Don’t Accept Gifts From Strangers – Even Through HTML Form File Elements

If you’re developing on the ASP.Net web stack you’ve probably used either the WebForms FileUpload control or the MVC HttpPostedFileBase model binding parameter many times before. On a badly configured website this can create a perfect storm of insecurity potentially exploited by anyone who uploads malicious files. As this very attack can be your website’s undoing let’s take a look at why it’s a problem and what you can do to fix it.

Come See Me, and Many Others at DDD Sydney, 30th June

Next Saturday at 9am sharp, I will be first cab off the rank in the developer skills stream at DDD Sydney presenting my talk “A few things developers should know about the internet (but probably don’t)”. I’d love for you to come along and say hello on the day, so if you haven’t already bought tickets, please do from the link above. Sydney has many conferences throughout the year, but few are as straight talking as DDD, with a good range of subjects on not only the Microsoft stack, but general web and development as well – not only how Microsoft would recommend it, but the very people who’ve been in the trenches with you.

Forget what your Mother told you, IIS and Apache CAN be Friends

Running Apache and IIS on the same web server might seem like sacrilege to some folks, but like a lot of things in life there is a time and a place for everything. I’ve overseen some quite successful deployments that have had the two running side by side on the same machine, and the flexibility that Apache can bring to an application as a value add can be really exciting. For both future keepsake and to share with all of you folk, here is a quick how-to guide so that all you have to do is follow the bouncing ball.

Let Your Nerd Flag Fly – Your Career Will Thank You

No matter what your chosen career path society places constraints on what is an acceptable amount of interest you are allowed to show to a subject before you become *weird*. People working in IT face this more than most. In my life I have known a lot of really smart people,who are obviously in love with what they are doing, not sharing their excitement with others for fear of being thought of as uncool. However crazy this sounds from the outside one thing is true; they are holding themselves back from success.

Building an image and video viewer for Microsoft Surface 2.0 in no time at all

I’ve been lucky enough to have access to a brand new Surface 2.0 (Samsung SUR40) recently, and wanted to try my hand at developing for the platform. As with most things, the easiest way to learn something is to set yourself up with a little project – I’m going to build a very simple Image “Attractor” to start. This will allow you to move, resize and rotate images and videos on the screen of the device. The Surface development community appears to be a little cloak and dagger, with very little information being shared; something hopefully I can positively contribute towards changing by documenting my journey.

Configure Your Next Website’s Signal to Noise Ratio Today – Install a www. Filter

The "www." prefix in a website's address was originally thought up by Tim Berners-Lee (The creator of the interwebs) to help us differentiate between a website’s address and that of a mail server, FTP, or Gopher server (remember those kiddies?).  The world has moved on from gopher servers and the like, but for different reasons has continued using this prefix without much purpose or reason. In the last few years many people have commented on their religious decision either way to support or ditch it. I put it to you: do you www. or not?

Find, Forgive and Forget Your Coding Indiscretions With NDepend

Microsoft developers hear a lot about tools that will make them write faster, more efficient, more refactored, more unit tested code all the time. People don’t often talk of tools that help you to visualise your project’s growing code smell though – among other reasons, everyone’s inner sense of pride may be a behind this, however unless you or your employer has forked out the $11,879 odd dollars for Visual Studio Ultimate Edition you don’t have much to go on without more than the basic reporting on Cylcomatic Complexity, Dependency Depth and Class coupling reports that come in the pro and premium editions. These don’t really help you pin point any of your architectural problems that well – something  where NDepend proves itself to be a diamond in the rough.

Come One, Come All to DDD Sydney – June 30th

I’ve written about local conferences a few times before, but DDD Sydney is one of my favourites. There are few conferences that are so “For Us By Us” as DDD Sydney as it’s organised by Lewis Benge and contributed to by a whole swath of the local developer community from a number of different user groups, so it’s a great place to come down and meet a number of your local devs, learn something new or take part in the discussions – and for $25 it’s one of the cheapest conference tickets around!

Cause for Concern - Piracy on Windows Phone 7

I have been playing with the Windows Phone 7 SDK for a while now, however I have been lucky to still have a day-job while doing my tinkering and therefore haven’t sourced my main income from sales in the WP7 marketplace. There are others who don’t have the same luxury as me and have bet a considerable amount of their time on the platform to date. Whether these developers are aware of it or not they are fighting a silent battle that I want to bring more awareness to –  a problem that every smart phone ecosystem has faced to date: Piracy.

Make Your Own Wi-Fi Hotspot - Testing Development Websites on Mobiles and Tablets

Often you need to test a website on an tablet device such as an iPad using a local development machine’s web server. For whatever reason the available Wi-Fi when developing your site may be on another subnet or network entirely to you development machine (such as in an office environment). Situations like these call for a bit of creative thinking and a different approach, so if this is a problem you face here’s my take on a possible solution.