Collaborate Disseminate
I implement a .NET application that has a HTTPS API. A website makes requests to my HTTPS API. The website has a login page and other features.
Do I show a Captcha on the website if a new session is created? Do I show a Captcha on the webs… Continue reading Best timing/safest way to show Captchas on a website?
I implement a server application in .NET. I just want to know which security headers I need to set if I use HTTPS. I know about the HttpOnly and SameSite Cookies. OWASP has a recommendation HTTP Headers Cheat Sheet but do I need every sing… Continue reading Which security Headers for HTTPS?
I try to implement a secure user login in my .net application. The first password is hashed with argon2id. The salt and the hashed password is stored in a database. SSL encryption and HttpOnly Cookie is used.
Now i want to add a multifacto… Continue reading Whats the safest way to store 2fa/mfa secret key in database?
I read that a password and a salt needs to be combined and then hashed. You save the result and the salt in plaintext. Is it a good practice to use the username as a salt? Why and why not?
I also read that good practice is that you need to… Continue reading Whats the safest way to store a password in database?
Last night, Microsoft delivered its sixth preview version of .NET 9 ahead of the platform’s public release.
The post .NET 9 Preview 6 is Now Available appeared first on Thurrott.com.
Continue reading .NET 9 Preview 6 is Now Available
I am trying to understand under which circumstances CVE-2024-38095 applies. When reading the advisory (https://github.com/dotnet/runtime/security/advisories/GHSA-447r-wph3-92pm), one finds the following statements:
Affected software: Any … Continue reading Understanding how to correctly migitate CVE-2024-38095
At Build 2024 today, Microsoft announced the release of .NET 9 Preview 4 and a sweeping set of updates and improvements across the stack.
The post Build 2024: .NET Announces Updates for AI, Web, Cloud-First, Cross-Platform, and More appeared first on T… Continue reading Build 2024: .NET Announces Updates for AI, Web, Cloud-First, Cross-Platform, and More
During Monday’s Microsoft AI event, Pavan Davuluri threw out an unexpected term, Windows Copilot runtime, without really explaining it. Today, we have a bit more information about that, and some news about the new approach to “native” apps on Windows.
… Continue reading Windows Copilot Runtime Isn’t a Runtime, and WPF is Back, Baby (Premium)
I’m encountering an issue with the implementation of Single Sign-On (SSO) in our WPF application, and I’d appreciate some guidance or insights from the community.
Here’s a breakdown of our setup:
We have a main WPF application that utiliz… Continue reading Issue with Single Sign-On (SSO) Implementation for WPF application with ADFS/MSAL
Microsoft announced today that it will host its next Azure Developers –.NET Day on April 30. This all-day virtual developer event will focus on AI, cloud-native, and efficiency.
The post Azure Developers – .NET Day 2024 Arrives April 30 with an AI Focu… Continue reading Azure Developers – .NET Day 2024 Arrives April 30 with an AI Focus