msgoodies

Elevation of Privilege is the easy way to get started threat modeling. Threat modeling is a core component of the design phase in the Micros...

Bruce Schneier have an abstract of a paper which claims that enabling users to get the access they need while auditing the access is better...

What is Fiddler? Fiddler is a Web Debugging Proxy which logs all HTTP(S) traffic between your computer and the Internet. Fiddler all...

Yes – read here . I normally use Jungledisk for cloud-based storage but in certain scenarios Live Mesh is better: Sharing with others and...

I've been playing around with the beta of Microsoft Forefront Threat Management Gateway (TMG for short) since its release in late spring...

So you have published your Exchange server and your are using forms based authentication (FBA). But when you use Outlook Anywhere or ActiveS...

The other day, I could not install AVG8 on someone's PC. Everything worked fine, but it could not register with Security Center. It turn...

If you are into reading hardcore stuff about compiler techniques, jit, computer architecture etc. - just a couple of times are year, this to...

Following security Best Practices is the key to maintaining strong security in a virtualized IT environment. Read below to get guidance on i...

Suddenly, it seems like you can do that now. I checked it out when Passport first came out and at that time you had to pay a lot to use the ...

A new kid is in down: GPDBPA. Give it a spin and see if your Group Policies and associated infrastructure are in shape. Find it at MS Downlo...

Group Policy settings - including Software Restriction Policies - can easily be disabled - even by a standard user. Terrible! Read the full ...

I have used a lot of time educating my grandma (who is >80 years old) on how to use the Internet, Live Messenger and her Webcam (Which sh...

Read this entry by Jeff Jones . He also has an interesting link to an article called Exactly how biased am I? .

Read this blog entry by Aaron Margosis . This is how the JS stuff can be done in PowerShell - note how simple it is :) Start- ElevatedProc...

Read the Cable Guy article about the upcoming support in Windows Server 2008 for SSTP (Secure Socket Tunneling Protocol) VPN connections e...

Spent 10-15 minutes (I did not time it) on seeing this flash demo about WM6. The demo walks through our three pillars; Advanced Mobile Commu...

Maybe, now is a good time to stop doing so! Just read Robert Hersing's entry to know why. Here is how you get rid of the LM hashses: KB ...

How easily am I tricked? I don't know, not too easily I hope. At least I have never been tricked on the internet. But don't we all t...

They used to be called High Assurance certificates but now the name seems to be Extended Validation (EV). Anyway, according to this entry i...