ScottGu's Blog

Over the last year we've found and fixed a few ASP.NET 2.0 compilation bugs that people have reported running into. 

SSL enables browsers to communicate with a web-server over a secure channel that prevents eavesdropping, tampering and message forgery.  You should always use SSL for login pages where users are entering usernames/passwords, as well as for all other sensitive pages on sites (for example: account pages that show financial or personal information). 

Recently some reports have been issued by security researchers describing ways hackers can use the JSON wire format used by most popular AJAX frameworks to try and exploit cross domain scripts within browsers.  Specifically, these attacks use HTTP GET requests invoked via an HTML <script src=""> include element to circumvent the "same origin policy" enforced by browsers (which limits JavaScript objects like XmlHttpRequest to only calling URLs on the same domain that the page was loaded from), and then look for ways to exploit the JSON payload content.

Last December Microsoft announced the new Expression Studio products.  These products enable designers to build awesome user experiences, and are designed to help facilitate great designer/developer workflow collaboration on projects.  

IIS 7.0 is one of the products that my team is shipping later this year that I'm most excited about.  It is the most significant release of our web-server that we've done since IIS 1.0, and introduces a huge number of improvements for both administrators and developers.

Earlier this week I presented three breakout sessions at the ASP.NET Connections conference in Orlando.  Below are the slides / demos for each of the talks I gave:

I'm in Orlando the next few days presenting at the spring ASP.NET Connections / DevConnections conference.  There are about ~1500 people attending this week's conference, which is a great turnout for the spring show (the fall show is in Las Vegas each year in November, and had almost 5,000 people last year).