InfoQ Homepage Security Vulnerabilities Content on InfoQ
-
A Train-Wreck Waiting To Happen: Managed Code and the Windows Shell
The CLR has a major design flaw; each process can only have one. When you combine this with a ubiquitous process like explorer.exe, disaster can strike.
-
Preventing SQL Injection Attacks in .NET Applications
Back in September InfoQ reported on Michael Sutton's alarming study of SQL injection vulnerabilities. Fortunately Scott Guthrie shows us that preventing most of them in .NET is not that hard.
-
Study Shows That 11% of Sites Are Vulnerable to SQL Injection Attacks
In an informal study, Michael Sutton of SPI Dynamics was able to demonstrate that 80 out of 708 tested web sites were susceptible to SQL injection attacks.