Re: [ADVANCED-DOTNET] Salt in PasswordDeriveBytes

2003-01-11 Thread Thomas Tomiczek
Jordan, while agreeing on everything, I consider the term "script kiddie" to be very usefull. It is usefull to decribe a certain type of attack: basically an automated attack by an uneducated user. It can be characterised by using a preprogrammed tool (the script) without any knowledge of what is

Re: [ADVANCED-DOTNET] Performance: castclass vs. isinst?

2003-01-11 Thread Shawn A. Van Ness
I see... yes, the non-intuitive thing about arrays in .NET, that I tend to forget, is that you can't cast an Object[] to a Foo[], even if every single element in the Object[] happens to be an instance of Foo. IOW, the following code throws InvalidCastException: object[] foos = new object[3];

Re: [ADVANCED-DOTNET] Add a menu item from AddIn

2003-01-11 Thread Pierre Greborio
Hi Steve, Just another question. When you select "Add test method" the command invoke Exec method. How do you get from which class you clicked ? Thank you Pierre > -Original Message- > From: Moderated discussion of advanced .NET topics. > [mailto:[EMAIL PROTECTED]] On Behalf Of > Steve H

Re: [ADVANCED-DOTNET] Salt in PasswordDeriveBytes

2003-01-11 Thread Jordan Frank
Unfortunately it would seem that we've entirely lost sight of what we're talking about, and are now at the point where we just reiterate standard sayings related to security. Can we either get back to the exact subject at hand, or just drop this discussion. First of all, we've lost sight of what a

Re: [ADVANCED-DOTNET] Salt in PasswordDeriveBytes

2003-01-11 Thread Thomas Tomiczek
I agree on your comment about the stupidity of most script kiddies. OTOH, if I get my hands onto your database, I am pretty - well - not a script kiddy anymore (OR your admins are utterly stupid - yes, like this. The "SQL Server dba password is empty" thing is on this level, and script kiddies are