Web Applications

ASP.NET Security Vulnerability And A Work-around

Microsoft issued a security Advisory about a vulnerability in ASP.NET :

Microsoft is investigating a new public report of a vulnerability in ASP.NET. An attacker who exploited this vulnerability could view data, such as the View State, which was encrypted by the target server, or read data from files on the target server, such as web.config. This would allow the attacker to tamper with the contents of the data. By sending back the altered contents to an affected server, the attacker could observe the error codes returned by the server. We are not aware of attacks that try to use the reported vulnerabilities or of customer impact at this time.  

Microsoft Security Advisory (2416728)

While the issue is still being investigated, Scott Gu offers a workaround that could help prevent hackers succeed in using the loophole. The work around is to hide specific/detailed error code information to the user and instead display a generic error page.

The blog post also offers a script that you can run on your web sever to identify all applications that need to be patched.  Take a look and patch your applications ASAP.



Velocity 2010: Urs Holzle : How fast Web Can be ?

Just watched Velocity 2010: Urs Holzle on Active Player. It is surprising to see that the average load time of a web page is 4.9 seconds.


Urs Holzle (Google)

Source : Velocity 2010: Urs Holzle from O’Reilly Velocity Conference ( Feed ) via Active Player


Wired : The Web Is Dead. Long Live The Internet

Chris Anderson and Wired offer yet another riveting conclusion (sounds like a prediction for some of us) that the Web as we know is dead as we are getting more and more connected on the internet with apps and devices.

You’ve spent the day on the Internet — but not on the Web. And you are not alone.

The Web Is Dead. Long Live Internet, Wired

I agree 100%, as it is just a fact for how I consume content on the internet. Almost (99%) everything I do on the internet is done through a custom application (mostly on iPhone and iPad) rather on the web.

Another reason, we want to go with custom apps instead of web applications is that we could probably avoid lots of distraction on the web. Particularly for students, it would matter the most to stay focused and learn better. So this has been primary motivation behind the Active Learning suite.

Active Player lets you enjoy and learn from your favorite videos and podcasts without ever visiting a single web page. If a website doesn’t offer an RSS Feed, you can create your own RSS Feed of any content available on the internet with Active Feeds and help the rest of the world updated without ever visiting the web.

Its not at all a surprise!

For me, this is not a surprise. Back in 2004-2005 the whole world was drumming about going to Web for everything and predicting that apps on desktops will be dead pretty soon (smart phones are still a luxury at that time and apps on mobile devices are not yet born).  I didn’t believe that it would happen. Instead, I believed that if we want the best, then they better be desktop apps but be connected on the net.

What we need is a smart desktop application or a browser plugin or a desktop widget that is totally integrated with an online application, its data storage and an online interface.

It would be better to create the best of both worlds when user interaction need to be essentially rich and needs ability to work offline (as neither online nor offline desktop alone can not take advantage of the situation) and also need all of that an online application offers.

Why desktop apps will stay, 9/26/2006

With iPhone released in 2007 and App Store in 2008, apps created a thriving eco-system of its own and time for apps has just arrived, again.

And that is what happened. Rather than moving everything to the web to take advantage of the internet, we are in fact bringing everything on the internet to devices. 

When Netflix started offering streaming videos online, we may have watched them on our desktops or laptops. But now more and more people are watching those movies right on their TV sets and more recently started watching on their iPads. In fact, Netflix’s streaming service got lot more popular with their iPad application.

So, welcome back to apps. Rich, lively and intuitive. In most cases, they would be less distracting. And musical, of course. (If you haven’t realized, on the web, there are no sound effects). Be it a desktop app or an app on your Mobile phone or on a special device.


Lifecycle of a Wireframe

Just watched Lifecycle of a Wireframe by Nick Finck on Active Player. Wonderful session.

Dive deep into the process used to create wireframes, a key deliverable for user experience designers. Hear about the principles that guide this process, how to create great wireframes (all the way down to the nitty-gritty page or screen level), and how to identify and deliver solutions that meet your clients’ business goals and solve their problems. Walk away with a better understanding of what delivering awesome wireframes entails – from methodology, to process, to delivery – and how to do it yourself. If you’re an information architect, interaction designer, visual designer, or regular old user experience-curious creature: this one’s for you.

Source : Lifecycle of a Wireframe from MIX 2010 ( Feed ) via Active Player

While we can just start with a white paper and pencil to get started with wire-frames, We could also create great wireframes right in MS Power Point itself. You may download this  MS Power Point template for creating wonderful wireframes in Power Point.


Copyright © 1996-2010 INSPIONS Inc. All rights reserved.
iDream theme by Templates Next | Powered by WordPress