The Wiert Corner – irregular stream of stuff

Jeroen W. Pluimers on .NET, C#, Delphi, databases, and personal interests

  • My badges

    Mastodon

  • Twitter Updates

  • My Flickr Stream

    20140508-Delphi-2007--Project-Options--Cannot-Edit-Application-Title-HelpFile-Icon-Theming20140430-Fiddler-Filter-Actions-Button-Run-Filterset-now20140424-VMware-Fusion-6.0.3.-no-reclaimable
    More Photos

  • Pages

  • All categories

  • Enter your email address to subscribe to this blog and receive notifications of new posts by email.

    Join 1,854 other subscribers

Patch your ASP.NET servers ASAP: ASP.NET Security Update Shipping Thursday, Dec 29th – ScottGu’s Blog

Posted by jpluimers on 2011/12/29

Quotes:

The security update we are releasing resolves a publicly disclosed Denial of Service issue present in all versions of ASP.NET.  We’re currently unaware of any attacks on ASP.NET customers using this exploit, but we strongly encourage customers to deploy the update as soon as possible.

Attacks such as these are not specific to any particular language or operating system. Presenters at the security conference discussed how to cause them using standard HTTP form posts against several different web frameworks (including ASP.NET). Because these attacks on web frameworks can create Denial of Service issues with relatively few HTTP requests, there is a high likelihood of attacks happening using this approach. We strongly encourage customers to deploy the update as soon as possible.

The security update we are releasing on Thursday, December 29th updates ASP.NET so that attackers can no longer perform these attacks. The security update does not require any code or application changes.

During the 28e Chaos Communication Congress in Germany, on December 28, 2011 a security vulnerability was showed that potentially can DOS many types of web servers (including ASP.NET) with a carefully crafted 100 kilobyte plain HTTP form post request.

Information on the ASP.NET vulnerability was published by Microsoft on December 27, 2011.

ASP.NET on all supported .NET versions (1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5 SP1, 4.0) on all supported Windows versions (XP, Server 2003 and R2, Vista, 7, Server 2008 and R2) are affected.

Since the vulnerability as being very severe, Microsoft will publish an out of band fix today (December 29, 2011) at around 10 AM Pacific time (during winter, this 1800 UTC) on Windows Update, Windows Server Update and the Microsoft Download Center followed 3 hours later by a webcast at 01 PM Pacific time (2100 UTC).

More about about 28C3 in German.

–jeroen

via: ASP.NET Security Update Shipping Thursday, Dec 29th – ScottGu’s Blog.

Posted in .NET, ASP.NET, Development, Software Development | 1 Comment »

Get last command line argument in windows batch file – via: Stack Overflow

Posted by jpluimers on 2011/12/29

Sometimes you want to parse commandline arguments in batch files starting at the last one.

For parsing them left to right, the shift command comes in handy.

But there is no “shift-reverse” command, so you need some trick.

StackOverflow to the rescue: user Joey provides this really nice answer:

The easiest and perhaps most reliable way would be to just use cmds own parsing for arguments and shift then until no more are there.Since this destroys the use of %1, etc. you can do it in a subroutine

@echo off
call :lastarg %*
echo Last argument: %LAST_ARG%
goto :eof
:lastarg
set "LAST_ARG=%~1"
shift if not "%~1"=="" goto :lastarg
goto :eof
:eof

–jeroen

via: Get last command line argument in windows batch file – Stack Overflow.

Posted in Batch-Files, Development, Power User, Scripting, Software Development | Leave a Comment »

Added a few links to my “Tools” page, @WordPress bug spuriously inserting div tags still present.

Posted by jpluimers on 2011/12/28

While re-designing a Visual Studio 2010 plus Delphi XE2 install for a specific client, I updated some of my Tools page links:

And found out that the WordPress still wrongly inserts div tags when you step out a list by pressing Enter twice is still present. Annoying, as it has been there for at least 2 years, so I’m still interesting in people having a workaround for it.

–jeroen

Posted in .NET, C#, Delphi, Development, Software Development, TFS (Team Foundation System), Visual Studio 2008, Visual Studio 2010, Visual Studio and tools | 1 Comment »

Station Sassenheim opgenomen in de Android Sneltrain app, lezen @NS_Online en @NS_Stations even mee?

Posted by jpluimers on 2011/12/27

Eerder schreef ik over De NS en UserExperience: er valt nog veel te leren over ondermeer het nieuwe Station Sassenheim en het gebrek aan ondersteuning in Apps omdat de NS webservice na (inmiddels) ruim 2 weken nog steeds niet in haar webservice heeft opgenomen.

Daarmee geeft de NS haar eigen site dus een concurrentievoordeel tegen apps.

Inmiddels is er voor de Sneltrein Android app een update geweest en kun je daar toch Station Sassenheim kiezen. Dank Jouke!

Nu nog een iOS versie van de Sneltrein App :)

–jeroen

via: De NS en UserExperience: er valt nog veel te leren, ook door @NS_Online en @NS_Stations #UX « The Wiert Corner – irregular stream of Wiert stuff.

Posted in Android Devices, HTC, HTC Sensation, iOS, LifeHacker, Power User | Leave a Comment »

Google Calendar: Quick Add to specific calendar? – Calendar Help – @google

Posted by jpluimers on 2011/12/27

It would be so cool if Google re-added this feature:

  1. Deselect all calendars but one
  2. Quick Add an event
  3. The event gets added to this one selected calendar

Now all events always get added to your default calendar. I remember this worked somewhere in 2010. But now it fails when adding about 200 events by hand on a secondary calendar :(

See this discussion thread:

tiburon200; 3/21/09

When using quick add, is it possible to place the new event on a specific calendar (ie, home, work) or is that only an option through the regular “Create Event” method?

Thanks for any insight… seems like it should be pretty easy, but I can’t find the right syntax.

rmorales2005; 8/17/11

This used to be possible by just hiding all other calendars, but this got broken some time ago…

–jeroen

via Quick Add to specific calendar? – Calendar Help.

Posted in Google, GoogleCalendar, Opinions, Power User | Leave a Comment »

Hardening your Mac (YouTube video in German) thanks @plaetzchen

Posted by jpluimers on 2011/12/26

The below video shows you how to harden your Mac, supposedly even for 28C3 next week.

Thanks Philip Brechler for announcing and posting this video, your interesting youtube video channel and your blog.

–jeroen

Posted in Apple, Mac OS X 10.7 Lion, Power User | Leave a Comment »

Merry Xmas

Posted by jpluimers on 2011/12/25

It is christmas morning, with a beautifull green dike behind our house: obviously it is not winter, and with 10 degrees centigrade it almost feels like spring :)

At about 0900 it was still wonderfully silent outside, what a change to the last few days!

With the Christmas tree snowing – my brother was very proud he could help assembling it a few days ago – its tiny polystyrene snow perls.

Listening and watching (asx) the Top 2000 has become a tradition, and we’re really looking forward for our astronaut André Kuipers to open this years edition at noon today live from the ISS International Space Station where he is part of Expedition 30.

Tonight, a lovely dinner, and tomorrow a dinner we will be at my brothers place with my mom setting up a bouillon fondue (he will get an electric fondue pot as a present, so no chance he will set his house on fire by accident) and using the ingredients in the kerstpakket he got from his company to make really nice salad.

Wishing you all a very nice Christmas!

–jeroen

Posted in About, Opinions, Personal | Leave a Comment »

#sr11 video livestream URL http://livestreams.omroep.nl/3fm/sr2011_mainview

Posted by jpluimers on 2011/12/24

Why do they hide such URLs so deeply :)

http://livestreams.omroep.nl/3fm/sr2011_mainview

You can open this directly in Windows Media Player; will check the Mac shortly.

Sources:

–jeroen

Posted in LifeHacker, Power User | Leave a Comment »

xkcd: Standards – how standards proliferate

Posted by jpluimers on 2011/12/24

Ever wondered why standards are like rabbits or legislation?

How Standards Proliferate

etc of course includes memory cards (XQD anyone?), USB and FireFire cables, audio and video connectors, software development and many more :)

–jeroen

via: xkcd: Standards.

Posted in Comics, Opinions | Leave a Comment »

Easy ways to show which Windows version/service packs are installed; via Super User: windows command line: can I tell Service pack number?

Posted by jpluimers on 2011/12/23

Sometimes you want to know which SP is installed on Windows with built-in tools only.

For end-users the fastest way is to start Winver, it will give you dialogs like these (left: XP with SP3, right: Windows 7 without any SP):

For command-line lovers, the one I like this most is this:

systeminfo | findstr /B /C:"OS Name" /C:"OS Version"

[WayBack] systeminfo can show a truckload of information, and [WayBack] findstr condenses this to what I need.

On Windows XP SP3, it shows this:

OS Name: Microsoft Windows XP Professional
OS Version: 5.1.2600 Service Pack 3 Build 2600

On vanilla Windows 7, it shows this:

OS Name: Microsoft Windows 7 Ultimate
OS Version: 6.1.7600 N/A Build 7600

–jeroen

via: [WayBack] windows command line: can I tell Service pack number? – Super User.

Posted in Power User, Windows, Windows 7, Windows Vista, Windows XP | Leave a Comment »

« Previous Entries
Next Entries »