Browse by Tags

Marshaling SecureString Passwords to String

You should always use a System.Security.SecureString when creating .NET APIs that handle passwords. Unfortunately many of the .NET Framework APIs do not yet use System.Security.SecureString. This will change in the future, but for now, how do you handle the marshaling of a System.Security.SecureString...

Posted to Mark Nicholson (Weblog) by markn on 10-04-2008
Simple Console Password Capture Utility

For command line utilities, that require capturing a password, you may find this C# utility class to capture a password useful. Features: 1. Allows you to specify a prompt, e.g. "Enter password: " 2. Caters for masking or unmasking the displayed password, e.g. abc123 or ****** 3. Allows you...

Posted to Mark Nicholson (Weblog) by markn on 10-03-2008
SQL 2005/2008 OPEN { MASTER | SYMMETRIC } KEY Password Parameterization

Be careful when using passwords with OPEN MASTER KEY and OPEN SYMMETRIC KEY on SQL Server 2005 & 2008. The password is vulnerable to SQL injection attacks, unless you escape all single-quote characters ('), with two single quote characters. This is because the DDL syntax for the OPEN MASTER KEY...

Posted to Mark Nicholson (Weblog) by markn on 10-03-2008

Page 1 of 1 (3 items)

dotnet.org.za