Tuesday, September 21, 2010

CAPTCHA Server Control for ASP.NET - protecting from spam

Looking to protect your public facing web sites from automated submission/spam - leverage CAPTCHA Server Controls readily availbale for ASP.NET -

ASP.NET captcha implementation - http://www.codeproject.com/KB/custom-controls/CaptchaControl.aspx

Telerik Captcha - www.telerik.com/products/aspnet-ajax/captcha.aspx

Google's ReCaptcha - https://www.google.com/recaptcha

-Dipesh

Security workaround for Sharepoint Server and Services 3.0

Microsoft recently released a Security Advisory for a vulnerability affecting ASP.NET. This post documents recommended workarounds for the following SharePoint products:

•SharePoint 2010
•SharePoint Foundation 2010
•Microsoft Office SharePoint Server 2007
•Windows SharePoint Services 3.0
•Windows SharePoint Services 2.0

Does impact - SharePoint Server 2007 and Windows SharePoint Services 3.0

Check for latest updates on MSDN blog here -

http://blogs.msdn.com/b/sharepoint/archive/2010/09/21/security-advisory-2416728-vulnerability-in-asp-net-and-sharepoint.aspx


-D

Monday, September 20, 2010

Security gap in ASP.net

Waiting for the patch to be released to plug the security gaps in ASP.net, Sharepoint sites or Dotnetnukes that allows client user to download UR most sensitive web.config file or decrypt UR Viewstate...

http://weblogs.asp.net/scottgu/archive/2010/09/18/important-asp-net-security-vulnerability.aspx

- D