Glenn Leifheit
A Secure Software Blog

New OWASP Top 10 Release Candidate Released for 2010!

OWASP Released a new version of their OWASP Top 10 in a Release Candidate has been released, just in time for 2010.  A copy of this can be found here.  

For additional information visit my other blog at:  www.glennleifheit.com

Twin Cities Tech Masters at MDC

The Twin Cities Tech Masters will be meeting during the lunch break at the MSDN Developer Conference tomorrow.  If your attending come by and visit us at our booth to find out more details.  Visitors and new members are always welcomed.  I happen to be speaking tomorrow, the title of my speech is "Security Training, do I have too?"  I hope to see you there!

Twin Cities Tech Masters

The twin cities Tech Masters meets tomorrow January 6th at 7:30 am and is located at New Horizons in Edina, MN.  Guests are welcomed and encouraged to attend.  Twin Cities Tech Masters is a Technically based Toastmasters organization.

OWASP Conference

I recently attended the OWASP (Open Web Application Security Project) conference at the University of Minnesota's St Paul Campus.  This was my first introduction to OWASP, and it's an organization that anyone involved in software should be aware of and understand their goals.  They have many projects in under development to increase the use of security throughout the development lifecycle.  They also presented on the OWASP Enterprise Security API (ESAPI), and I found this to be an interesting project.  This API provides great underpinnings for security for any application, there are Java, .NET and PHP versions currently in the works.  I encourage you to visit OWASP and the ESAPI project.

Great Car mount for Phones/MP3 players

So I decided to mount my Zune 8GB mp3 player in my car, since I have 74 miles of commute per day.   I found that being that I had chosen the 8GB Zune, there were no real holders I could find that fit that player.  After some research I found Proclip, they had two great features, 1, it's custom to your car, meaning no suction cups, and they are also custom to your device.  It's a 2 piece system as shown here:

image

 

The mount I chose the center mount one of two made for the Mitsubishi Lancer:

  image image

 

I then Chose the device holder for the Zune 8GB, of which they also have 2 options:

 

image

The most impressive part of these mounts is that they are custom to almost all devices and makes and models of of cars.  They also don't require many screws into your car.  It fits between pieces of your dash. 

If you want a professional looking mount that is easy to install this is your best option.  Give them a try.

PowerShell Remote Authentication

I've been looking for an elegant solution to allowing you to remotely connect to boxes in other domains without a trust in PowerShell.

I've Tried:

  • Using the Control Panel User/Password repository to store my credentials on a server by server basis.  (this takes a lot of setup and is out of site out of mind).
  • Mapping a null drive with alternate credentails in script.

Was anyone seen any other ways of doing this that may be more elegant?  Anything that is a "PowerShell native: solution?

I'm Back Honest

OK, So I took over a year break from blogging......I am back....and am looking for your input on what i'll be writing...  I hope to be covering BizTalk, Powershell, IIS, SOA Architecture, and maybe even other things as they come up....Posts coming soon.

Robert Randolph and the Family Band --- Colorblind

click for more info

I first learned of Robert Randolph, the Pedal Steel Guitar talent, while listening to the CMJ New Music Monthly compilation, I've been hooked ever since.  Today marks the release of there second studio album, and I'm pumped.  The mix of Funk with twists of Clapton, Hendrix, and pure raw guitar talent make this a must have.  you can listen to cuts at www.robertrandolph.net and www.myspace.com\robertrandolph.  All of the member's of his Family band deserve recognition themselves, all felxable talented musicions.  And it's a live show to die for, more energy then you will find in 99.9% of all bands.  I encourage you to check them out!!  also check out some of there live tracks on www.archive.org.

 

 

New Blog

Welcome to my new blog, I will be posting information on items such as VB Scipting, .NET Development, Windows 2003 Server Troubleshooting, IIS Troubleshooting, and BizTalk, as well as what ever else I feel like.