RSS 2.0  Frustrated by Design
# Tuesday, January 30, 2007

This was really bugging me and I guess others as well.

In the forums they thought it was a bug in IE6 (http://forums.asp.net/thread/1488886.aspx), but I was getting the same behavior in IE6, and Firefox

Setting the Height in the content panel (the collapsable area) to 0 solved the problem for me in IE and Firefox.

<asp:Panel ID="ContentPanel" runat="server"

     CssClass="collapsePanel" Height="0">


Anyone who still has IE6 installed, let me kow if you still get the panel “flash” on page load.

Tuesday, January 30, 2007 11:23:24 PM (Atlantic Standard Time, UTC-04:00)  #    Comments [5] - Trackback

Check out this cool article by Brian Mains.

In addition to the titles topic it contains a good description of extender controls.

Introduction to the PopupControl Extender.

Tuesday, January 30, 2007 9:30:22 PM (Atlantic Standard Time, UTC-04:00)  #    Comments [0] - Trackback

The Live From Redmond Webcast …

How Hackers Reverse Engineer and Exploit an ASP.NET AJAX Application is now available for on-demand viewing.

Cick HERE to watch the recording.

 

Tuesday, January 30, 2007 12:26:56 AM (Atlantic Standard Time, UTC-04:00)  #    Comments [3] - Trackback

Live From Redmond: AJAX Security Basics is now avaliable on-demand.

Click HERE to watch.

Tuesday, January 30, 2007 12:15:11 AM (Atlantic Standard Time, UTC-04:00)  #    Comments [2] - Trackback

# Thursday, January 25, 2007

AJAX Security with live AJAX Hacking Demos

You can still sign up by CLICKING HERE !

 

Thursday, January 25, 2007 2:14:36 AM (Atlantic Standard Time, UTC-04:00)  #    Comments [4] - Trackback

Make sure you install the fix at http://support.microsoft.com/kb/917821

Thanks to PhilC for the link.

Thursday, January 25, 2007 1:18:26 AM (Atlantic Standard Time, UTC-04:00)  #    Comments [1] - Trackback

# Wednesday, January 17, 2007

Earlier this week I was re-writing Scott Guthrie’s ToDo List Atlas demo to work with the release version of MS AJAX and hit an ugly snag.

When using a master page (and ONLY when using a master page, the use of some AJAX controls produced the relatively useless [unknown element] error.

I searched and searched (I even tried Goggle) and found similar issues with Beta and RC versions of MS AJAX but I was using the latest bits and the solutions for the old versions were to use the ATLAS prefix. (A kludge.)

After doing my research I phoned ScottGu (Father of ASP.NET who hired me). It was about 10:00PM EST and Scott is commonly in the office in the evening.

Scott wasn’t in the office, but he “knows everything” so even though I didn’t ;leave a message he phoned me back about 15 minutes later.

I described my problem and, of course he had the answer off the top of his head.

1.) This is only an issue when you have been using an older CTP or Beta version of MS ATLAS and then updated to release bits.

2.) It happens because the schema that intellesence is cached on a per user basis so un-installers can’t really figure out what to un-install in this case because cache locations are not determined by the installer.

3.) HALF of the fix includes installing Service Pack 1 for Visual Studio 2005 / Visual Express

4.) The other half is to explicitly flush the Intellesence cache like this….

- With Windows XP you do this by deleting all files in this directory: c:\Document and Settings\[YourUserName]\Application Data\Microsoft\VisualStudio\8.0\ReflectedSchemas

- With Windows Vista you do this by deleting all files in this directory: c:\Users\[YourUserName]\AppData\Roaming\Microsoft\VisualStudio\8.0\ReflectedSchemas

5.) Restart Visual Studio

Scott’s blog post here has the details.

http://weblogs.asp.net/scottgu/archive/2006/12/15/asp-net-ajax-1-0-release-candidate-now-available.aspx

Wednesday, January 17, 2007 12:22:27 AM (Atlantic Standard Time, UTC-04:00)  #    Comments [11] - Trackback

So I got an emailo from Microsoft MVP Scotte Clark letting me know about this cool (free) service at wHooIz.com

wHooiz.com

Ceck out the the “Ajax Recent Visitors” block furthewr down on this page.

Wednesday, January 17, 2007 12:04:22 AM (Atlantic Standard Time, UTC-04:00)  #    Comments [1] - Trackback

# Friday, January 12, 2007

I’ve engaged 2 of the best counter-hacker guys I know to present a “Live From Redmond” Webcast series with me on a very HOT TOPIC.

 

AJAX SECURITY

 

The series starts NEXT THURSDAY

 

Here are the links to register for all five in the series.

 

Live From Redmond: AJAX Security Basics- The Building Blocks to Protecting Your Applications Built with ASP.NET AJAX

 

Live From Redmond: How Hackers Reverse Engineer and Exploit an ASP.NET AJAX Application

 

Live From Redmond: The Brave New World of AJAX Hacking (and prevention using ASP.NET)

 

Live From Redmond: The Next Generation of AJAX Attacks – A New Generation of Attack Theories

 

Live From Redmond: Best Practices: A Look at Developer ASP.NET AJAX Security Mistakes

 

…. and here is some background info on my co-presenters from Spi Dynamics

 

Caleb Sima is the co-founder and CTO of SPI Dynamics, (www.spidynamics.com) the leading provider of Web application security testing software and services. Caleb is responsible for directing the lifecycle of the company’s Web application security solutions and is the director of SPI Labs R&D team within SPI Dynamics. Caleb has been engaged in the Internet security arena since 1996, and has become widely recognized as an expert in Web security, penetration testing and for identifying emerging security threats. His pioneering efforts and expertise in Web security have helped define the direction the Web application security industry has taken. Prior to co-founding SPI Dynamics in early 2000, Caleb worked for Internet Security Systems’ elite X-Force R&D team and as a security engineer for S1 Corporation. Caleb is a frequent speaker and expert resource for the press on Internet attacks and has been featured in the Associated Press. He is also a contributing author to various magazines and online columns, and is a co-author of the book titled, Hacking Exposed Web Applications: Web Security Secrets & Solutions, Second Edition. Caleb is a member of ISSA and is one of the founding visionaries of the Application Vulnerability Description Language (AVDL) standard within OASIS, as well as a founding member of the Web Application Security Consortium (WASC).

 

Billy Hoffman is a lead security researcher for SPI Dynamics (www.spidynamics.com), the leading provider of Web application security testing software and services. At SPI Dynamics, Billy focuses on automated discovery of Web application vulnerabilities and crawling technologies. He has been a guest speaker at AJAXWorld, Black Hat, Black Hat Federal, Toorcon, Shmoocon, O'Reilly's Emerging Technology Conference, The 5th Hope, and several other conferences. His work has been featured in Wired, Make magazine, Slashdot, G4TechTV, and in various other journals and Web sites. Topics have included reverse engineering law and techniques, ATMs, XM Radio and magstripe projects. In addition, Billy is a reviewer of white papers for the Web Application Security Consortium (WASC), and is a creator of Stripe Snoop, a suite of research tools that captures, modifies, validates, generates, analyzes, and shares data from magstripes. He also spends his time contributing to OSS projects and writes articles under the handle Acidus, and is currently co-authoring a book on AJAX security for publisher Addison-Wesley.

 
Friday, January 12, 2007 2:27:23 AM (Atlantic Standard Time, UTC-04:00)  #    Comments [2] - Trackback

Navigation
About Me
    Joe Stagner
Follow me on Twitter.

View Joe Stagner's profile on LinkedIn

MSDN

Search
RSS/Subscribe
  RSS 2.0 | Atom 1.0 | CDF  
Archive
<January 2009>
SunMonTueWedThuFriSat
28293031123
45678910
11121314151617
18192021222324
25262728293031
1234567
Contact
Send mail to the author(s)  Send me email.
Statistics
Total Posts: 447
This Year: 3
This Month: 3
This Week: 3
Comments: 1449
Disclaimer

Disclaimer
The opinions expressed herein are my own personal opinions and do not represent my employer's view in any way.

© Copyright 2009
Joe Stagner
Sign In
Gaciously Hosted by MaximumASP.net
MaximumASP ROCKS !!!.
All Content © 2009, Joe Stagner