Every day a few folks send be pages of code and ask be to make it work for them (No Kidding)

Joshua Folkets is a developer that I had dialog with in the past and this we we sent me code for me to USE rather han fix.

What a treat – he just sent to me and said “I thought I’d send you this in case you find someone who might use it.”

Here is a screen shot…..

And here is a link to the code (use at your own risk) …..
http://www.joeon.net/downloads/SliderGrid.zip

Joshua – You ROCK !

A couple of days ago eWeek posted a panic attack here http://www.eweek.com/article2/0,1895,2110554,00.asp?kc=EWEWEMNL040307EP37A that sensationalized a paper that Fortify published here: http://www.fortifysoftware.com/advisory.jsp

I posted a link to the article yesterday – sort of tung in cheek, but decided to wait until I could refer to more information because folks might not intuit my point.

So let me offer this subtle hint: THERE IS NOTHING NEW HERE !

Security companies market themselves by generating press about their research – fair enough.

Tech Media Companies like eWeek naturally sensationalize to keep their readership flowing (the National Enquirer model of Journalism).

Now, it’s not like I don’t take developer security seriously. I spent about 4 of the past 6 years focused mostly on developer security.

But it’s time we fix the perspective a but. Fortify wants to identify the AJAX venders as the source of these security problems. (And not just Microsoft but basically everyone that makes Ajax Software.)

It’s great that security companies are looking at the rapid adoption of Ajax and calling attention to security issues. But, at the risk of sounding redundant …

THERE IS NOTHING NEW HERE !

HTTP & JavaScript have not changed. The possible programming mistakes have not changed. The defensive development practices that mitigate these risks have not changed. Just some of the buzzwords have been added.

ScottGu has replied here to some of the specific call outs in the above referenced article : http://weblogs.asp.net/scottgu/archive/2007/04/04/json-hijacking-and-how-asp-net-ajax-1-0-mitigates-these-attacks.aspx

Since it seems like there are still a good number of developers that are not yet up to speed on Web Development security and are particularly interested in how these security challenges relate to doing Ajax style programming…….

I’ve been talking to my old security buddy Mark Brown about resurrecting the “Digital Black Belt” Secure Development Series to do an extended “Developing Secure Web Applications with ASP.NET and Microsoft Ajax”.

Please offer your opinions so that I can gage interest.

Joe

Due to popular demand.

Grab the code here …..

http://www.joeon.net/downloads/Telerik-HelpDesk-Trial-CTP.zip

I’ve been using the beta and installed the release version last night.

Check it out…….

http://codegear.com/AboutUs/News/DelphiForPHPNowAvailable/tabid/251/Default.aspx

I got this today from my former team mate and IT Guru Chris Avis

I do a lot of traveling in my role. As such, it has always been a little cumbersome to let me friends and family know when I am free and not free. In preparation for a session I am delivering tomorrow I made a blog post about the new “Insert Calendar” feature in Outlook 2007 that makes it super simple to share your calendar and availability with anyone….regardless of how they access their email and what client they use.

If you have a hectic schedule like I do, your friends and family will truly appreciate this feature.

Way cool….

http://blogs.technet.com/chrisavis/archive/2007/04/01/office-2007-coolness-part-1-of-at-least-10.aspx

http://blogs.technet.com/seanearp/archive/tags/Linux/default.aspx

Red Hat EL Here:

http://blogs.msdn.com/virtual_pc_guy/archive/2006/08/08/692395.aspx

Linux System Clock Issue in VPC:

http://support.microsoft.com/Default.aspx?kbid=918461

A collection of very cool guidance for the wizards over at Microsoft Patterns and Practices on using Visual Studio Team System .

Check it out over at CodePlex.com

http://www.codeplex.com/VSTSGuidance/

I need a VB and C# callable library that I can use to take .wmv files and create different AV formats of the same video.

I want to save as :

.wmv (different resolution for Zune)

.mp4 (iPod Video and PSP)

Flash Video

.mp3 (Audio Only)

.wma (Audio Only)

And perhaps .mpeg, .mov and .avi

I’ve found one such library but I’m wondering if there is something better.

All suggestions welcome. Just use the comment box or email Joe.Stagner [at] Microsoft [dot] com

Thanks

With nearly 500 attendees at last weeks Live From Redmond webcast on Code-Less Ajax witch Telerik, some of you had audio problems.

The whole webcast is now available for off-line viewing.

You can download load it here:

http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032333878&culture=en-US&Action=Preview

Just go through the sign up and eventually you get to a link that says "Download for offline viewing".

Joe

Many thanks to the nearly 500 people who attended my webcast with Telerik yesterday.

Todd is working on getting the code for me to post. (Since some of the demo was for an unreleased product he needs to try to find a .dll that we can include.

You can see all the answers to the questions that we didn’t have time for HERE.

http://www.joeon.net/blogfiles/TelerikQA.htm

You can get the PowerPoint HERE.

http://www.joeon.net/blogfiles/Telerik.ppt

The next in the 3^rd Party AJAX Web Cast Series is Thursday March 29^th

ASP.NET AJAX the Codeless Way: Telerik AJAX Manager in Action

Ever dreamed about a shortcut to building ASP.NET AJAX-enabled applications? One that eliminates the need for writing JavaScript, placing UpdatePanels all over your form, setting dozens of Triggers? Now, wake up and watch carefully, because this is already possible in real world, thanks to a new control from Telerik, called ASP.NET AJAX Manager.

Join us for a practical demonstration led by Todd Anglin, a Telerik Technical Evangelist. First, Todd will build a typical ASP.NET application using third-party controls for the rich UI. This app will perform regular postbacks. Then he will add Microsoft ASP.NET AJAX to the project and use the special Telerik AJAX Manager to turn this into a real AJAX application. Thanks to the Telerik control Todd will not write a single line of code and will not make any modifications to the existing app (no UpdatePanels, no Triggers). Too good to be true, or just too good. Come and see.

My Co-Presenter –  

Todd Anglin is a Telerik Technical Evangelist responsible for building a strong Telerik community and channeling feedback to the development team. Before joining Telerik, he worked as a developer in a Fortune 200 financial services company in San Antonio as a Systems Analyst supporting applications on a wide range of platforms and technologies, including Unix, Windows Server, Informix, Oracle, and SQL Server. Todd graduated Magna Cum Laude with Business Honors from Mays Business School at Texas A&M University with a BBA in MIS and now resides with his wife in San Antonio, Texas.

Event Code: 1032333878

Event Name: Live From Redmond: ASP.NET AJAX the Codeless Way: Telerik AJAX Manager in Thursday – 29-Mar-2007

Please click on the following link for more information regarding this Webcast http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032333878&culture=en-US&Action=Preview

If you work in technology then your probably know that Addison Wesley publishes great books.

InfoPath is a very interesting technology, and one that I think is a little under exposed and documented.

This book is a definitive source for InfoPath power users and developers.

InfoPath is the perfect tool-set for Enterprise developers and power users who need to rapidly develop applications that manipulate their operational data.

This book has great coverage from both perspectives, the power user and the developer.

Make your analysts read the first half and do a user interface prototype (with data constraints and workflow) then you (the developer) can built the final version

Check it out here.

One of the cool things about my job is that I get to make friends all over the world.

I met Ruchir when he emailed me as a student looking for inexpensive hosting.

Well, Ruchir had allot of trouble finding what he was looking for and has remembered that experience – so he’s started a small hosting company with really reasonable hosting offers.

ASP.NET Hosting starts at $10.99 a YEAR !

Check it out here: http://www.softsys.org/

PHP Quebec was a blast, apart from having 3 flights canceled due to fog trying to get there, and having to rent a car and drive home due to the snow.

The bad news was that the drive took about 16 hours. The good news was that it only snowed for the first 11  ; but I made it home in time to take my kids to the Disney on Ice show on the weekend.

Anyway – thanks to all the folks who attended the PHP and the Windows Platform session.

You can download the deck here :

http://www.joeon.net/downloads/ppt/PHP-Quebec-2007.ppt

Dr. Dobb’s is one of the longest standing developer magazines.

Read issues on line here.

http://www.nxtbook.com/nxtbooks/cmp/ddj0407/index.php

Course:           Applied ASP.NET AJAX

When:               April 23-25, 2007

Where:              Microsoft Technology Center, Waltham MA 

Cost:                 Special Microsoft Rate - $2,095

Register:           781.749.9238 or bill@pluralsight.com Bill Williams

ASP.NET 2.0 AJAX Extensions expose a framework for building richer, more interactive Web applications. This course walks you through the components of ASP.NET AJAX Extensions, asks you to build a number of AJAX-enabled ASP.NET applications, and shows how best to leverage the capabilities of the extensions to make your clients' experience a richer one.

Highlights:

·         Ajax: Asynchronous XML and Javascript programming

·         Programming Ajax manually

·         The Atlas framework

·         Client-side framework features

·         Client-side Web service proxies

·         Browser compatibility layer

·         Server-side controls and behaviors

·         Atlas control toolkit

·         .asmx support for JSON encoding

·         ScriptManager

·         UpdatePanels

·          Client-side data binding

Summary Outline:

http://www.pluralsight.com/courses/appliedaspdotnetajax.aspx

Who should attend:

Developers interested in taking their ASP.NET applications to the next level with Atlas. Improve response times, eliminate tedious post-backs, and enhance your UI with sophisticated DHTML behaviors using an intuitive framework.

Preparing for success:

Experience programming in ASP.NET, and Web development in general, is required.

Next steps:

For additional information, or to register to attend and receive this special discount, please contact Bill Williams (Pluralsight) 781.749.9238 or bill@pluralsight.com

So here I sit in an airport again.

LaGuardia this time in NYC (Ajax World ended yesterday)

Every flight I’ve been scheduled on in the last 2 weeks has been either canceled or delayed. (A total of 7 cancelations.)

Judging by the announcements, there are more late or canceled US Air flights than there are ones that are leaving on (or close to) time.

The “reasons” vary. No crew, maintenance, no plane, bla bla bla.

I wish 2 things.

1.) When the airline screws up and costs me time, they should have to compensate me somehow.

2.) The rest of us should be able to call ouselves if we atain the average performance level of the airlines.

Some of the fun ?

Most of the airline reps seem to have no interest is solving the problems that their company creates, most airlines don’t even HAVE customer service stations in airports anymore. (Or they are only staffed from 9 – 5).

On the up side – the more air trvael hurts the more popular LiveMeeting gets.

Still, it sucks to spend 1/4 of your work week sitting in an airport, looking for a place to plug in your laptop and wishing you were home playing with your children.