105 reputation
2
bio website yuhongbao.blogspot.com
location
age 20
visits member for 3 years
seen Aug 16 at 3:53

May
22
comment Is it a security risk to maintain an application developed for a version of .NET prior to 4.0?
Service packs for 3.5, 3.0, and 2.0 are developed together and 3.5 and 3.0 only provides additional components to layer on top of 2.0. 3.5 SP1 has 3.0 SP2 and 2.0 SP2 inside for example.
May
21
awarded  Excavator
May
21
revised Is it a security risk to maintain an application developed for a version of .NET prior to 4.0?
Already corrected referenced Wikipedia article.
May
21
suggested suggested edit on Is it a security risk to maintain an application developed for a version of .NET prior to 4.0?
May
21
comment Is it a security risk to maintain an application developed for a version of .NET prior to 4.0?
@AviD Technically 3.5 has 3.0 and 2.0 inside, so 2.0 or later is fine.
Apr
16
comment Security Alert - Office File Validation - how to decide whether to proceed?
If the file ends up crashing, and WinDbg or similar shows the memory address being accessed was equal to or greater than 0x1000, please send the file to MSRC.
Sep
10
comment What key exchange mechanism should be used in TLS?
DHE_RSA is not supported by any version of Windows SChannel that used by IE. ECDHE_RSA is supported by Vista and later.
Aug
18
comment Microsoft SQL server 2000 sp3a - isn't it oudated?
You should be running the latest SP4 service pack if you still have to use SQL 2000.
Aug
16
awarded  Editor
Aug
16
revised Is doing credit card transaction via 3G secure?
more on key size
Aug
16
suggested suggested edit on Is doing credit card transaction via 3G secure?