Michał CierniakRotor, Semiworks and other interesting topicsSecure CRT- January 3, 2005 One of the cool new things we are doing in the security push is the conversion of all uses of potentially unsafe CRT (C Runtime) functions to their new, safe counterparts. When we think of unsafe CRT functions, we usually think of string manipulation functions and these functions are probably indeed responsible for most of the security bugs (For a few examples of what can go wrong with the traditional string manipulation functions, read this post) but there are other improvements in the...http://blogs.msdn.com/michaljc/archive/2005/01/02/345558.aspx CLR Security Push- January 3, 2005 I have been recently coordinating much of the efforts on the CLR dev team related to the security push. The security push is a period of a few weeks for all groups involved in Whidbey to let us focus on making Whidbey more secure. There was recently a very good post by Mikhail Arkhipov outlining many of the efforts we are focusing on. There are many people in the CLR team who are very experienced in security and they have all been working on guiding the effort but the involvement...http://blogs.msdn.com/michaljc/archive/2005/01/02/345533.aspx |