Geeks With Blogs
Josh Tenenbaum Errant ramblings February 2008 Entries
Any order?
Friday we deployed a major milestone, albeit 3 years late. We finally deployed our main application in .Net 2.0. Years and years of requests to allow us to do so and another project requesting it did the trick. So, after 427 builds, we sent the deployment package to the group that manages the servers. The deployment is split into 3 archives: 1) the web site, 2) the sql patches, and 3) the stored procedures. The dba ran the patches and was running the stored procedures when he called me at 8:30 to ......

Posted On Monday, February 25, 2008 9:24 PM

Blind SQL Injection ?
My team recently upgraded our web application to Asp.Net 2.0 from Asp.Net 1.1. Yesterday was the first deployment since the upgrade. Overall, the conversion went well. But an odd thing happened during the mandated Vulnerability Assessment that is required before the application go live. I received an email that said "A high risk 'Blind SQL Injection' is showing up on the http://<domain> /<virtdir>/common/err... URL on the aspxerrorpath object." I looked at the page, but it literally ......

Posted On Wednesday, February 20, 2008 9:22 PM

CruiseControl.Net Subversion Error
I use Subversion ( via Apache ( I use CruiseControl.Net ( as our build server. I setup Subversion in a non-standard manner. And, it could account for the problem. All the users who access Subversion, do so via a domain login. That is except for the build user. I setup the build user as a local account on both the Subversion server and the Build server with the same password. I then setup a second location alias in Apache to also use SSPI authentication, but I set the ......

Posted On Wednesday, February 20, 2008 9:12 PM

Copyright © Josh Tenenbaum | Powered by: