Monday, February 23, 2004

MSDN WebCasts

Got introduced to the MSDN webcasts (via).
Maybe they're familiar for all of you, but at least I didn't know them so far. In a word: they're great. A great way to view talks by MS engineers just from your computer at home. The Webcasts are broadcasted live of course on previously announced times. There interactive, in that they use simple polls in which you can participate, you can ask questions etc.
I just watched Writing Secure Code - Best Practices by Joel Semeniuk. This was a webcast from last week on, well, building secure applications. The threat modeling process is introduced, among other features like identifying threats by using the STRIDE model (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of privilege). Also, the well-known process of threat rating (DREAD: Damage potential, Reproducibility, Exploitability, Affected users, Discoverability) is explained.
I can only advise you to have a look at this or one of the other webcasts. Take some time to refresh or improve your knowledge. What I'm wondering myself is whether it would be possible to download the contents of the webcast in some way? That way, I'd have the possibility to watch them at home (dialup) instead of at work (DSL). There's no way to do this on dialup. It uses a 104Kbit connection, meaning 56Kb dialup is only half of which is needed.