Machine Key Section validation and decryption key rotation on build 16 October 2019 Daniel-Fisher-(lennybacon) ASP.NET, Build, C#, Security, ALM Rotating keys, making their lifetime shorter, decreases the attack window size and that is a good thing.For instance when using ASP.NET forms authentication the cookie can be encrypted when the `protection`-attribute is set to `all` – see here. I thought it would be handy to automate the rotation o... [More]
Updating Visual Studio Installer unattended, last episode, hopefully 11 October 2019 Daniel-Fisher-(lennybacon) ALM, Build, Productivity, Tools, VisualStudio, DevOps, Script, PowerShell I have written about keeping build agents up to date in the past and had issues with the vs_installer updating itself. Now again the latest updates were not deployed.After playing around with procmon and friend I found a way to remove its state, so that the installer thinks is starts from the beginn... [More]
Generating AES256 Keys with PowerShell 20 August 2019 Daniel-Fisher-(lennybacon) Tools, Security, Script, PowerShell PowerShell is a daily used utility in my tool belt. I like the accessibility, due to its command line interface, as well as it's power, due to access to the underlying .NET Framework. Today I needed a AES 256 key with some entropy and therefore made use of the RandomNumberGenerator class. ... [More]
Create a link to a UWP app to run as administrator 28 June 2019 Daniel-Fisher-(lennybacon) Productivity, Windows, Tools, Security, PowerShell, Infrastructure I’m a console enthusiast. I used to work with cmder over the last years. In general I was pretty happy. But the announcement of the Windows Terminal really caught my attention.One thing that annoyed me is the disabled checkbox, when creating a link, that does not allow to have it automatically promp... [More]
Update all Visual Studio instances equal or above 2017 unattended 11 April 2019 Daniel-Fisher-(lennybacon) ALM, Build, Productivity, PowerShell, Tools, VisualStudio, Script, DevOps I have created a new script to keep Visual Studio ut to date in an unattended manor - For instance by creating a schedulled task. This are the core features: Updates all editions and versions equal or above to Visual Studio 2017. Writes event log entries for each run, failed and succeeded steps... [More]
JavaScript, Date and ISO 8601 part4 20 April 2018 Daniel-Fisher-(lennybacon) JavaScript, Project, Web Her: How does your perfect date look like?Me: Well the only format I can accept is `yyyy-MM-ddTHH:mm [More]
Totally automated Team Foundation 2017 build agent setup 28 March 2018 Daniel-Fisher-(lennybacon) ALM, Project, Tools, VisualStudio, Build First of all set the default TLS Version for .net to 1.2: With Chocolatey a lot of things are easy to set up:Visual Studio 2017 CommunityWindows Installer XML ToolsetVisual Studio CodeGitVersionNodeJsPython2Remote Server Administration ToolsNow let's modify visual studio and add some components, ... [More]
Remote Debugging Chrome on Android with Windows 17 February 2018 Daniel-Fisher-(lennybacon) Web, Productivity, Android I’m an IPhone user. I like the device. I’m not a fanboy. I’m curious. So I got myself an HUAWEI P smart with Android Oreo (Version 8).1. Lets set up developer mode by following the android studio guide…Open the Settings appSelect System (only on Android 8.0 or higher) Scroll to the bottom and select... [More]
W3C Server Timing Header and API 17 February 2018 Daniel-Fisher-(lennybacon) JavaScript, Productivity, Tools, Web, WebServices I used custom headers in the past to send some metrics over to the client–mostly for debugging purposes to quickly differentiate between client and server issues on slow web request and/or web application performance.While that was working out pretty well I like standards and even if I did not tell ... [More]
Scheduled task to automatically delete Fiddler HTTPS interception certificates 16 February 2018 Daniel-Fisher-(lennybacon) Security, PowerShell, Web I really like Fiddler, the web debugger. I like TLS. I develop software. Therefore I find the interception and decryption of secure traffic very useful.On the other hand I’m into security for a few years now and from that perspective it is a man in the middle attack. So you might want to allow this ... [More]