November 30, 2005

MS05-053: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424) - Version:1.1

Severity Rating: Critical - Revision Note: Bulletin updated to correct file manifest for x64 platforms. Summary: This update resolves several newly-discovered, privately reported and public vulnerabilities. Each vulnerability is documented in this bulletin in its own Vulnerability Details section of this bulletin. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. We recommend that customers apply the update immediately.

Source

Related Posts

(MS05-053: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424) - Version:1.1) (MS07-046 - Critical: Vulnerability in GDI Could Allow Remote Code Execution (938829) - Version:1.1) (MS06-026: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (918547) - Version:1.0) (Microsoft Security Advisory (912840): Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution.) (Microsoft Security Advisory (912840): Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution.
Comments Off

MS05-053: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424) - Version:1.1

Severity Rating: Critical - Revision Note: Bulletin updated to correct file manifest for x64 platforms. Summary: This update resolves several newly-discovered, privately reported and public vulnerabilities. Each vulnerability is documented in this bulletin in its own Vulnerability Details section of this bulletin. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. We recommend that customers apply the update immediately.

Source

Related Posts

(MS05-053: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424) - Version:1.1) (MS07-046 - Critical: Vulnerability in GDI Could Allow Remote Code Execution (938829) - Version:1.1) (MS06-026: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (918547) - Version:1.0) (Microsoft Security Advisory (912840): Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution.) (Microsoft Security Advisory (912840): Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution.

November 29, 2005

Is cloaking the holy grail of SEO?

Cloaking obviously works. Should you use it for your website and what should you do to get high rankings on Google, Yahoo and other important search engines?

Related Posts

(Mosaic cloaking: a new form of search engine spam?) (Google warns against cloaking: we can detect it) (Cloaking: Does your web host change your web pages?) (Font smoothing, anti-aliasing, and sub-pixel rendering) (Talk at Yale: Part 1 of 3

November 28, 2005

Turning Recursive and Nested Triggers On and Off

This tip gives you the commands to switch recursive and nested triggers on and off.

Source

Related Posts

(Nested DataGrids Simplify Hierarchical Data Display) (Trigger Efficiency in Oracle) (ASP.NET SQLCacheDependency with SQLite and Triggers) (ASP.NET SQLCacheDependency with SQLite and Triggers) (MySQL 5 Stored Procedures, Views, and Triggers

November 23, 2005

Twenty Most Critical Internet Security Vulnerabilities

The SANS Institute has updated its list of Twenty Most Critical Internet Security Vulnerabilities. The list is actually the twenty most critical categories, since each consists of a number of vulnerabilities.

This is interesting reading for anyone with any interest in security, which, of course, means all of us. The list is a great guide to where you might focus your limited resources, since these vulnerabilities are the most pernicious and affect the most users.

Microsoft and Windows feature prominently, of course. I won’t get into the religious debate about whether that is because Microsoft doesn’t care about security versus their products are so widely used.

The point is that we as developers and admins have to be aware of the current threats in order to protect our systems. And this is a great place to start.

Source

Related Posts

(Twenty Most Critical Internet Security Vulnerabilities) (Twenty Most Critical Internet Security Vulnerabilities) (MS08-010 - Critical: Cumulative Security Update for Internet Explorer (944533) - Version:1.2) (MS07-045 - Critical: Cumulative Security Update for Internet Explorer (937143) - Version:1.3) (MS07-069 - Critical: Cumulative Security Update for Internet Explorer (942615) - Version:1.3
Comments Off

Twenty Most Critical Internet Security Vulnerabilities

The SANS Institute has updated its list of Twenty Most Critical Internet Security Vulnerabilities. The list is actually the twenty most critical categories, since each consists of a number of vulnerabilities.

This is interesting reading for anyone with any interest in security, which, of course, means all of us. The list is a great guide to where you might focus your limited resources, since these vulnerabilities are the most pernicious and affect the most users.

Microsoft and Windows feature prominently, of course. I won’t get into the religious debate about whether that is because Microsoft doesn’t care about security versus their products are so widely used.

The point is that we as developers and admins have to be aware of the current threats in order to protect our systems. And this is a great place to start.

Source

Related Posts

(Twenty Most Critical Internet Security Vulnerabilities) (Twenty Most Critical Internet Security Vulnerabilities) (MS08-010 - Critical: Cumulative Security Update for Internet Explorer (944533) - Version:1.2) (MS07-045 - Critical: Cumulative Security Update for Internet Explorer (937143) - Version:1.3) (MS07-069 - Critical: Cumulative Security Update for Internet Explorer (942615) - Version:1.3

Twenty Most Critical Internet Security Vulnerabilities

The SANS Institute has updated its list of Twenty Most Critical Internet Security Vulnerabilities. The list is actually the twenty most critical categories, since each consists of a number of vulnerabilities.

This is interesting reading for anyone with any interest in security, which, of course, means all of us. The list is a great guide to where you might focus your limited resources, since these vulnerabilities are the most pernicious and affect the most users.

Microsoft and Windows feature prominently, of course. I won’t get into the religious debate about whether that is because Microsoft doesn’t care about security versus their products are so widely used.

The point is that we as developers and admins have to be aware of the current threats in order to protect our systems. And this is a great place to start.

Source

Related Posts

(Twenty Most Critical Internet Security Vulnerabilities) (Twenty Most Critical Internet Security Vulnerabilities) (MS08-010 - Critical: Cumulative Security Update for Internet Explorer (944533) - Version:1.2) (MS07-045 - Critical: Cumulative Security Update for Internet Explorer (937143) - Version:1.3) (MS07-069 - Critical: Cumulative Security Update for Internet Explorer (942615) - Version:1.3

November 22, 2005

Getting New Values Entered into a Table

Find out how you can use :new. to retrieve new values entered into a table.

Source

Related Posts

(Fetching the Last Entered Records in Oracle) (Bring Array Mapping Capabilities to SQL) (Merge Tables Gotcha) (Hacking to make ALTER TABLE online for certain changes) (Take Advantage of Two-Way Data Binding in ASP.NET

New features in Google Sitemaps

Last week, Google added new features to its Sitemaps service. After verifying that you are really the webmaster of a site, you can access some statistics about the information Google has about your site. This kind of information can help you to spot possible reasons when Google doesn’t index your site.

Related Posts

(Google’s Sitemaps service and your website) (Are search engine spammers exploiting your web pages?) (Does Google think that your web site is spam?) (Google, Yahoo and Microsoft team up for Sitemaps protocol) (The end of Google bombs?

Extension methods + late binding = trouble?

I’m clearing out some old mail and I came across a reference to a blog entry by Jon Skeet about extension methods that I saved a while back. He says:

One of the things I don”t like about the proposed extension methods is the way the compiler is made aware of them - on a namespace basis. “Using” directives are very common to add for any namespace used in a class, and quite often I wouldn”t want the extension methods within that namespace to be applied. I propose using using static System.Query.Sequence; instead, in a way that is analogous to the static imports of Java 1.5 (except without importing single members or requiring the “.*” part. This would make it clearer what you were actually trying to do.

The interesting thing is, if you look at the document that we released on LINQ at the PDC, you’ll see that our design for extension methods incorporates this suggestion: extension methods in VB are brought into scope by directly importing the containing type, not the namespace. Imports System.Query isn’t sufficient to get LINQ methods in scope; you have to say Imports System.Query.Sequence. I agree with Jon that it’s clearer to do it this way, but that’s not the whole reason we did it. You see, the real problem is late binding.

Yes, late binding. We still support that, you know? And if you think for a minute about late binding and extension methods the way C# does them, you’ll quickly see that the two things don’t go together very well. When we go to late bind a member “foo” on an instance of a type “bar” today things are relatively simple — we gather all the members of “bar” with the name “foo” and then apply our regular binding rules to determine which, if any, of them fit the bill. All we need to know at run-time is the type of the instance we’re late binding on. With extension methods, though, this breaks down. Now we need to know not just the type of the instance, but also all of the extension methods in scope at the point of invocation. That’s because if “bar” doesn’t have a member “foo,” then in the early-bound case the compiler is going to go looking for extensions method. And the late-binder needs to do this, too!

If you look at how C# does extension methods, they go out and start looking in all the enclosing namespaces for extension methods, then look in all the imported namespaces for extension methods, etc. Replicating this at run-time would be difficult, at best — at every late-bound invocation point you would have to capture the complete binding context. And this binding context would change from method to method. What a nightmare! Our design is more friendly to late-binding. Our current design says that if “bar” doesn’t have a member “foo,” then we’ll look only at types whose members have been imported for extension methods. This collapses down the search space hugely and also means that the binding context is per-file (since we only allow file-level imports, unlike C#). While still a bit bulky, this seems much more manageable. Although we’ll see — although we’ve implemented early-bound extension methods, we haven’t gotten to the late bound stuff yet. <g>

Although we felt we had to do extension methods this way because of late-binding, we also believe there are some other advantages to the scheme. Jon lists one: it becomes much easier to be clear about the extensions you are using. You won’t import some useful namespace and then, whoops!, you just added a whole bunch of extension methods that you didn’t want. It’s also fairly congruent with the fact that VB (again, unlike C#) allows you to import a type directly, allowing access to its shared members without qualification.

Of course, now that I think of it, I’m not sure how this works with standard modules and their special binding rules. Hmmmm. I’m going to have to look at that…

Source

Related Posts

(Never Change the Default Parameters of Virtual Methods) (New technologies detect black-hat SEO methods) (I’m back, and some links…) (Data Binding in Windows Forms 2.0) (Take Advantage of Two-Way Data Binding in ASP.NET
« Previous entries