Jan 132012
 

I did this talk at this year’s Community Technology Update 2012 at Blk 71 on 7th January 2012. Apparently, HTML5 is the highlight for the Developer Track.

HTML5 is the next wave of development for the web, with the support from IE9 and IE10. Even Windows 8 will support native apps written in HTML5. This session will give an overview and a deeper dive into writing effective HTML5 together with your existing ASP.NET experience to create the best next generation web experience.

Slides are after the break. Continue reading »

Jan 142011
 

I originally wanted to have the title as a list of all the products released today from Microsoft Web Technology Tools, but thought otherwise since there are so many new stuff today! Awesome? I think so.

  1. ASP.NET MVC3 with Razor
  2. NuGet
  3. WebMatrix (also with Razor)
  4. IIS 7.5 Express
  5. SQL Compact Edition 4 (download with WPI 3)
  6. Web Farm Framework 2.0 and Web Deploy
  7. Orchard 1.0
  8. Web Platform Installer 3.0

You can read more about what each does and what is updated from Scott Hanselman’s post – ASP.NET MVC3, WebMatrix, NuGet, IIS Express and Orchard released – The Microsoft January Web Release in Context – and Scott Guthrie’s post – Announcing release of ASP.NET MVC 3, IIS Express, SQL CE 4, Web Farm Framework, Orchard, WebMatrix.

Sep 212010
 

Since I’ve posted about the flaw and how to fix it, here’s how to actually exploit it. The exploit is called “Padding Oracle Exploit Tool” if you want to do a search on it.

You can download the POET script at http://netifera.com/research/. Apparently this exploit works for Apache MyFaces too as seen below.

Remember, exploit responsibly. Have fun!

Sep 202010
 

Recently, a newly uncovered ASP.NET security vulnerability was presented and distributed at a hacker conference last weekend. The gist is that the encryption can be compromised by examining the error codes from the server. This means your sensitive information can be compromised if you are using the ViewState to store them, or your web.config file.

Fix? Set the customErrors in your web.config file to show a common error file as described in the Microsoft Security Advisory (2416728) to limit the discovery of error codes from the server.

For more information regarding this hack, you can read a post by Microsoft Security Research and Defense on Understanding the ASP.NET Vulnerability and Scott Guthrie’s Blog on Important: ASP.NET Security Vulnerability.

May 052010
 

Interested in learning how new innovations in Microsoft’s Web Platform and developer tools like ASP.NET 4 and Visual Studio 2010 can make you a more productive web developer? If you’re currently working with PHP, Ruby, ASP or older versions of ASP.NET and want to hear how you can create amazing websites more easily, then register for a Web Camp near you today!

Microsoft’s Web Camps are free, two-day events that allow you to learn and build on the Microsoft Web Platform. At camp, you will hear from Microsoft experts on the latest components of the platform, includingASP.NET Web Forms, ASP.NET MVC, jQuery, Entity Framework, IIS, Visual Studio 2010 and much more.

Web Camps also provide the opportunity to get hands on with labs and get creative by building in teams. All this with Microsoft experts on hand to guide you through.

On Day 1 you’ll learn through demos and presentations and Day 2 is a fun hack day for doing labs and working in teams to win prizes. Check out the full agenda here.

Learn moreRegister Here

Speaker

James Senior is based in Seattle and is Microsoft’s Web Evangelist and holds a special interest in the ASP.NET MVC, jQuery and Social Web technologies. He is a noted author, blogger and speaker and generally helps developers make smart decisions about which technologies to use.

A published author on the topic of software quality, James writes a blog focussing on technology at www.jamessenior.com. You can also connect with him on Linked In, Facebook, Twitter (@jsenior).

Singapore

Dates: June 04-05, 2010
Location:
Microsoft Auditorium
Level 21 NTUC Centre
One Marina Boulevard
Microsoft Singapore

Jun 162008
 

These are a few links I want to read later on F# Quotations. Quotations are similar to expression trees in C#, but more powerful.

F# – Simple quotations transformation

Practical F# Parsing: The Abstract Syntax Tree

F# Quotations Samples on CodePlex

F# quotations visualizer – reloaded!

Some Q&A on F# Quotations and LINQ

Apr 262008
 

I copied this blog post from Chris Dufour’s blog. Chris copied it from Rob Windsor’s blog. Rob copied it from Julie Lerman’s blog. Julie copied it from Guy Barrette’s blog. I’m sure someone will copy it from me and add their own little flair.

If you live in Toronto and don’t attend DevTeach, Guy Barrette is going to make you code in Clipper for the remainder of your career (BTW – that’s Clipper development with no Multi Edit and no Norton Guides. Ah, there, now you’re shaking).  Seriously, DevTeach has a great lineup of speakers from Toronto and across the globe. Where else can you hear, see, touch, feel, talk to, describe your problems (IT/Dev related or not) and have a beer with these guys/gals?

And that’s only half of them!!!

Need more reasons?

Keynote by Scott Hanselman
Scott is one of the most prolific, renowned and respected bloggers (
http://www.hanselman.com) and podcasters (http://www.hanselminutes.com) in the .NET world. Scott is a hands-on thinker, a renowned speaker and writer. He has written a few books, most recently with Bill Evjen and Devin Rader on Professional ASP.NET. In July 2007, he joined Microsoft as a Senior Program Manager in the Developer Division. In his new role he’ll continue to explore and explain a broad portfolio of technologies, both inside and outside Microsoft. He aims to spread the good word about developing software, most often on the Microsoft stack. Before this he was the Chief Architect at Corillian Corporation, now a part of Checkfree, for 6+ years and before that he was a Principal Consultant at STEP Technology for nearly 7 years.
http://www.devteach.com/keynote.aspx

Silverlight 2.0 Workshop
For the first time an independent conference is having a workshop on Building Business Applications with Silverlight 2.0.  Join Rod Paddock and Jim Duffy as they give you a head start down the road to developing business-oriented Rich Internet Applications (RIA) with Microsoft Silverlight 2.0. Microsoft Silverlight 2.0 is a cross-browser, cross-platform, and cross-device plug-in positioned to revolutionize the way next generation Rich Internet Applications are developed. Microsoft’s commitment to providing an extensive platform for developers and designers to collaborate on creating the next generation of RIAs is very clear and its name is Silverlight 2.0. In this intensive, full-day workshop, Rod and Jim will share their insight and experience building business applications with Silverlight 2.0 including a review of some of the Internet’s more visible Silverlight web applications. This workshop is happening on Friday May 16 at the Hilton Toronto.
http://www.devteach.com/PostConference.as
px#PreSP

Bonus session: .NET Rocks hosts a panel May 14th at 18:00
This year the bonus session (Wednesday May 14 at 18:00) will be a panel of speakers debating the Future of .NET. Where is .NET going? How will new development influence .NET and be influenced by .NET? Join Carl Franklin and Richard Campbell from .NET Rocks as they moderate a discussion on the future directions of .NET. The panellists include individuals who have strong visions of the future of software development and the role that .NET can play in that future. Attend this session and bring your questions to get some insight into the potential future of .NET! This bonus session is free for everyone. Panelists are: Ted Neward,Oren Eini ,Scott Bellware
http://www.devteach.com/BonusSession.aspx

Party with Palermo, DevTeach Toronto Edition
Jeffrey Palermo (MVP) is hosting Monday May 12th in Toronto is acclaimed “Party with Palermo”. This is the official social event  kicking off DevTeach Toronto. The event is not just for the attendees of Toronto it’s  a free event for everyone. It’s a unique chance for the attendees, speakers and locals  to meet and talk with a free beer.   The event will be held at the Menage club  location and you need to RSVP to attend. Get all the details at this link:
http://www.partywithpalermo.com/

DevTeach Toronto is going to be a lot of fun and a great chance to learn from the best minds in the industry.  Register now – you don’t want to miss out.

Dec 062007
 

If Google can do it, so can Microsoft. Volta is the GWT of .NET. Enough said. Here’s a description of what it is.

The Volta technology preview is a developer toolset that enables you to build multi-tier web applications by applying familiar techniques and patterns. First, design and build your application as a .NET client application, then assign the portions of the application to run on the server and the client tiers late in the development process. The compiler creates cross-browser JavaScript for the client tier, web services for the server tier, and communication, serialization, synchronization, security, and other boilerplate code to tie the tiers together.

Developers can target either web browsers or the CLR as clients and Volta handles the complexities of tier-splitting for you.  Volta comprises tools such as end-to-end profiling to make architectural refactoring and optimization simple and quick. In effect, Volta offers a best-effort experience in multiple environments without any changes to the application.

Download it here.

You need Visual Studio 2008 and .NET Framework 3.5.