Hey guys, Check out the Security Challenge that was launched yesterday by Visual WebGui. Basically, you should uncover the identity of the OWL (a secret agent's code name) by breaking into the Visual WebGui NOC application, which contains the NOC list with that information. In order to claim the $10...

The contest bets $10,000 that no one can hack their Empty Client Platform, Visual WebGui Tel Aviv, Israel —November 3, 2008 — Gizmox , the developer of Visual WebGui open source platform, today announced a contest, sponsored by the Company, which will pay $10,000 to anyone who can hack into its Visual...

The new beta of Silverlight 2 introduces Sockets. The security model enforced by the System.Net.Sockets namespace in Silverlight 2 allows for a connection only back to the site or host of origin. So Silverlight 2 applications will be allowed to connect only to the host from which they were downloaded...

Since the conception of secure pages on the internet, there has been the <pause><chimes> "Login Page" </chimes>. When a user authenticates on this "Login Page" they usually get some sort of a Session set for them, and they're forwarded to a new page. When the authentication times out...

David Barkol writes on his blog about ASP.NET AJAX Role Application Service with Visual Studio 2008 (Orcas). Well, it is a new service that is working similar to the profile and authentication service. As it is very easy to call it from the client-side JavaScript code you should be a little bit more...

In my current project I'm using a own User object that I store in the HttpContext.Session to have personalized data available without connecting on each AJAX method / page refresh to the database. If the session will end because of timeouts, Web server resets/crash or application pool recycle this data...

[I will be available for Microsoft Silverlight discussions at the webinale 07 conference in Ludwigsburg/Stuttgart to talk and discuss about the latest version of Silverlight presented at the Mix07 in Las Vegas. Of course, you can talk with me about Ajax.NET Professional, too.] Die Konferenz für das Next...

Some developers mentioned that it would be nice if Ajax.NET Professional could be more JSON compliant to use with some JavaScript frameworks that are not using the eval statement. And, if you have a look at json.org JSON message always have to be an object or array, not a string or boolean directly....

There are a couple of web sites reporting about security issues that hackers can use to invoke AJAX methods or use the JSON output to get data from other web applications. Specificallly, these attacks use HTTP GET requests invoked via an HTML <script src=""> include element to circumvent...

I had a watch today on the webcast How Hackers Reverse Engineer and Exploit an Ajax Application . There wasn't any new security issue as we already should know as AJAX or web application developers. Samples did show how to hack the AutoComplete.asmx web service (using ASP.NET AJAX ) which was used...