Parmeshwar’s Homespace

Today I have moved to new blog. You can find the new location of my blog at http://geekswithblogs.net/parmeshwar/.

As per the definition in MSDN: Threat modeling is an engineering technique you can use to help you identify threats, attacks, vulnerabilities, and countermeasures in the context of your application scenario. The threat modeling activity helps you to: 1. Identify your security objectives. 2.Identify relevant threats. 3. Identify relevant vulnerabilities and countermeasures

Following are some of the important resources about Threat Modelling 1. Threat Modelling Homepage 2. Threat Modelling Web Applications 3.Threat Modelling tool

Visit 400+ Differences to get the details !!

Just now got an Apple iPOD Video with 30 GB memory space… a dream come true for my music love!! I remember my plain old school days when I used to listen songs on radio/walkman…..And now with such an amazing gadget, With its crystal clear sound quality one can listen audio/radio ,watch videos with great resolution, listen and subscribe to podcasts, store photos..I was just mad for some days ..finding out all of the features. specially listening “Rang De Basanti” songs (that too ‘masti ki pathshala’ and ‘rubarroo’) will be a treat for all music lovers ..for more details one can visit Apple site. In order to listen radio on iPOD, you need to attach external accessories ..you can also store the photos on your digicam to iPod..so no need of any external memory chips.. !!

If you want your application deployment to be unattended, create the bat(.bat) or commant(.cmd) file with following command:

1) Uninstall application with unattended mode
Msiexec /x (Guid of the Application) /quiet

2) Install application with unattended mode
Msiexec /I (Path to MSI) /quiet

…while performing a small proof of concept on setting up a SSL on web server, we gathered some basic info on SSL..

What is SSL
Secure socket layer is a protocol used to secure the channel between browser and web server. The main objectives of setting up a secure communication between client and server are authentication between client and server, ensuring data integrity and securing data privacy. In a typical N-tier architecture, a request from client flows through many layers through different channels. Some of them might be on intranet and some of them might be on internet. Depending upon the deployment scenerio, we must know which layer or channel we need to secure. There are different technologies like SSL, TLS (Transport layer security- more advanced version of SSL), and IPSec (Used to secure the data between two computers), RPC encryption, but the choice depends on transport protocol, end point technologies, environmental considerations etc. You can find the details about these things in the reference links provided at the end of the article.

In order to set up a SSL on your web server, following steps are required:
1) Creating a Web Application for which you need to implement the SSL
2) Creating certificate request and submitting to CA(Certificate Authority)
3) Getting certificate
4) Applying certificate to your web server
5) Setting up SSL and required resources for the site

Continued……

Happpy New year 2006 !!

Hope this year brings all the happiness and prosperity in everyone’s life !!

SGGS Alumni meet in Pune was a brand success with atleast 100 people participating in the meet. Further details can be read at SGGSPALS soon !!

Anyway..be ready for the Silver Jubilee celebration @ SGGS !!

I got this error while executing SP on database. We are using connection pooling in the connection string. As the number of people are trying to connect to the same database while debugging the application - this error was coming. As soon as the debug of some person stops, same code is working fine. Here is a Microsoft KB : http://support.microsoft.com/default.aspx?scid=kb;en-us;827452 Here is a nice discussion on the issue: http://weblogs.asp.net/pleloup/archive/2003/07/23/10451.aspx

Microsoft Professional Developers Conference 2005 is a very big event for Microsoft Community held at at the Los Angeles Convention Center in Los Angeles,California.

Click here to view the details .

You can find the session downloads at Powerpoint Downloads

PDC