<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://weblogs.asp.net/utility/FeedStylesheets/atom.xsl" media="screen"?><feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en"><title type="html">Robert Hurlbut&amp;#39;s .NET Blog</title><subtitle type="html">Microsoft MVP for Visual Developer - Security 2005-2007. Thoughts on .NET, Security, Architecture, Agile, and Databases.</subtitle><id>http://weblogs.asp.net/rhurlbut/atom.aspx</id><link rel="alternate" type="text/html" href="http://weblogs.asp.net/rhurlbut/default.aspx" /><link rel="self" type="application/atom+xml" href="http://weblogs.asp.net/rhurlbut/atom.aspx" /><generator uri="http://communityserver.org" version="3.0.20510.895">Community Server</generator><updated>2007-06-20T15:29:00Z</updated><entry><title>MVP 2008 - thanks again!</title><link rel="alternate" type="text/html" href="http://weblogs.asp.net/rhurlbut/archive/2008/01/01/mvp-2008-thanks-again.aspx" /><id>http://weblogs.asp.net/rhurlbut/archive/2008/01/01/mvp-2008-thanks-again.aspx</id><published>2008-01-01T23:48:00Z</published><updated>2008-01-01T23:48:00Z</updated><content type="html">I got notice today, as others did, I have once again been named a Microsoft MVP for 2008 in the area of Visual Developer - Security. Thanks again, Microsoft, and my MVP lead Rafael Munoz, and all those who have been very supportive of my community work this past year (with my speaking at several conferences, speaking at user groups, and leading a user group as well). Happy New Year everyone!...(&lt;a href="http://weblogs.asp.net/rhurlbut/archive/2008/01/01/mvp-2008-thanks-again.aspx"&gt;read more&lt;/a&gt;)&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=5532936" width="1" height="1"&gt;</content><author><name>RHurlbut</name><uri>http://weblogs.asp.net/members/RHurlbut.aspx</uri></author><category term=".NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/.NET/default.aspx" /><category term="Security" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Security/default.aspx" /><category term="Personal" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Personal/default.aspx" /></entry><entry><title>WCF 3.5 will support Usernames over Transport Authentication</title><link rel="alternate" type="text/html" href="http://weblogs.asp.net/rhurlbut/archive/2007/10/31/wcf-3-5-will-support-usernames-over-transport-authentication.aspx" /><id>http://weblogs.asp.net/rhurlbut/archive/2007/10/31/wcf-3-5-will-support-usernames-over-transport-authentication.aspx</id><published>2007-10-31T14:21:00Z</published><updated>2007-10-31T14:21:00Z</updated><content type="html">Like Dominick Baier and Christian Weyer of Thinktecture , I also wondered why I couldn't use a UsernameToken with Transport Security in WCF v.1. I wanted to put together a simple demo for a client and that feature just wasn't there. Dominick mentions in this post it will finally be available in WCF 3.5. Great!...(&lt;a href="http://weblogs.asp.net/rhurlbut/archive/2007/10/31/wcf-3-5-will-support-usernames-over-transport-authentication.aspx"&gt;read more&lt;/a&gt;)&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=4846431" width="1" height="1"&gt;</content><author><name>RHurlbut</name><uri>http://weblogs.asp.net/members/RHurlbut.aspx</uri></author><category term=".NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/.NET/default.aspx" /><category term="Security" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Security/default.aspx" /><category term="Web Services" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Web+Services/default.aspx" /><category term="Architecture/Patterns" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Architecture_2F00_Patterns/default.aspx" /><category term="Service Orientation (SO)" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Service+Orientation+_2800_SO_2900_/default.aspx" /><category term="WCF/Indigo" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/WCF_2F00_Indigo/default.aspx" /></entry><entry><title>Heartland Developers Conference 2007 wrap-up</title><link rel="alternate" type="text/html" href="http://weblogs.asp.net/rhurlbut/archive/2007/10/22/heartland-developers-conference-2007-wrap-up.aspx" /><id>http://weblogs.asp.net/rhurlbut/archive/2007/10/22/heartland-developers-conference-2007-wrap-up.aspx</id><published>2007-10-22T10:20:00Z</published><updated>2007-10-22T10:20:00Z</updated><content type="html">Once again, for the 4th year in a row, I enjoyed the one conference I make sure to book well in advance. I haven't traveled to conferences as much this year, instead focused on client-related work. This was one conference, however, I was really looking forward to attending and presenting. I am originally from the mid-west (Oklahoma) and have lived in Massachusetts for 12 years now but I always feel more at home when I go to HDC than anywhere I have visited. The layout of the area, the local convenient...(&lt;a href="http://weblogs.asp.net/rhurlbut/archive/2007/10/22/heartland-developers-conference-2007-wrap-up.aspx"&gt;read more&lt;/a&gt;)&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=4690828" width="1" height="1"&gt;</content><author><name>RHurlbut</name><uri>http://weblogs.asp.net/members/RHurlbut.aspx</uri></author><category term=".NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/.NET/default.aspx" /><category term="Security" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Security/default.aspx" /><category term="Database Development" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Database+Development/default.aspx" /><category term="Web Services" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Web+Services/default.aspx" /><category term="Architecture/Patterns" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Architecture_2F00_Patterns/default.aspx" /><category term="Personal" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Personal/default.aspx" /><category term="Service Orientation (SO)" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Service+Orientation+_2800_SO_2900_/default.aspx" /><category term="Speaking" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Speaking/default.aspx" /><category term="WCF/Indigo" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/WCF_2F00_Indigo/default.aspx" /></entry><entry><title>Speaking at the Heartland Developers Conference 2007 this week in Omaha, NE</title><link rel="alternate" type="text/html" href="http://weblogs.asp.net/rhurlbut/archive/2007/10/16/speaking-at-the-heartland-developers-conference-2007-this-week-in-omaha-ne.aspx" /><id>http://weblogs.asp.net/rhurlbut/archive/2007/10/16/speaking-at-the-heartland-developers-conference-2007-this-week-in-omaha-ne.aspx</id><published>2007-10-16T10:47:00Z</published><updated>2007-10-16T10:47:00Z</updated><content type="html">I will be speakinzg at the Heartland Developers Conference 2007 , which takes place October 17-19 in Omaha, NE. This will be my 4th year speaking at the conference (I was there at the beginning) and it has continued to get bigger and better each year. Both Joe and Phil have done an excellent job in putting this together. My topics are: Service-Oriented Design Patterns Building Queuing Database Applications with Service Broker For the Service Broker talk, I have updated my material to include the...(&lt;a href="http://weblogs.asp.net/rhurlbut/archive/2007/10/16/speaking-at-the-heartland-developers-conference-2007-this-week-in-omaha-ne.aspx"&gt;read more&lt;/a&gt;)&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=4590123" width="1" height="1"&gt;</content><author><name>RHurlbut</name><uri>http://weblogs.asp.net/members/RHurlbut.aspx</uri></author><category term=".NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/.NET/default.aspx" /><category term="Database Development" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Database+Development/default.aspx" /><category term="Web Services" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Web+Services/default.aspx" /><category term="Architecture/Patterns" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Architecture_2F00_Patterns/default.aspx" /><category term="Service Orientation (SO)" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Service+Orientation+_2800_SO_2900_/default.aspx" /><category term="Speaking" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Speaking/default.aspx" /><category term="WCF/Indigo" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/WCF_2F00_Indigo/default.aspx" /></entry><entry><title>Speaking at New England Code Camp 8 this weekend</title><link rel="alternate" type="text/html" href="http://weblogs.asp.net/rhurlbut/archive/2007/09/24/speaking-at-new-england-code-camp-8-this-weekend.aspx" /><id>http://weblogs.asp.net/rhurlbut/archive/2007/09/24/speaking-at-new-england-code-camp-8-this-weekend.aspx</id><published>2007-09-24T21:03:00Z</published><updated>2007-09-24T21:03:00Z</updated><content type="html">I will be speaking at the New England Code Camp 8: Rise of the Silverlight Surfer at the Microsoft offices in Waltham, MA on September 29-30. I will be speaking on the following security topics: Penetration Testing of Web Applications Secure Code Reviews: What are the ingredients? There is already a great lineup of talks here . Also, Chris Bowen mentioned there will be a Saturday Evening Geek Event at 7:00 pm at the Weston Hotel in Waltham (a tradition that started way back in Code Camp II). This...(&lt;a href="http://weblogs.asp.net/rhurlbut/archive/2007/09/24/speaking-at-new-england-code-camp-8-this-weekend.aspx"&gt;read more&lt;/a&gt;)&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=4119146" width="1" height="1"&gt;</content><author><name>RHurlbut</name><uri>http://weblogs.asp.net/members/RHurlbut.aspx</uri></author><category term="ASP.NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/ASP.NET/default.aspx" /><category term=".NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/.NET/default.aspx" /><category term="Security" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Security/default.aspx" /><category term="Architecture/Patterns" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Architecture_2F00_Patterns/default.aspx" /><category term="Speaking" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Speaking/default.aspx" /></entry><entry><title>Speaking on Web Services Security at Boston .NET User Group on 9/12/2007</title><link rel="alternate" type="text/html" href="http://weblogs.asp.net/rhurlbut/archive/2007/09/09/speaking-on-web-services-security-at-boston-net-user-group-on-9-12-2007.aspx" /><id>http://weblogs.asp.net/rhurlbut/archive/2007/09/09/speaking-on-web-services-security-at-boston-net-user-group-on-9-12-2007.aspx</id><published>2007-09-09T20:14:00Z</published><updated>2007-09-09T20:14:00Z</updated><content type="html">I will be speaking on the topic: "Web Services Security: Where are we now?" this coming Wednesday, September 12, 2007, at the Boston .NET Users Group meeting at Microsoft, Waltham, MA. There has been some interesting talk lately, including this years BlackHat USA 2007 in July on the current state of web services security. I will be covering the common web services attacks developers should know about as well as current information on WS-* security, REST, and other mitigation measures. If you are...(&lt;a href="http://weblogs.asp.net/rhurlbut/archive/2007/09/09/speaking-on-web-services-security-at-boston-net-user-group-on-9-12-2007.aspx"&gt;read more&lt;/a&gt;)&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=3809499" width="1" height="1"&gt;</content><author><name>RHurlbut</name><uri>http://weblogs.asp.net/members/RHurlbut.aspx</uri></author><category term=".NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/.NET/default.aspx" /><category term="Security" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Security/default.aspx" /><category term="Web Services" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Web+Services/default.aspx" /><category term="Architecture/Patterns" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Architecture_2F00_Patterns/default.aspx" /><category term="Service Orientation (SO)" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Service+Orientation+_2800_SO_2900_/default.aspx" /><category term="Speaking" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Speaking/default.aspx" /><category term="WCF/Indigo" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/WCF_2F00_Indigo/default.aspx" /></entry><entry><title>Take a look at LiveId + CardSpace</title><link rel="alternate" type="text/html" href="http://weblogs.asp.net/rhurlbut/archive/2007/08/29/take-a-look-at-liveid-cardspace.aspx" /><id>http://weblogs.asp.net/rhurlbut/archive/2007/08/29/take-a-look-at-liveid-cardspace.aspx</id><published>2007-08-29T17:47:00Z</published><updated>2007-08-29T17:47:00Z</updated><content type="html">I was in a user group meeting recently with Patrick Hynds speaking about Identity and presenting demos on Windows CardSpace . Someone in the audience mentioned it would be great to see Microsoft start using this for some of their websites (I agree!). Well, here it is: LiveID + CardSpace . Also, take a look at the latest samples for WCF, WF, and CardSpace for VS 2008 Beta 2....(&lt;a href="http://weblogs.asp.net/rhurlbut/archive/2007/08/29/take-a-look-at-liveid-cardspace.aspx"&gt;read more&lt;/a&gt;)&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=3657553" width="1" height="1"&gt;</content><author><name>RHurlbut</name><uri>http://weblogs.asp.net/members/RHurlbut.aspx</uri></author><category term="ASP.NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/ASP.NET/default.aspx" /><category term=".NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/.NET/default.aspx" /><category term="Security" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Security/default.aspx" /><category term="Architecture/Patterns" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Architecture_2F00_Patterns/default.aspx" /><category term="WCF/Indigo" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/WCF_2F00_Indigo/default.aspx" /></entry><entry><title>Another TDD and DDD success story</title><link rel="alternate" type="text/html" href="http://weblogs.asp.net/rhurlbut/archive/2007/07/16/another-tdd-and-ddd-success-story.aspx" /><id>http://weblogs.asp.net/rhurlbut/archive/2007/07/16/another-tdd-and-ddd-success-story.aspx</id><published>2007-07-16T19:24:00Z</published><updated>2007-07-16T19:24:00Z</updated><content type="html">I have been mostly silent for the past year as I have been busy working with a client in Western Massachusetts on a very interesting ASP.NET 2.0 project (using C# 2.0). I had the pleasure of working with one of the best teams I have seen in my career -- all were bright, willing to learn, and up to the daunting task of converting skills from pre .NET right into .NET 2.0 and object-oriented programming. I taught a course to the company earlier last year and they asked me to come and help with the architecture...(&lt;a href="http://weblogs.asp.net/rhurlbut/archive/2007/07/16/another-tdd-and-ddd-success-story.aspx"&gt;read more&lt;/a&gt;)&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=3175087" width="1" height="1"&gt;</content><author><name>RHurlbut</name><uri>http://weblogs.asp.net/members/RHurlbut.aspx</uri></author><category term="ASP.NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/ASP.NET/default.aspx" /><category term=".NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/.NET/default.aspx" /><category term="Security" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Security/default.aspx" /><category term="Extreme Programming" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Extreme+Programming/default.aspx" /><category term="Web Services" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Web+Services/default.aspx" /><category term="Architecture/Patterns" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Architecture_2F00_Patterns/default.aspx" /><category term="WCF/Indigo" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/WCF_2F00_Indigo/default.aspx" /><category term="System.Transactions" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/System.Transactions/default.aspx" /></entry><entry><title>39</title><link rel="alternate" type="text/html" href="http://weblogs.asp.net/rhurlbut/archive/2007/07/10/3089661.aspx" /><id>http://weblogs.asp.net/rhurlbut/archive/2007/07/10/3089661.aspx</id><published>2007-07-10T12:03:00Z</published><updated>2007-07-10T12:03:00Z</updated><content type="html">An old favorite of mine, Jack Benny, used to be 39 forever. Today, I turned that age. Time flies ......(&lt;a href="http://weblogs.asp.net/rhurlbut/archive/2007/07/10/3089661.aspx"&gt;read more&lt;/a&gt;)&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=3089661" width="1" height="1"&gt;</content><author><name>RHurlbut</name><uri>http://weblogs.asp.net/members/RHurlbut.aspx</uri></author><category term=".NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/.NET/default.aspx" /><category term="Personal" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Personal/default.aspx" /></entry><entry><title>Slides on Windows CardSpace talk and further resources</title><link rel="alternate" type="text/html" href="http://weblogs.asp.net/rhurlbut/archive/2007/06/20/slides-on-windows-cardspace-talk-and-further-resources.aspx" /><id>http://weblogs.asp.net/rhurlbut/archive/2007/06/20/slides-on-windows-cardspace-talk-and-further-resources.aspx</id><published>2007-06-20T19:29:00Z</published><updated>2007-06-20T19:29:00Z</updated><content type="html">I have posted my slides on my site for last week's talk on Introduction to Windows CardSpaces at the Southern CT .NET Users Group meeting on June 12. It was a good meeting, but there were a lot of questions about how well will this technology be adopted. Unfortunately, at the moment, it is still a sparse number of sites that are using the technology (see the sites http://sandbox.netfx3.com/ and http://www.identityblog.com for a couple of examples that are using CardSpace). One hinderence may be lack...(&lt;a href="http://weblogs.asp.net/rhurlbut/archive/2007/06/20/slides-on-windows-cardspace-talk-and-further-resources.aspx"&gt;read more&lt;/a&gt;)&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=2876063" width="1" height="1"&gt;</content><author><name>RHurlbut</name><uri>http://weblogs.asp.net/members/RHurlbut.aspx</uri></author><category term="ASP.NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/ASP.NET/default.aspx" /><category term=".NET" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/.NET/default.aspx" /><category term="Security" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Security/default.aspx" /><category term="Architecture/Patterns" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Architecture_2F00_Patterns/default.aspx" /><category term="Personal" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Personal/default.aspx" /><category term="Speaking" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/Speaking/default.aspx" /><category term="WCF/Indigo" scheme="http://weblogs.asp.net/rhurlbut/archive/tags/WCF_2F00_Indigo/default.aspx" /></entry></feed>