Collaborate Disseminate
Applications built for MSAL 1.0 and MSAL 2.0 have a default application URI of MSAL://GUIDHere/AppName
This is in contrast with what other IDP’s are doing.
Can anyone explain the benefits or drawbacks of this format? (sometimes a "fea… Continue reading What is Threat Profile is Microsoft addressing with the MSAL URI format?
There doesn’t seem to be much information on the PasswordVault but it seems to provide for local encryption of credentials.
There are references to it in this source code and this blog.
The reason I’m asking is so I can understand the plat… Continue reading What are the security features of the Microsoft PasswordVault class?
This article about BIND9 concludes with the statement:
The point I’m trying to make here is that BIND9 should not be exposed to the public. It has code problems that should be unacceptable in this day and age of cybersecurity. Even if it… Continue reading Are there any type safe languages with deterministic compilers?
Windows 8 requires Fiddler to set up an exemption when sending traffic to localhost.
Since this is a default setting (and affects many computers):
What security benefit does this provide
How can I list any exceptions that may be placed … Continue reading What is the risk that Windows 8’s loopback protection feature protects me from?
Is there any way to cryptographically hash a human thumbprint into a form that can be consistently reproduced by thumbprint readers?
Assuming that it would be possible to create a database of thumbprint-hashes, my intent is to salt that… Continue reading Is there any way to cryptographically hash a human thumbprint?
This blog describes the URLs that are used in OWA and webservices. It also says that there is a hashcode that is used in conjunction with the throttling policy.
Is this hashcode responsible for "securing" the throttling policy,… Continue reading What is the purpose of the hashcode used in Exchange OWA HTTP requests?
This blog describes the URLs that are used in OWA and webservices. It also says that there is a hashcode that is used in conjunction with the throttling policy.
Is this hashcode responsible for "securing" the throttling policy,… Continue reading What is the purpose of the hashcode used in Exchange OWA HTTP requests?
This blog describes the URLs that are used in OWA and webservices. It also says that there is a hashcode that is used in conjunction with the throttling policy.
Is this hashcode responsible for "securing" the throttling policy,… Continue reading What is the purpose of the hashcode used in Exchange OWA HTTP requests?
I’m experimenting with NFC and realized that my passport actually stores data that is only available when the passport is opened. (A closed passport doesn’t seem to divulge any information)
What sequence of instructions is required to … Continue reading What NFC protocol is used to read information on a Passport?
Is there any way I can repurpose existing ActiveX controls or functionality to get IE to work with the KeyGen element?
Assistance getting Safari to work with this optional HTML5 spec would be appreciated as well.
Continue reading Can IE be made to imitate the behavior of Chrome’s KeyGen element?