Just been asked some further questions about the DataExecutor class on FreeNode and thought I'd give some usage instructions/clarification here. Howto: Fill a strongly typed dataset Set your base class (of your TableAdapter) to Tools.genericTableAdapter. Fill your strongly typed DataSet thus: {% highlight csharp %} DataExecutor de = null;

I've been exploring the dark alleyways of the Windows Presentation Foundation this week and found no way in my trawlings of the net to expand a treeview to a specific node. No FindNode, no ExpandTo or ExpandAll. Great. Anyway, here's the solution I came up with. It relies upon a binding the Tag property to the text you are searching for, but that could obviously be changed.

Quite a lengthy post here with a lot of code in the hope that my experience of building an integrity-checking SSL (text-only for now) communication system will be of use to somebody else.

Well, first off, this is the first post using the new blogging solution! Let's hope it works! I'm presenting here a low level memory management class I wrote for C# that allows you to pass an IntPtr and then manipulate the bytes inside as indexers of an array (of the MemoryManager object). {% highlight csharp %} using System; using System.Collections.Generic; using System.Text; using System.Runtime.InteropServices;

Well, it's not security related, but I thought it was worth sharing my solution for all those people who are having trouble binding either ApplicationSettings or any other datasource to a RadioButton in the .NET Framework (C# and VB.NET) WinForms environment. The problem is that when binding a RadioButton's Checked property clicking on a differentbutton in the set will not select the new option, but merely deselect all options.

Just a quick post to draw attention to Ronald's excellent article at http://www.0x000000.com/?i=525 where he has pulled off a very interesting remote file access in IE7. The attack works by including an invalid DTD on an XML file which then streams the content of the requested file in its error message. Use IE7? Be afraid. IE7 Remote File Access was originally published by Martin Paul Eve at Martin Paul Eve on March 05, 2008.

Well, I decided to play around a little with Firefox 3 Beta 3 today and discovered that it looks like the ever popular -moz-binding css attribute is now rendered a little less useful. It is now impossible to load off-site XBL via this method. However, all is not lost.

Well, today I deployed an early version of my wp-aspxrewriter component to my personal blog. This component is an ASP.NET HttpModule in conjunction with a Wordpress plugin and code hack (official patch for the hack submitted at their trac site) which allows 100% pretty permalinks under IIS6. The current mechanism is grim. A request to a non-existent .aspx page invokes the handler.

Well, long time no post. Been in hospital. Been busy with college. Life gets in the way of hacking. Usually when one wast to illustrate an XSS vulnerability there are two approaches. The first is to show the client the XSS and assume that they know and understand the impact. The second is to write a fully fledged exploit which takes some form of action on the client's server so that they can see the truly devastating impact.

There's been a fair bit of discussion going on at slackers on the security implications of the Unicode characters U+202D and U+202E which switch the left-to-right and right-to-left encoding of the following text.

One of the biggest problems faced when writing Javascript that modifies the DOM is the fact that the poorly written IE7 crashes because it hasn't finished loading the current element. This only seems to happen when the DOM is modified through a script loaded by an xx:expression binding in a style tag.