting is primarily due to a number of high profile uses of this technique by Google Web sites, such as Gmail, Google Suggest, and Google Maps. Given the renewed interest in using XML in the browser, I decided to try my hand at building a Web page that utilized AJAX.

Around the same time I decided to try my hand at building an AJAX application, I came across an article by Daniel Steinberg entitled Bosworth's Web of Data. This article described a recent keynote by Adam Bosworth at the MySQL Users Conference 2005 where he predicted that RSS 2.0 and Atom would become the lingua franca for information interchange on the Web. RSS first gained popularity as a way to syndicate blog posts and news sites, but has turned out to be a lot more versatile than that. Sites like Feedster and Amazon's OpenSearch technology show that you can use RSS as a mechanism for providing search results and integrating search engines respectively. Podcasting shows that you can use RSS to syndicate digital media content instead of just plain old text or HTML. With Amazon's syndicated feeds you can keep abreast of when new CDs, books, and more are released. The list of innovative uses of RSS goes on."

Visual Basic

Visual BasicIntroduction

The introduction of Microsoft Visual Studio 2005 brings a host of improvements and new features that make the integrated development environment (IDE) even more impressive. The changes cover a variety of areas, ranging from how you create Microsoft ASP.NET website projects to new text formatting features. This article will introduce you to some of the changes made to features that exist in prior Visual Studio versions, hopefully allowing you to transition to Visual Studio 2005 faster and easier. Then it will introduce and look at some of the new features added to the Visual Studio 2005 IDE......

Friday, May 13, 2005

Say What? Make Sense of Your Web Feedback using SQL Server 2005 -- MSDN Magazine, June 2005

Say What? Make Sense of Your Web Feedback using SQL Server 2005 -- MSDN Magazine, June 2005: "he interactive nature of the Web has made it a great medium for data collection. As Web sites have evolved beyond click and buy, the solicitation of feedback has held the promise of greater insight into the customer and her needs, necessary product improvements, and future directions. But collecting reams of text-based data is not the same as gleaning useful information from it. In a typical customer feedback Web page, users enter comments about your product (see Figure 1). Some fields present preset answers users can choose from. Other fields let users type in any comments they like. This sort of free-form comment is especially difficult to put to good use because it must be divided into classifications if it is to be analyzed, quantified, and used for decision making."

Make It Snappy: Juice Up Your App with the Power of Hyper-Threading -- MSDN Magazine, June 2005

Make It Snappy: Juice Up Your App with the Power of Hyper-Threading -- MSDN Magazine, June 2005: "yper-threading technology improves CPU efficiency by allowing the processor to execute two instruction streams concurrently. This feature, found on newer Intel Pentium 4 processors, can typically improve the performance of apps by 20 to 30 percent, boosting some apps by up to 40 percent.
Unfortunately, other applications see no performance benefit, and a few can experience significant performance degradation (I've seen application degradation of as much as 20 percent), especially when violating recommended performance best practices such as the ones discussed in this article. Moreover, given the concurrency this feature introduces to single-processor computers, some multithreading bugs that may only manifest themselves on multiprocessor machines are likely to show themselves on a hyper-threaded single-CPU machine, as well.
In this article, I'll explore the hyper-threading technology and demonstrate how adding parallelism to your code can improve performance on hyper-threaded machines. I'll cover advanced optimizations for hyper-threading and will show you a few useful patterns. My code samples are in C#, but the same principles apply to both managed and unmanaged applications."

How to create offline L2TP/IPSec Certificates

How to create offline L2TP/IPSec Certificates: "How to create offline L2TP/IPSec Certificates
View products that this article applies to.
Author: Jesper Hanno MVP
Community Solutions Content Disclaimer
Article ID : 555281
Last Review : March 30, 2005
Revision : 1.0
On this page
SYMPTOMS SYMPTOMS
CAUSE CAUSE
RESOLUTION RESOLUTION
MORE INFORMATION MORE INFORMATION
APPLIES TO APPLIES TO
SYMPTOMS
When non domain member clients wants to establish a VPN connection to ISA Server 2004 using L2TP/IPSec you need to request an IPSec certificate on behalf on the client. This article describes how to install, configure an enterprise certificate service and how to create a certificate request to non domain members. Please note that you need a Microsoft Windows Server 2003 Enterprise edition to create the L2TP/IPSec template."

Tuesday, May 03, 2005

Visual Basic 6.0 Resource Center: Using SQL Express from Visual Basic 6

Visual Basic 6.0 Resource Center: Using SQL Express from Visual Basic 6: "Visual Basic developers have long used Access databases as a solution for local storage of application data. Access made it very simple to ship a database with your application, and connecting to the database was no more complicated than putting the path to the database in the connection string. For more complex scenarios, developers could scale up to the Microsoft Desktop Storage Engine (MSDE). This provided developers with SQL Server functionality and reliability, but at the expense of ease of use. With MSDE, you had to attach databases before they could be connected to. When the application shut down, the database file was still in use by the MSDE engine, making uninstall and reinstall more complicated. MSDE also did not provide any administrative interface, so any administration of the database had to be done through command line tools. In addition, MSDE was difficult to deploy with an application.

As part of the effort to develop Visual Studio 2005 and SQL Server 2005, Microsoft is addressing all these limitations of MDSE, replacing it with a new product called SQL Server 2005 Express.

While information about SQL Express has so far been targeted at .NET framework developers, this article will show how SQL Express is a boon for VB6 development as well. SQL Express will provide the developer power of SQL Server, but also the ease of use of access by letting you connect directly to a database file on disk. Best of all, it’s completely free, and can be redistributed with your application."

Monday, May 02, 2005

Sorting It All Out : Some more Windows acronyms explained

Sorting It All Out : Some more Windows acronyms explained: "Some more Windows acronyms explained

One of the good reasons to keep MSDN Blogs on the list of Blogs I Read is that a lot of stuff goes past my eyes via a FeedDemon radar. :-)

Though I have to admit that Feed Demon seemed to have some kind of memory leak problem when I ran it on Server 2003 SP1, one that no longer seems to repro now that I run it on XP SP2. I am now back to avoiding reboots when not installing software. I probably should have reported it but it did not occur to me that it was the only new program I had installed before requiring reboots every few days until it was too late."

The Code Project - How to get CPU usage of processes and threads - C# Programming

The Code Project - How to get CPU usage of processes and threads - C# Programming: "Introduction

The CPU usage is often recognized from Windows Task Manager. I will explain in this article the most efficient way I could find to calculate it for both processes and threads.
Background

My journey began when I wanted to write a Task Manager look alike that also had some netstat features. I searched the web for methods of getting the CPU usage but the best I could find was only advices for using PerformanceCounter('Processor','% Process Time',ProcessName) for monitoring the usage value. I tried it and it's a good method as long as you use only few (1-3) PerformanceCounters because it consumes a lot of CPU itself which got me to a usage of 6% - 18% for my own task manager for just the refresh operation every 2 seconds."

SQL Server Developer Center: Processing XML Showplans Using SQLCLR in SQL Server 2005

SQL Server Developer Center: Processing XML Showplans Using SQLCLR in SQL Server 2005: "Introduction
Microsoft SQL Server 2005 makes its query execution plans (also known as showplans) available in XML format. XML showplans can be processed using any XML technology�for example, XPath, XQuery, or XSLT. This paper describes an application that extracts the estimated execution cost of a query from its XML showplan. The extracted cost is available for use in a Transact-SQL window. Using this technique, a user can submit to a server running SQL Server only those queries that cost less than a predetermined threshold. This ensures that the server does not get overloaded with costly, long-running queries."