EASY Vs DIFFICULT

Easy is to get a place is someone's address book.

Difficult is to get a place in someone's heart.

Easy is to judge the mistakes of others

Difficult is to recognize our own mistakes

Easy is to talk without thinking

Difficult is to refrain the tongue

Easy is to hurt someone who loves us.

Difficult is to heal the wound...

Easy is to forgive others

Difficult is to ask for forgiveness

Easy is to set rules.

Difficult is to follow them...

Easy is to dream every night.

Difficult is to fight for a dream...

Easy is to show victory.

Difficult is to assume defeat with dignity...

Easy is to admire a full moon.

Difficult to see the other side...

Easy is to stumble with a stone.

Difficult is to get up...

Easy is to enjoy life every day.

Difficult to give its real value...

Easy is to promise something to someone.

Difficult is to fulfill that promise...

Easy is to say we love.

Difficult is to show it every day...

Easy is to criticize others.

Difficult is to improve oneself...

Easy is to make mistakes.

Difficult is to learn from them...

Easy is to weep for a lost love.

Difficult is to take care of it so not to lose it.

Easy is to think about improving.

Difficult is to stop thinking it and put it into action...

Easy is to think bad of others

Difficult is to give them the benefit of the doubt...

Easy is to receive

Difficult is to give

Easy to read this

Difficult to follow

Easy is keep the friendship with words

Difficult is to keep it with meanings.

Would be old one but just a refreshing

Contents

What ASP.NET Developers Should Always Do
Where the Threats Come From
ViewStateUserKey
Cookies and Authentication
Session Hijacking
EnableViewStateMac
ValidateRequest
Database Perspective
Hidden Fields
E-mails and Spam
Summary
Related Resources

What ASP.NET Developers Should Always Do

If you're reading this article, you probably don't need to be lectured about the growing importance of security in Web applications. You're likely looking for some practical advice on how to implement security in ASP.NET applications. The bad news is that no development platform—including ASP.NET—can guarantee you'll be writing 100-percent secure code once you adopt it—who tells that, just lies. The good news, as far as ASP.NET is concerned, is that ASP.NET, especially version 1.1 and the coming version 2.0, integrates a number of built-in defensive barriers, ready to use.

The application of all these features alone is not sufficient to protect a Web application against all possible and foreseeable attacks. However, combined with other defensive techniques and security strategies, the built-in ASP.NET features form a powerful toolkit to help ensure that applications operate in a secure environment.

Web security is the sum of various factors and the result of a strategy that goes well beyond the boundaries of the individual application to involve database administration, network configuration, and also social engineering and phishing.

The goal of this article is to illustrate what ASP.NET developers should always do in order to keep the security bar reasonably high. That's what security is mostly about—keep the guard up, never feel entirely secure, and make it harder and harder for the bad guys to hack.

Let's see what ASP.NET has to offer to simplify the job.

Where the Threats Come From

In Table 1, I've summarized the most common types of Web attacks and flaws in the application that can make them succeed.

More at ....

Take Advantage of ASP.NET Built-in Features to Fend Off Web Attacks

http://msdn2.microsoft.com/en-us/library/ms972969.aspx

"ENGINEERS AND HR OFFICERS"

3 Real Life Stories...

 
1.     The First …

Eleven people were dangling below a helicopter on a rope.  There were ten HR people and one engineer.

Since the rope was not strong enough to hold all the eleven, they decided that one of them had to let go to save all the others.
They could not decide who should be the volunteer.  Finally the engineer said he would let go of the rope since engineers are used to do everything for the company.  They forsake their family, don't claim all of their expenses and do a lot of overtime without getting anything in return.
When he finished his moving speech all the HR people began to clap…
 
 Moral:
 
Never underestimate the powers of the engineer.
 

2.     The Second …

 
A group of engineers and a group of HR people take a train to a conference.  Each HR person holds a ticket.  But the entire group of engineers has bought only one ticket for a single passenger.  The HR people are just shaking their heads and are secretly pleased that the arrogant engineers will finally get what they deserve.
Suddenly one of the engineers calls out: "The conductor is coming!".  At once, all the engineers jump up and squeeze into one of the toilets.  The conductor checks the tickets of the HR people.  When he notices that the toilet is occupied he knocks on the door and says: "Ticket, please!"  One of the engineers slides the single ticket under the doors and the conductor continues merrily on his round.
For the return trip the HR people decide to use the same trick.  They buy only one ticket for the entire group but they are baffled as they realize that the engineers didn't buy any tickets at all.   After a while one of the engineers announces again: "The conductor is coming!"  Immediately all the HR people race to a toilet and lock themselves in.
All the engineers leisurely walk to the other toilet.  Before the last engineer enters the toilet, he knocks on the toilet occupied by the HR people and says:  "Ticket, please!"
 
Moral:
 
HR people like to use the methods of the engineers, but they don't really understand them.
 

3.     The Third …

 
Once upon a time three HR people were walking through the woods and suddenly they were standing in front of a huge, wild river.  But they desperately had to get to the other side.
 
 
 But how, with such a raging torrent? 
 
The first HR guy knelt down and prayed to the Lord:  "Lord, please give me the strength to cross this river!"
 
*pppppfffffffuuuuff ffffff*
 
The Lord gave him long arms and strong legs.  Now he could swim across the river.  It took him about two hours and he almost drowned several times.
 
BUT… he was successful!
 
The second HR guy, who observed this, prayed to the Lord and said:  "Lord, please give me the strength AND the necessary tools to cross this river!"
 
*pppppfffffffuuuuff ffffff*
 
The Lord gave him a tub and he managed to cross the river despite the fact that the tub almost capsized a couple of times.
 
BUT… he was successful!
 
The third HR man who observed all this kneeled down and prayed:  "Lord, please give me the strength, the means and the intelligence to cross this river!"
 
*pppppfffffffuuuuff ffffff*
 
The Lord converted the HR man into an engineer.  He took a quick glance on the map, walked a few meters upstream and crossed the bridge.
 
Moral:

You have to be an engineer to think intelligent, Otherwise…
 
GOD HELPS YOU!

VISA TO PAKISTAN

The Scene : Two Top American Executives at IBM Offices in United

States

Year: 2030

Alex: Hi John. You didn't come to work yesterday.

John: Yeah. I was at the Pakistani Embassy trying to get my visa.

Alex: Oh, really? What happened? I've heard that these days they

have become very strict.

John: Yeah, but I managed to get it.

Alex: How long did it take to get it stamped?

John: Man, it was a long queue. Bill Gates was waiting in front of

me and they really gave him a hard time. The poor guy even brought

the property papers for his house in Seattle to show them that he

will return to USA. I went there at 4:00 a.m. to get in the queue and

there were tons of people ahead of me.

Alex: Really? In Pakistan, at the US Embassy it only takes an hour

to get a visa for USA.

John: Yeah! But that's because no one in Pakistan would want to come

to USA, except Americans who have taken Pakistani nationality and

want to bring their kids here.

Alex: So, when are you leaving?

John: As soon as I get my tickets from the company in Pakistan. I'm

so excited. I will be getting a chance to finally fly with the

world's fastest growing airline, Pakistan International Airlines

(PIA). Sort of dream come true, you know.

Alex: How long are you planning to stay in Pakistan?

John: What do you mean "how long?" I will try and settle in

Pakistan. My company has promised me that they will process my Green

Book as soon as possible.

Alex: Really? Man, you're lucky. It's very difficult to get the

Green Book in Pakistan. Last year my cousin and his family went there

on a tourist visa and they're not coming back now.

John: Yeah. That's why I'm planning on marrying a Pakistani girl

there and then sponsoring my parents and my brother and sister from

New York to Pakistan.

Alex: But I hear you can find lots of good American girls in Karachi

and Lahore.

John: Yeah, but I prefer Pakistani girls. They are so much more

superior to our girls.

Alex: What city are you going to?

John: Karachi. The company has a downtown office. Yeah, the salary

is good but the cost of living is quite high because of all the

people flocking to this high-tech mecca.

Alex: I hear the exchange rate is now $100 to a Rupee! That's just

too much. What about Rawalpindi and Islamabad? What are they like?

John: No idea. But they're cheaper than Karachi, which is the

world's headquarter for information technology now.

Alex: I hear the quality of life in Pakistan is incredible.

John: Yeah, man. You can buy a BMW for Rs.30,000, and a Mercedes for

less than Rs.45,000. But my dream is to purchase a Suzuki Turbo FX-

800 which costs roughly Rs.90,000. But what a sweet design, great

curves, and it purrs to the touch.

Alex: By the way, which company are you gonna work for?

John: Haji Jalal Puttarjee & Bros. Technologies, a pure Pakistani

conglomerate specialising in embedded software.

Alex: Man, you're so lucky to work for a pure Pakistani company.

They are really intelligent and unlike any American body shops that

have opened their fly-by-night outfits in Pakistan. The Pakistani

companies pay you even when you're on the bench. My friend, Paul

Allen, used his bench time to visit the Makran Coast, the most

gorgeous resort in Pakistan, I hear.

John: Yeah, man, you're right. I hope the US learns something from

them and follow in their footsteps. It seems all we do is borrow more

and more money from the Prime Commercial Bank.

Alex: How are you going to cope with their language?

John: I've been learning Urdu since my school days. I always dreamed

that one day I'll head for Pakistan ever since my uncle bought me

that T-Shirt from Islamia College. At the Consulate they tested my

proficiency in Urdu and were quite impressed by my score in U-FEL.

Alex: Boy! You're so damn lucky.

John: Yeah. I'll be travelling in the world's fastest train, Tezgam,

I'll be visiting the world's largest theme park in Changa Manga, and

I'll be visiting the famous Lollywood where I might meet the sons and

daughters of movie legends like Nadeem, Sultan Rahi, Anjuman, Reema

and the late babe, Barbra Sharif.

Alex: You know, the Pakistani President is scheduled to visit USA

next year and I hear that he may increase the number of employment

visas.

John: That's very true. Last month, their Labour Minister, Naswar

Khan Pakhtoon, visited the White House and donated Rs.20,000 for the

re-development of the World Trade Centre at Silicon Valley, and has

promised more if we follow the models of the fast developing high-

tech cities, Quetta and Peshawar. Bill Gates was lucky to have a

chance to meet him. Very lucky person.

Alex: Will you be calling on Dave? I hear that he has made it big

there and has a beautiful house on the Lyari River in Karachi.

John: Yeah, I'll be meeting him.

Alex: Anyway, nice chatting to you, John. Good luck, you lucky dog.

John: Yeah, and the same to you, Alex. By the way, don't ever go to

the Pakistani Consulate in the Pakistani local dress because they

will think you're too Pakistanised and may doubt that you will ever

come back, and your application will be rejected. And yes, don't

forget to say to the Visa Officer politely: "Asalam-o-Alaikum. " It

will show them you're a cultured person.