Browse by Tags

Secret Server 4.1 goes live!
Saturday, March 15, 2008 12:56 PM

The team thinks it should be 5.0 since the new features were pretty huge! :)  The full release notes are here .  The new version includes role based security which allows you to slice and dice the access to various features across your organization.  We also have a new feature that allows you to automatically launch Remote Desktop from a secret... Read More...

by thycotic | with no comments

Filed under: Security, ISV, General Software Development

Bad password requirements
Thursday, January 24, 2008 9:02 AM

This morning I signed up with a major credit card company website.  Much to my surprise I was greeted with this requirement while choosing a password: Your Password should contain 6 to 8 characters . at least one letter and one number (not case sensitive), contain no spaces or special characters (e.g. &, >, *, $, @) and be different from your User... Read More...

by thycotic | 8 comment(s)

Filed under: Software Development, Security, General Software Development

Symmetric Salting - remember that salt goes with more than just hash
Thursday, November 15, 2007 1:26 AM

If you understand hashing and salting then skip the next paragraph. Stored passwords for logins should be hashed and salted.  Hashing is a one way mechanism to produce a practically unique value based on the given input.  This is useful since we can store the hash (and validate the password whenever needed) without storing the actual password. ... Read More...

by thycotic | 1 comment(s)

Filed under: Software Development, Security, General Software Development

Shipping Software ... Secret Server 3.1 Sneak Peek
Sunday, July 29, 2007 11:45 PM

Shipping software is one of the most exciting times for a development team but this new release is easily the most anticipated version of Secret Server to date by our customers. Secret Server 3.1 will feature the two most requested features from customers who visited our booth at TechEd in June 2007: full Active Directory synchronization along with remote password... Read More...

by thycotic | 2 comment(s)

Filed under: TechEd, Software Development, Security, ISV, General Software Development

Kevin Jones is now an ASP.NET MVP!
Tuesday, April 10, 2007 4:21 PM

Our own Kevin Jones has been awarded MVP for ASP.NET by Microsoft. This award recognizes his excellence in technical skills and his contributions to the community in spreading best practices in software development. Kevin has been instrumental in the development of Secret Server since 2.0 and now including Secret Server Online. He has been involved in some fun... Read More...

by thycotic | 1 comment(s)

Filed under: .NET, Security, Blogging, General Software Development

Secret Server 1.1 makes the Daily Grind
Tuesday, March 28, 2006 1:03 PM

Mike Gunderloy, one of our early adopters, has added our Secret Server 1.1 release to the Daily Grind today! This is a huge compliment from a guru in tools, development and the developer community. Thanks Mike! If you don't know about the Daily Grind , read all about it here . Jonathan Cogley is the CEO and founder of thycotic, a .NET consulting company and ISV... Read More...

by thycotic | 3 comment(s)

Filed under: Software Development, Security, ISV

Feeling your users pain (and release notes for Secret Server 1.1)
Monday, March 27, 2006 11:44 AM

It is a wonderful feeling to ship software - it has been a long hard slog to get this round of features complete. Especially while juggling our developers across various projects and client work. This is also a welcome release as we get to use all the new features in our own company Secret Server instance. It is also a relief to finally get rid of those few really... Read More...

by thycotic | 2 comment(s)

Filed under: Software Development, Security, ISV

Secret Server 1.1 is out ... go and get it!
Monday, March 27, 2006 2:31 AM

I haven't blogged in a few weeks but I have a few good reasons. Client projects with tight deadlines, the final push for our second big release of Thycotic Secret Server and also holding back on the irresistable urge to talk about features that aren't released yet (not much of a marketing person, huh?). We have listened to feedback and added several features... Read More...

by thycotic | 1 comment(s)

Filed under: Software Development, Security

Keep the numbers meaningful in Security Reviews
Tuesday, December 13, 2005 12:42 AM

I just came across this post (older) by Robert Hurlbut titled "DREAD is dead" and it reminded me of our experiences with these same ratings today. We are in the middle of a Security Review for a client and have been working through our threat model to assess the risk associated with each item. DREAD is a technique for assessing such risk using the factors: D... Read More...

by thycotic | 1 comment(s)

Filed under: Software Development, Security

More Posts