Let's Talk Software

Rants about software to keep us sane

OWASP ZAP - Passive Scanning - Get Started

Category: Custom Software Tag: Published 2015-03-26

OWASP ZAP is an excellent (FREE) tool to test your website for common security issues. It has a large library of plugins and an what seems to be an active community. Although the tool has an active attack method, I prefer the passive attack method as you can use the site as you normally would. Although tutorials do exist on how to get started, I personally had difficulty finding them or knowing what I was even looking for when I first started. Especially related to passive security scanning. The interface isn't the most "intuitive", so I figured I would write these instructions for anybody encountering the same problems.

Read more

10 Years!

Category: Custom Software Tag: Published 2015-03-09

Just wanted to say thanks to all of our loyal customers and the great time we have had this last ten years!  Hard to believe, but we started with a couple of servers and the will to succeed (or the stubbornness) and we are still cruising.

 

Method Development Team

Read more

ASP.NET Identity 2.0 Security Stamp

Category: Custom Software Tag: Published 2014-07-09

I'm currently working through a complete Identity setup without using Entity framework. This is taking me to difficult places as the source for this library is yet to be released. It involves lots of reading and guessing. One area of confusion is the Security Stamp.

You can read about the description over at stack overflow http://stackoverflow.com/questions/19487322/what-is-asp-net-identitys-iusersecuritystampstoretuser-interface.

This is the best I found, but it still wasn't enough for the full blown, non EF version.

Read more

FireFox Settings

Category: Custom Software Tag: Published 2014-06-05

Because the Internet is still the wild west (as it should be), I run FireFox in a mode that I recommend. This can decrease page load times, reduce bandwidth usage and reduce the tracking that can be done (not prevent it). Click on through to see the screen shots…

Read more

SQL Tool Belt: Merge Statement

Category: Custom Software Tag: Published 2014-03-23

Database, Database, Database. They are everywhere, and have been for a long time. Personally I find working with a database enjoyable, especially when the requirements get twisted and you need to expand your mind to solve the problem. This blog post is not about one of those mind-bending situations. Just some basics that help with everyday SQL. This one is actually dated now, but still not used as much as it probably should be.

 MERGE

Starting back in SQL 2008 you could use the MERGE command to essentially combine your INSERT, UPDATE, DELETE logic into a single statement. This is nice if you still write your SQL code (which I do) and haven't moved to an ORM (note: I'm not a fan), but that is for another post another day.   Best way to learn is to see an example:

Read more