3

Can someone discover a huge security issue in .NET framework so it forces everyone to migrate to Core? Please I beg you…

Comments
  • 4
    Send a FOIA request to the NSA.
  • 3
    It already has security issues in framework dependencies. But the buggers who decide to stick to some legacy shit probably don’t really either care or understand anything about security 🤷🏻‍♂️
  • 4
    An alternative way is just to get the IT department to get Macs or Linux machines instead of Windows machines.

    Everyone can run Classic dotnet via Mono or something. But it doesn't work quite as well.
    For us the catalyst for moving to dotnetCore was that our dev team was no longer Windows-only

    But we had quite a DeveloperExperience-centric philosophy and were about to start working on projects outside dotnet...

    A small bonus was that we got rid of all our expensive VS and Resharper licenses
  • 1
    Is Microsoft ending its support not strong enough of a reason?
  • 0
    @iceb clients are fucking idiots
  • 1
    question to all of you that develop on dotnet core professionally and not just fucks around with it here and there (and mind you, I love C# and dotnet so this is not in any way an attack or nag at it):

    how are you all feeling about the update cycle of net core? has it been stable enough? any big issues happening with it? We are currently looking at dotnet core or the go ecosystem as the new basis for our web development endeavor, so I was hopping to get some input from you all.
  • 0
    couple of years ago there was a possibility to DOS IIS by running variant of 'slowloris' attack where you would send very slowly request body (not headers!) to POST endpoint and you could very easily make the website unresponsive. (like 4 or 8 connections were enough) No config in IIS could fix that (or i was unsuccessful to do so).

    The issue was raised by some security scanner tool and they even provided instructions to fix that. The problem was that the config changes in instructions were all wrong.
  • 0
  • 1
    @i-hate-algebra unresponsive to you, because your connection pool for your IP was starving or unresponsive for everyone?
  • 0
    @KDSBest I am aware of the releases, what I was trying to get is at how are the developers not pushing blog post after blog post on medium feel about
  • 0
    @AleCx04 like I said it's awesome. If you liked .net framework then .net core will be pure love!
  • 0
    @AleCx04 the migrations can be an absolute fucking nightmare, but other than that it feels relatively fresh
Add Comment