<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/"><channel><title>蒋晟的专栏 - 安全(Security)</title><link>http://blog.csdn.net/jiangsheng/category/90393.aspx</link><description /><dc:language>zh-CN</dc:language><lastUpdateTime>Mon, 07 Apr 2008 15:48:43 GMT</lastUpdateTime><ttl>60</ttl><item><dc:creator>蒋晟.Net</dc:creator><title>Visual Studio 2005 Untrusted by IE7</title><link>http://blog.csdn.net/jiangsheng/archive/2006/11/12/1379769.aspx</link><pubDate>Sun, 12 Nov 2006 06:26:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2006/11/12/1379769.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/1379769.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2006/11/12/1379769.aspx#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/1379769.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=1379769</trackback:ping><description>Today I upgraded one of my development machine to IE7. Everything looks fine, except I have to change the FileDownload event handler to make my code compile.

However, suddenly I found Visual Studio is complaining:

 

Conclusion:

Visual Studio is based on WebBrowser control (Is this news story?) 
Upgrade to IE7 may break some applications (Again, is this a news story?)
Everything else works fine so far...
&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/1379769.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>蒋晟.Net</dc:creator><title>Jiangsheng的CSDN Digest(April 3, 2006)</title><link>http://blog.csdn.net/jiangsheng/archive/2006/04/03/648980.aspx</link><pubDate>Mon, 03 Apr 2006 13:45:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2006/04/03/648980.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/648980.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2006/04/03/648980.aspx#Feedback</comments><slash:comments>10</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/648980.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=648980</trackback:ping><description> 为了便于搜索,这里尽可能保留了论坛上讨论的原文，但是这并不表示本人赞同帖子中的表述方式和观点。 
CSDN 讨论总结系列：

Jiangsheng的CSDN Digest(March 4, 2006) (http://blog.csdn.net/jiangsheng/archive/2006/03/05/615714.aspx)
Jiangsheng的CSDN Digest (Jan 21 2006)( http://blog.csdn.net/jiangsheng/archive/2006/03/05/615669.aspx) 
Jiangsheng的CSDN Digest (Jan 7 2006)（http://blog.csdn.net/jiangsheng/archive/2006/01/07/573288.aspx） 
Jiangsheng的CSDN Digest (Jan 1 2006)http://blog.csdn.net/jiangsheng/archive/2006/01/01/568362.aspx 
Jiangsheng的CSDN Digest &lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/648980.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>蒋晟.Net</dc:creator><title>Jiangsheng的CSDN Digest(March 4, 2006)</title><link>http://blog.csdn.net/jiangsheng/archive/2006/03/05/615714.aspx</link><pubDate>Sun, 05 Mar 2006 09:25:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2006/03/05/615714.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/615714.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2006/03/05/615714.aspx#Feedback</comments><slash:comments>6</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/615714.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=615714</trackback:ping><description>为了便于搜索,这里尽可能保留了论坛上讨论的原文，但是这并不表示本人赞同帖子中的表述方式和观点。
CSDN 讨论总结系列：
Jiangsheng的CSDN Digest (Jan 21 2006)( http://blog.csdn.net/jiangsheng/archive/2006/03/05/615669.aspx)
Jiangsheng的CSDN Digest (Jan 7 2006)（http://blog.csdn.net/jiangsheng/archive/2006/01/07/573288.aspx）
Jiangsheng的CSDN Digest (Jan 1 2006)http://blog.csdn.net/jiangsheng/archive/2006/01/01/568362.aspx 
Jiangsheng的CSDN Digest (Dec 2005)(http://blog.csdn.net/jiangsheng/archive/2005/12/24/561501.aspx) 
Jiangsheng的CSDN Digest (Oct 2005)&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/615714.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>蒋晟.Net</dc:creator><title>Jiangsheng的CSDN Digest (Jan 21 2006)</title><link>http://blog.csdn.net/jiangsheng/archive/2006/03/05/615669.aspx</link><pubDate>Sun, 05 Mar 2006 05:00:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2006/03/05/615669.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/615669.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2006/03/05/615669.aspx#Feedback</comments><slash:comments>5</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/615669.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=615669</trackback:ping><description> 
CSDN 讨论总结系列：

Jiangsheng的CSDN Digest (Jan 7 2006)（http://blog.csdn.net/jiangsheng/archive/2006/01/07/573288.aspx）
Jiangsheng的CSDN Digest (Jan 1 2006)http://blog.csdn.net/jiangsheng/archive/2006/01/01/568362.aspx 
Jiangsheng的CSDN Digest (Dec 2005)(http://blog.csdn.net/jiangsheng/archive/2005/12/24/561501.aspx) 
Jiangsheng的CSDN Digest (Oct 2005)(http://blog.csdn.net/jiangsheng/archive/2005/12/27/563274.aspx) 
Win32 &amp; .Net Q&amp;A 200509 (http://blog.csdn.net/jiangsheng/archive/2005/09/13/4805&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/615669.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>蒋晟.Net</dc:creator><title>Jiangsheng的CSDN Digest (Jan 7 2006) </title><link>http://blog.csdn.net/jiangsheng/archive/2006/01/07/573288.aspx</link><pubDate>Sat, 07 Jan 2006 14:20:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2006/01/07/573288.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/573288.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2006/01/07/573288.aspx#Feedback</comments><slash:comments>1</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/573288.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=573288</trackback:ping><description>CSDN 讨论总结系列：

Jiangsheng的CSDN Digest (Jan 1 2006)http://blog.csdn.net/jiangsheng/archive/2006/01/01/568362.aspx 
Jiangsheng的CSDN Digest (Dec 2005)(http://blog.csdn.net/jiangsheng/archive/2005/12/24/561501.aspx) 
Jiangsheng的CSDN Digest (Oct 2005)(http://blog.csdn.net/jiangsheng/archive/2005/12/27/563274.aspx) 
Win32 &amp; .Net Q&amp;A 200509 (http://blog.csdn.net/jiangsheng/archive/2005/09/13/480540.aspx) 
Win32 &amp; .Net Q&amp;A (http://blog.csdn.net/jiangsheng/archive/2005/02/28/304654.aspx) 
VC/MFC Q&amp;&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/573288.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>蒋晟.Net</dc:creator><title>Jiangsheng的CSDN Digest (Oct 2005)</title><link>http://blog.csdn.net/jiangsheng/archive/2005/12/27/563274.aspx</link><pubDate>Tue, 27 Dec 2005 00:16:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2005/12/27/563274.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/563274.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2005/12/27/563274.aspx#Feedback</comments><slash:comments>2</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/563274.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=563274</trackback:ping><description>jiangsheng在2005年9月-10月之间参与的CSDN已结贴子的摘要&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/563274.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>蒋晟.Net</dc:creator><title>Jiangsheng的CSDN Digest (Dec 2005)</title><link>http://blog.csdn.net/jiangsheng/archive/2005/12/24/561501.aspx</link><pubDate>Sat, 24 Dec 2005 20:24:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2005/12/24/561501.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/561501.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2005/12/24/561501.aspx#Feedback</comments><slash:comments>3</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/561501.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=561501</trackback:ping><description>jiangsheng在2005年11月-12月之间参与的CSDN已结贴子的摘要&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/561501.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>蒋晟.Net</dc:creator><title>从Sony招回含疑似间谍软件的CD说起</title><link>http://blog.csdn.net/jiangsheng/archive/2005/11/16/530731.aspx</link><pubDate>Wed, 16 Nov 2005 00:02:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2005/11/16/530731.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/530731.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2005/11/16/530731.aspx#Feedback</comments><slash:comments>4</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/530731.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=530731</trackback:ping><description>面对消费者日益严重的不满，Sony BMG害怕自己的正版音乐产品受到版权保护“后门”的影响，于今天宣布撤回商店货架内所有涉及Rookit软件的CD产品，并为消费者提供免费的非DRM版CD更换。 
http://computer.online.sh.cn/computer/gb/content/2005-11/16/content_1380298.htm
关于这个软件包含的安全性和稳定性问题，参考
Sony, Rootkits and Digital Rights Management Gone Too Far
http://www.365key.com/forward.aspx?id=1286254
以及
More on Sony: Dangerous Decloaking Patch, EULAs and Phoning Home
http://www.365key.com/forward.aspx?id=1286280
作为一个知名公司，此次事件将对其声誉造成深远影响。一些其它的先例，包括3721（现在叫雅虎助手）和淘宝网，已经说明了轻视用户体验的后果。但是，有时候&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/530731.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>蒋晟.Net</dc:creator><title>西雅图MVP峰会见闻</title><link>http://blog.csdn.net/jiangsheng/archive/2005/10/08/497930.aspx</link><pubDate>Sat, 08 Oct 2005 21:50:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2005/10/08/497930.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/497930.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2005/10/08/497930.aspx#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/497930.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=497930</trackback:ping><description>个人觉得这次MVP峰会最大的进步就是技术相关的Session数量大大增加，按照MVP专长来分类；而不像上次那样按主题分类。我只需要在VC产品组的日程里面选择就可以了，而不是像上回那样不得不去听移动开发。当然这回也有MVP不去参加VC的Session，跑去听IE和移动开发。内容方面也比上次活泼很多，Don Box还是那么幽默，比尔·盖茨也有搞笑的演出，不过他看起来比去年七月份在北京的时候老多了。

一些可能有人会感兴趣的技术信息

新的产品开发合作网站http://connect.microsoft.com/。在这里可以申请参与新产品的测试。
软件开发者可以使用Windows错误报告机制（Windows Error Reporting，简称WER，https://winqual.microsoft.com/parentorgs.asp）来获得反馈。 
有人正在开发把VC项目转化成MSBuild的XML格式的工具 (
http://blogs.msdn.com/clichten/archive/2005/06/07/Building_VC_projects_with_msbu&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/497930.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>蒋晟.Net</dc:creator><title>Win32 &amp; .Net Q&amp;A 200509</title><link>http://blog.csdn.net/jiangsheng/archive/2005/09/13/480540.aspx</link><pubDate>Tue, 13 Sep 2005 22:06:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2005/09/13/480540.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/480540.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2005/09/13/480540.aspx#Feedback</comments><slash:comments>5</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/480540.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=480540</trackback:ping><description>I would like to keep tracking some interesting discussions, but sometimes I can not find them due to the limit of the CSDN favorite and the CSDN full text search. So again I list some interesting discussions here. For details about the discussion, go to http://search.csdn.net and search posts by their topics. For previous Q&amp;A discussions, see my blogs Win32 &amp; .Net Q&amp;A  and VC/MFC Q&amp;A 200407 . A topic may appear in these Q&amp;A blogs more than once, but I will try to cover every interesting discussi&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/480540.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>蒋晟.Net</dc:creator><title>Visual Studio 2005中MFC的变化</title><link>http://blog.csdn.net/jiangsheng/archive/2005/07/05/413919.aspx</link><pubDate>Tue, 05 Jul 2005 08:35:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2005/07/05/413919.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/413919.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2005/07/05/413919.aspx#Feedback</comments><slash:comments>3</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/413919.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=413919</trackback:ping><description>关于新功能的说明http://msdn2.microsoft.com/library/y8bt6w34(en-us,vs.80).aspx

一些源代码的变化：

对CLR、.Net类库和Winform控件的支持。
多处安全性的增强，对于函数参数和消息影射类型的检查加强。对ISAPI的支持看起来改动很大。
对基于64位处理器的软件开发的支持。
一些过时功能，例如MFC的DAO类，的使用受到限制。对于64位开发环境，MFC的DAO类是被禁用的。
OLE控件容器和激活状态的改进
新增加的ENSURE宏在ASSERT之外还可以抛出异常。
修正了一些BUG
VC7引入的对GetHtmlDocument()的引用导致内存泄漏的问题。
CHtmlView::ExecFormsCommand中调用IOleCommandTarget::Exec时参数写反了的问题
把CArchiveException::generic修改为CArchiveException::genericException以避免潜在的关键字冲突（微软看起来又准备引入一个新的关键字）
&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/413919.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>蒋晟.Net</dc:creator><title>Win32 &amp; .Net Q&amp;A</title><link>http://blog.csdn.net/jiangsheng/archive/2005/02/28/304654.aspx</link><pubDate>Mon, 28 Feb 2005 08:00:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2005/02/28/304654.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/304654.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2005/02/28/304654.aspx#Feedback</comments><slash:comments>3</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/304654.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=304654</trackback:ping><description>jiangsheng收集的CSDN论坛问答摘要&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/304654.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>jiangsheng</dc:creator><title>编程控制活动桌面，用ActiveX控件来增强桌面的功能</title><link>http://blog.csdn.net/jiangsheng/archive/2005/01/22/263686.aspx</link><pubDate>Sat, 22 Jan 2005 13:33:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2005/01/22/263686.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/263686.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2005/01/22/263686.aspx#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/263686.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=263686</trackback:ping><description>桌面处理和一个例子 （http://www.vckbase.com/vckbase/vckbase10/vc/nonctrls/atlcomocx_02/1002001.htm）讲述了使用IActiveDesktop接口可以做到的事情。活动桌面允许在桌面上显示HTML网页，这也意味着我们可以在桌面上的项目中以在网页中使用ActiveX控件来对网页进行扩展的方式来提供丰富的内容。但是不建议在桌面上使用不安全的控件，例如Windows Media Player。虽然用一段影片作为桌面背景是一件很酷的事情，但是你不得不忍受在每次切换任务或者刷新桌面的时候都弹出安全性提示对话框。你可以在编写自己的控件时利用
http://msdn.microsoft.com/library/CHS/vccore/html/_atl_step_7.3a_.putting_the_control_on_a_web_page.asp中的技术来避免这个烦人的对话框。&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/263686.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>jiangsheng</dc:creator><title>偶的CSDN收藏夹(大部分都是古董……)</title><link>http://blog.csdn.net/jiangsheng/archive/2004/11/17/184264.aspx</link><pubDate>Wed, 17 Nov 2004 10:09:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2004/11/17/184264.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/184264.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2004/11/17/184264.aspx#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/184264.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=184264</trackback:ping><description>无界面的HTML分析器·分析网页中的表格/ http://community.csdn.net/Expert/topicview.asp?id=351580 
如何载入非标准大小的图标并显示/ http://community.csdn.net/Expert/topicview.asp?id=638695
在基于浏览器控件的程序中，当鼠标停留在一个超链上时，怎样得到该链指向的地址/ http://community.csdn.net/Expert/topicview.asp?id=653919
如何等待创建的子进程结束？/ http://community.csdn.net/Expert/topicview.asp?id=761987
CFileDialog如何打开多个文件/ http://community.csdn.net/Expert/topicview.asp?id=781609
保存指定的URL的网页到单一mht格式的文件/ http://community.csdn.net/Expert/topicview.asp?id=786376
DataGrid控件问题如&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/184264.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>蒋晟.Net</dc:creator><title>VC/MFC Q&amp;A 200407 </title><link>http://blog.csdn.net/jiangsheng/archive/2004/07/13/40771.aspx</link><pubDate>Tue, 13 Jul 2004 21:06:00 GMT</pubDate><guid>http://blog.csdn.net/jiangsheng/archive/2004/07/13/40771.aspx</guid><wfw:comment>http://blog.csdn.net/jiangsheng/comments/40771.aspx</wfw:comment><comments>http://blog.csdn.net/jiangsheng/archive/2004/07/13/40771.aspx#Feedback</comments><slash:comments>5</slash:comments><wfw:commentRss>http://blog.csdn.net/jiangsheng/comments/commentRss/40771.aspx</wfw:commentRss><trackback:ping>http://tb.blog.csdn.net/TrackBack.aspx?PostId=40771</trackback:ping><description>VC/MFC Q&amp;A 200407
CSDN
Jiangsheng收集&lt;img src ="http://blog.csdn.net/jiangsheng/aggbug/40771.aspx" width = "1" height = "1" /&gt;</description></item></channel></rss>