links for 2009-07-10
-
Wow!
-
HostedNumbers.com provides affordable, feature rich phone numbers for your Web site or other business needs.
-
Need to exercise…Perform these workouts four days a week. Do the upper-body and lower-body workouts on consecutive days, rest a day, and repeat. For your first upper-body day, use the low-rep workout. For your first lower-body day, follow the high-rep workout. Then switch for your second two days of training, so every week you end up performing both high and low reps for your upper and lower body.
links for 2009-07-09
-
This is sometimes a real cpu hog…ccmexec.exe and inventory.exe – what are they and what do they do?
-
Some useful tidbits…SciTE Quick-Reference Cheat Sheet.
-
Microsoft has identified several tools to assist administrators. These tools cover detection, defense, and identifying possible coding which may be exploited by an attacker.
-
…You can also find useful ASP.NET security information from this security blog post of mine, and from my ASP.NET Tips/Tricks page here.
-
Request validation is enabled by ASP.NET by default. You can see the following default setting in the Machine.config.comments file.
<pages validateRequest="true" … />
Confirm that you have not disabled request validation by overriding the default settings in your server's Machine.config file or your application's Web.config file. -
To counter SQL injection attacks, you need to:
* Constrain and sanitize input data. Check for known good data by validating for type, length, format, and range.
* Use type-safe SQL parameters for data access. You can use these parameters with stored procedures or dynamically constructed SQL command strings.
* Use an account that has restricted permissions in the database. Ideally, you should only grant execute permissions to selected stored procedures in the database and provide no direct table access.
* Avoid disclosing database error information. In the event of database errors, make sure you do not disclose detailed error messages to the user. -
This is a test.
-
…If you are interested in experiencing blacksmithing for yourself, the Artist-Blacksmith Association of North America is a great resource. A comprehensive list of educational resources is available on their Web site including shops and schools offering classes. You will get dirty and hot, but soon you’ll be hearing the ring of the anvil and learning a useful skill that can last a lifetime.
links for 2009-07-08
-
Here are some approaches to finding an asp.net webform control with JQuery, along with the easiest…Find With Ending – Since the name you give you .Net control is only prepended with its naming garbage, you can still find your names using the ends with selector.
links for 2009-07-07
-
…A service's endpoint identity is a value generated from the service Web Services Description Language (WSDL). This value, propagated to any client, is used to authenticate the service. After the client initiates a communication to an endpoint and the service authenticates itself to the client, the client compares the endpoint identity value with the actual value the endpoint authentication process returned. If they match, the client is assured it has contacted the expected service endpoint. This functions as a protection against phishing by preventing a client from being redirected to an endpoint hosted by a malicious service.
-
…To emulate this at development time, you can create two certificates to satisfy the security requirements. The first is a self-signed certificate that is placed in the Trusted Root Certification Authorities store, and the second certificate is created from the first and is placed in either the Personal store of the Local Machine location, or the Personal store of the Current User location. This topic walks through the steps to create these two certificates using the Certificate Creation Tool (MakeCert.exe), which is provided by the .NET Framework SDK.
-
Excellent summary of UserNamePassword…If you change the Client Credential Type to “UserName”, you can then pass username and passwords to the service and authenticate the client based on these credentials.
-
Our educational programs interweave concepts of materials engineering and materials science throughout the curriculum.
-
Nice open source c++ library…The following example shows the implementation of a simple HTTP server using the POCO libraries.
-
Good cartoon…Python
links for 2009-07-02
-
…By default, when a user name and password is used for authentication, Windows Communication Foundation (WCF) uses Windows to validate the user name and password. However, WCF allows for custom user name and password authentication schemes, also known as validators. To incorporate a custom user name and password validator, create a class that derives from UserNamePasswordValidator and then configure it.
-
Looks useful…FreeImage is an Open Source library project for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today's multimedia applications. FreeImage is easy to use, fast, multithreading safe, compatible with all 32-bit versions of Windows, and cross-platform (works both with Linux and Mac OS X). FreeImage is also distributed with an updated C# wrapper.
-
Need one of these…The Outfit includes everything you need to start mowing
-
I think this is the one, in black…Flame View Wood Cook Stoves
links for 2009-07-01
-
Some nice apps…
-
…There are a few rare reasons why you'd want to fake this, but they mainly involve transmitting over specially secured networks. — Security capabilities are found by querying the channel stack with GetProperty for an instance of ISecurityCapabilities.
-
…The patterns & practices team at Microsoft has put together their first release of guidance for WCF security. They've included how-to guides and videos that walk you through a number of security tasks, such as working with certificates and configuring role providers. The overall guide is still under development so these represent individual modules that are being published as they're completed.
-
Today's topic covers how to choose a transport and associated encoder.
-
…Today's article covers the NetTcp binding, which is going to be the popular out-of-the-box choice for communicating over an Intranet. The default configuration for TCP is faster than the configuration for HTTP, but intended only for WCF-to-WCF communication. You can open that up with a cost to speed, and you can add some WS-* specification features again at a cost to speed. There's more about this in the article I did for choosing transports and message encoders.
-
…The BasicHttp binding is going to be one of the more popular out-of-the-box choices for communicating over the Internet. The primary pivot for what goes in your channel stack is going to be the method you choose for securing messages. The choices you have with BasicHttp are no security, HTTPS security, SOAP security, and HTTPS security with SOAP credentials. This is set by the Security.Mode property on the binding. Let's look at each of those in turn.
-
…The WsHttp binding is a lot like the BasicHttp binding with the Web Services knob turned up a little higher. Where BasicHttp stops with message security, WsHttp continues with transactions, reliable messaging, and WS-Addressing either enabled by default or available through a single control setting. Otherwise, the HTTP-ness of the two bindings is the same and all of the binding elements being used have appeared in previous bindings.
-
…When packaging up a collection of settings, how do I know whether to use a CustomBinding, extend the Binding class, or extend one of the standard binding classes?
-
Excellent read for the Mobile Developers…Figure 1 illustrates common rich client mobile application architecture with components grouped by areas of concern.
-
…In this article you will learn to build a picture contacts browser using advanced rendering techniques offered by the .NET Compact Framework 3.5 and the Windows Mobile APIs
links for 2009-06-30
-
Nice list of MSDN content…The topics in this section catalog a number of possible client and service security configurations. Configurations vary according to a number of factors. For example, whether a service or client is on an intranet, or whether the security is provided by Windows or transport (such as HTTPS).
-
…Who needs to fuss with planting lettuce and spinach when these low-care perennial plants can provide such great salads? Plus, with the exception of patience dock, all these plants are readily available from garden seed companies. We are working with seed companies to add patience dock to their catalogs for 2010. In the meantime, we are offering free seeds to anyone who will sow the seeds (you can plant them in the fall; the harvest will be small from the first-year perennial plants), and then send us a report on how the plants behave and how you like the greens for salads and cooking. To request seeds, send a small padded, self-addressed envelope to the following address:
links for 2009-06-29
-
Should probably refactor our client service code…As consequence of this, we should add some code to handle any possible exception for network errors when a proxy is closed/disposed.
The common pattern for cleaning up a proxy is the following
links for 2009-06-28
-
Best list of wood cooking stoves with pictures.
-
They still make these?…A hand washer? That sounds like a lot of work. Not with the James Washer. Simply let the clothes soak in hot soapy water, then just a few minutes of swishing the pendulum agitator back and forth does a normal load. Made of high-grade stainless steel with a galvanized lid and pine legs.
-
Cool…Canadian made, handcrafted piston fan runs off the heat of your woodstove. The secret of the Free Breeze fan is a small stirling engine housed in the square base of the unit. Stirling engines have been around for decades but no one has ever come up with a marketable way to use them. They consist of a sealed chamber that expands quickly when heated and contracts when it cools
-
Lots of pictures…Featuring Quality Stoves from the following Manufacturers
Jøtul • HearthStone • Harman • Lopi • Scan • Pacific Energy • Vermont Castings -
We call it the EVERBURN System and it’s designed to deliver cleaner emissions and longer burn times, similar to a catalytic system. Our state-of-the-art design enables Defiant and Encore stoves to burn more steadily and longer on a single load of wood compared to other non-catalytic stoves. So now you can enjoy all of the beauty and style of a traditional cast iron stove with a new level of convenience and efficiency. Just what you’d expect from Vermont Castings
-
Morsø offers a wide selection of stoves in terms of design, size, stove type and efficiency. Morsø has 150 years’ experience with cast iron, and we offer a 10-year warranty covering casting and production defects.
-
Capture the classic warmth of wood with the modern convenience,
efficiency, and versatility of Country Flame stoves and inserts.
Catalytic and non-catalytic models in freestanding or insert
configurations allow you to choose the option that makes the most
of your décor, your budget, and your environment. -
Do these work?…Add efficiency, safety, and beauty to your existing fireplace with heavy-duty Country Flame Universal Fireplace Doors. Whether you choose the attractive, versatile 400 Series or the elegant 500 Series, you're sure to appreciate the warmth and extended burn times you'll get from your existing
masonry fireplace. -
Looks nice…Margin has made the first Amish cook stove with a glass firebox door that allows you to see the fire!! This is the most popular stove we sell and for good reason. With this option you can watch and enjoy the fire no matter where you need to place the stove in your home!
-
Looks nice…Flame View Heater – wood stove, several pictures.
-
Off-grid (cabin) supplies store.
-
Looks promising…In this issue I will address another form of “free” water pumping. There are many remote applications where a solar-powered water pump is more cost effective than installing a conventional grid-connected AC pump.
I recently designed a solar-powered pumping system for a local farmer wanting to pump water from a lake up to a watering trough for cattle in a distant fenced field. We have also designed larger systems to pump directly from drilled wells up to elevated storage tanks, which provide gravity-fed water back down to remote ranch buildings. -
Same info as the other html link.
-
Nice…Frequently asked questions about driven point water wells
-
Perfect!…Well Points can be used to installing wells in shallow water tables 25 ft or less.
Installation instructions are presented here.
-
Need to install a new shallow well system. I would appreciate any advice on driving the well point, and recomendations on which pump and tank to buy. The neighbors have similar systems, and believe they are 20 to 25' deep. Does anyone know of a how-to website for shallow wells?
links for 2009-06-26
-
…In this episode I explain how to break hygiene in Scheme macros by using datum->syntax. I discuss how you can play with the lexical context. Finally, I spend some word on non-hygienic macro systems versus hygienic systems.
-
Need to get this…Backcountry Research introduces their new Awesome Strap. It allows you to keep a tube, tire levers, and CO2 strapped to your seat post. The idea is to weigh less than a little bag and make your stuff easier to get to; pretty simple… kind’a like the Simple Strap that we reviewed last month.
