SvcUtil let you automatically create the client configuration for a WCF service. When you use a certificate on the server side, its public key is encoded in Base64 in the client web.config. 1: < identity > 2: < certificate encodedValue ="AwAAAA ...." /> 3: </ identity > Obviously SvcUtil create this information from metadata (wsdl). Unfortunately there are cases where the service configuration is complex and you cannot enable mex endpoint easily. I had this problem when

During the last TechEd developers in Barcelona, I was at the Ask The Expert in the Security Development Lifecycle booth with the SDL team and Michael Howard in person. I had the chance to be interviewed in the Fishbowl , as a Threat Modeling expert. On Monday I discovered that the video has gone live. In the video I talk about the importance of SDL, the new approach CIA / PI that simplify the DREAD / STRIDE classic concepts, and the Threat Modeling and Analisys tool by ACE team . The video Url is

I am evaluating a new device that has its own internal webserver. It's a box that deals with some input signals that can be used via TCP/IP. It sounds great since it provides also WiFi port and is security enabled. All great standard way to communicate with a device, but (there is always a but ) ... Security is provided by encrypting the password with MD5. Sadly MD5 is completely defeated and should be used only for compatibility reasons. It's very easy to crack MD5 in minutes by using MD5

I just finished uploading on Codeplex my RafCollection project that focus on a collection for building object models, support binding, etc. You may think that's too much for a collection class but the project is larger from what you may initially think. The main class is 2243 source rows and with the other classes the total is 3387 source rows. Why all this stuff? Because I needed to have a super-powerful collection in order to keep my entities as simple as possible. So the collection takes care

Hi all, my name is Raffaele Rialdi, a Microsoft developer security MVP, and for the most curious people, my MVP profile is here . It's a long time (since June 2003) I blog, but mainly only into Italian language but I decided to open a new English blog into this wonderful site (thanks Susan !).