Last Week in .NET - 3/13/2021 💍 There's a new proposal for a "static abstract" keyword . My brain is foggy on the use-cases here; but let's go with it. 🚨 Do you use System.Text.Encodings.Web? There's a vulnerability that has been patched. The vulnerability is captured in CVE-2021-26701 This vulnerability has been patched with the release of .NET 5.0.4 , and .NET Core 3.1.13 . For .NET 5.0.4, .NET 3.1.13, and .NET 2.1.26 this is a patch release that contains the CVE Fix . The usual provisos app...
Mar 15, 2021•4 min•Ep. 33
Last Week in .NET - Microsoft Ignites Exchange - Week Ending 6 March 2021 Microsoft Ignite happened last week. Its releases were all about Azure, azure, azure, and at least for the moment tangential to the work we do here. There's a playlist if that's your thing , but the first video on the list, and I am not shitting you here, is a video is titled "Faster Management Performance – Inventory and Financial Management learnings in Azure". ...and I'm already asleep. 🚨🚨🚨 Microsoft Exchange is curr...
Mar 08, 2021•10 min•Ep. 32
Releases 📢 Python for Visual Studio Code introduces its February 2021 release. TensorBoard integration , better docstring and improved go to declaration behavior have all been released as a part of this... release. 📢 TypeScript 4.2 has been released with several new features, like an abstract constructor signature, stricter checks for the 'in' Operator, smarter "Type alias preservation", and More. Yes, and more is doing a bit of heavy lifting in that sentence. Check it out and rememberr that T...
Mar 01, 2021•4 min•Ep. 31
Last Week in .NET - February 20th, 2021 .NET Releases 📢 .NET 6 Preview 1 is out . Besides MAUI, there's a lot being packed into .NET 6, and what I'm looking forward to most are Single File Apps. They were 'released' in .NET 5 for Linux only, and in .NET 6 they'll be available for Windows and MacOS as well. 📢 Dapr 1.0 has been released . Dapr allows you to hot-swap microservice features like queues, data stores, authorization schemes and secrets management. It's a way to write Microservices for...
Feb 22, 2021•5 min•Ep. 30
🎂 .NET Turned 19 on February 13th. Awwww. and I learned about it from AWS. Nice Shade. 🚨🚨🚨 Microsoft releases a whitepaper on mitigating risk when using Private package feeds This dovetails with the security researcher who wrote about how they hijack'd namespaces for private feeds ; and Microsoft releases a whitepaper on this issue and how to mitigate this. This is up top because it's crucially important for teams that use private Nuget feeds. Thanks to Barry "I love Beans" Dorrans for shari...
Feb 15, 2021•11 min•Ep. 29
Last Week in .NET - February 6th, 2021 No releases of note this week; but several updates in the .NET area that are useful, especially around Windows UI. Let's get to it. Microsoft News 👐 Microsoft Open sourced the storage engine that powers Exchange Server, Office 365, and parts of Windows . They open sourced the Extensible Storage Engine, or ESE for short, and it's been a foundational part of windows since Windows NT 3.51. This is cool and I'm still holding out hope for IIS to be open sourced...
Feb 08, 2021•5 min•Ep. 28
Last Week in .NET - January 30th, 2021 We're getting our first snow here in the DC area for the first time in what feels like forever; and the .NET team is pondering the true meaning of the words "Backlog management". Let's get to it. 🌎 As previously alluded to, the .NET team is closing older issues in their Github repos , and this is a cause for alarm among the folks that write these issues. If you run an open source project, sooner or later you're going to run into this if you don't have the ...
Feb 01, 2021•8 min•Ep. 27
Last Week in .NET - January 23rd, 2021 Is it over yet? Maybe? Not sure. 2021 has certainly come in like a lion, here's hoping is goes out like a lamb. A new president here in the states, a renewed focus on science, and a bunch of things happened last week in .NET. Let's get to it. Releases 📢 Visual Studio 16.9 Preview 3 has been released We now have intellisense for PREPROCESSOR symbols (yea, that was a written pun). This is about 20 years overdue and I'm excited to see it. Not excited enough t...
Jan 25, 2021•9 min•Ep. 26
This is Last Week in .NET for the week that ended... well.. last week (January 16th, 2020). It was a rocky week last week; and more of the same expected this week for the Washington DC area, and with an inauguration and Martin Luther King day as our backdrop, let's dive into what happened last week in the world of .NET. Releases 📢 📢 .NET 5.0.2 has been released . This release fixes CVE-2021-1723 | ASP.NET Core Denial of Service Vulnerability attack. If you run .NET Core on Kestrel, you're vuln...
Jan 18, 2021•13 min•Ep. 25
Here in the States, we recorded the first invasion of the Capitol since the war of 1812 (in 1814), the first time a sitting president has incited an insurrection, and the last time any of us will hold out hope that it being a new year will mean things get better. With that as our backdrop, let's get down to what happened last week in the world of .NET: 🗣 .NET Frontend day is January 28th, 2020 . This conference goes through the various technologies you can use to build front-end applications in...
Jan 11, 2021•7 min•Ep. 24
Between the SolarWinds hack, Microsoft releasing a working document detailing the problems with the .NET ecosystem, and a bouncy castle crypto vulnerability, it's been a busy week. Let's dive in and see what happened, shall we? 🤼 Immo Landwerth, PM for .NET, writes a document on the eco-system problems in .NET . This document is monumental in it being a candid take on the .NET OSS ecosystem problem; and while it says it softer than I will, it lays the blame for the state of the .NET Ecosystem o...
Dec 21, 2020•9 min•Ep. 23
Skip to content Pull requests Issues Marketplace Explore gortok / lwidn-newsletter Private 1 0 0 Code Issues Pull requests Actions Projects Security Insights Settings lwidn-newsletter / LwidnGenerator / input / 20201212.md gortok Update 20201212.md This is Last Week in .NET for the week ending 12 December, 2020. 📢 .NET 5.0.1 has been released . Lots of Bug Fixes and Performance improvements in this one; with an focus on EFCore. If you use EF Core, take note. 🚨 There's a Remote Code Execution V...
Dec 14, 2020•10 min•Ep. 22
Normally I'd start this out with some of the funnier things that happened; but before I dive into what happened last week, I want to talk about this week. Warning: death and violence follow. Yesterday was the 31st anniversary of the École Polytechnique massacre . If you're not familiar with this atrocity, let me quote Deb Chachra's chilling telling of the event: On December 6, 1989, in late afternoon a man had walked into the École Polytechnique, the engineering school of the University of Montr...
Dec 07, 2020•13 min•Ep. 21
Welcome to Last week in .NET; and last week was a holiday week so things will be lighter than usual. 📝 Matthew Jones talks about Expressions, Lambda, and Delegates in simple terms . Lambdas were one of the hardest concepts for me to learn; and 12 years later, I'm glad I did. I still don't use Func<T> and Action<T> to the extent I've seen in other codebases; but that's because I don't want the maintenance programmer to hunt me down. 🔎 Why does JavaScript use 0 as January and 11 to d...
Nov 30, 2020•6 min•Ep. 20
📢🐛 Visual Studio 16.8 has been released; and it might have uninstalled the .NET Core 3.1 SDKs on your behalf . 🎲 Random Street View shows you a place in the world randomly . Hopefully this gives you something fun to do during this holiday week while waiting for the clock to hit 5pm. 📢 Do you like the idea of using C# for scriptiong? dotnet-script provides that. Personally I'm of a mind that they should have modified C# for Scripting a long time ago and not invented Powershell, but we don't a...
Nov 23, 2020•8 min•Ep. 19
📢 .NET 5 has been released . As a reminder, .NET Framework 4.8 is the last, and dare I say, legacy version of .NET. .NET 5 is .NET Core 3.1 renamed to .NET, so that going forward -- at least in name, .NET is unified. .NET 6 will actually unify all the different frameworks under the umbrella of .NET, but 5 is the aspirational name change. As a minor note, ASP.NET Core on .NET 5 is the name for ASP.NET Core. It works, as long as you don't think about it too hard. Also "Core" is an overloaded term...
Nov 17, 2020•13 min•Ep. 18
📝 Not about .NET, but relevant to our interests: Pintrest Engineering talks about they decreased their build times by 99% by changing one line in their build process . If you use Git and you use Hosted CI, you're going to want to pay attention to this. Hell, even if you don't use Hosted CI, taking a look at what tricks may speed up your build time is always a good idea. This post also re-inforces that good API naming is a must. If you're a git expert, you probably know this trick, but for the r...
Nov 09, 2020•5 min•Ep. 17
Hey again, what a week. We had a blue moon, Halloween, and Daylight savings time end all one one night. In case you're the voting type here in these United States, that's happening tomorrow, where the choices are between two old white guys. You would think we would have learned our lesson by now, but we have not. But this is not last week in politics, this is last week in .NET, so let's get to it. 📅 .NET Conf is November 10th-12th . I'll be livetweeting as much as possible on twitter @gortok , ...
Nov 02, 2020•7 min•Ep. 16
Mostly community goodies this week. No releases, but that's not surprising given the impending release on November 10th. Here's what I found last week in .NET: 📢 Github now supports code navigation for C# repositories . If you've ever used OpenGrok , you may have wonder why services like Github never provided navigation between references. Well now they do. This is a phenomenol offering from Github; having the ability to click on a reference for an object and go to that class definition is... l...
Oct 26, 2020•8 min•Ep. 15
This is Last Week in .NET for the week that ended 17 October 2020. Lots of releases and CVE fixes last week, so let's get to it. 📢 .NET 5 RC2 has been released . I mentioned last week that RC 1 was probably the last RC until GA, and I was wrong. I won't pundit on that any more, I have, in fact, learned my lesson. ClickOnce makes an appearance, and there are several smaller updates in this release. 📢 .NET Core 3.1.9 has been released . This release includes bugfixes across the runtime, framewor...
Oct 20, 2020•7 min•Ep. 14
This is Last Week in .NET for the week ending 10 October 2020. No releases this week, but lots of goodies showing off .NET 5. Starting out with some inside baseball, I'm working to improve the layout of the newsletter, and if there's someone's design you think I should shamelessly copy, let me know on twitter 🐦: @gortok . 🎥 Rich Lander and Jared Parsons of Microsoft talk C# 9 - C# 9 gives us records (light-weight approaches to DTOs and property-based data structures), top-level statements (the...
Oct 13, 2020•8 min•Ep. 13
This is Last Week in .NET for the week ending 3 October 2020. You know, Last week. There were no releases this week, but a crap-ton of goodies abound. Blazor 🔗 Ed Charbeneau talks about Blazor vs. MVC on his twitch stream One bad thing about twitch is the videos disappear after 14 days so you have another 4 days to watch this one. 🔗 James Newton-King wrote a Blazor WebAssembly app that shows performance benefits of gRPC-Web over JSON. Tl;dr 70% less bandwidth, 10x faster deserialization; all w...
Oct 06, 2020•7 min•Ep. 12
Microsoft Ignite was the 22nd - 24th of September and the news is here Lots of Azure, and lots of releases that large enterprises and governments would love. Top Ten APIs in .NET 5.0 Good info here, and lots you may not have known about. How to build a Database application in Blazor Part 3 Everything old is new again. Angular is the new Webforms, Blazor is the new Angular. Here we are, partying like it's 2009. Visual Studio for Mac now supports iOS 14 and XCode 12 The magic phrase is redacted Ap...
Sep 28, 2020•6 min•Ep. 11
.NET 5 RC1 is now available It's great to see .NET 5 so close to release. The blog post announcing, however, has a whiplash moment I just need to note: and the first of two RCs before the official release in November. RC1 is a “go live” release; you are supported using it in production. At this point, we’re looking for reports of any remaining critical bugs that should be fixed before the final release. So what I'm reading is that the target demographic for .NET 5 RC1 is people who want to use i...
Sep 21, 2020•6 min•Ep. 10
.NET Core 3.1.8 and .NET Core 2.1.22 have been released This release includes a fix for a rather nasty CVE and... Not much else. CVE-2020-1045 allows an attacker to craft a cookie that can bypass ASP.NET Core security. Whaaaaaaatt. Patch your systems now. CVE-2020-1472 has been reproduced But speaking of CVEs, looks like a security firm reproduced CVE-2020-1472 . CVE-2020-1472 allows an attacker to bypass domain authentication with a specially crafted request that allows them to escalate their p...
Sep 14, 2020•4 min•Ep. 9
.NET 5 preview 8 has been released: https://github.com/dotnet/core/releases/tag/v5.0.0-preview.8 If you want to use .NET 5 Preview 8 with Visual Studio, make sure you have the Visual Studio 2019 16.8 preview 2 release installed]. Speaking of Visual Studio 2019 16.8 Preview 2, it now supports editor config fileheaders and namespace settings . So if your company has a 1980s centric approach to file-headers, you can now offload that work to the editorconfig. ASP.NET Core 5 Preview 8 has been releas...
Aug 31, 2020•3 min•Ep. 8
.NET 5 RC1 is coming soon Ok so technically this isn't "released" yet but David Fowler of the .NET team shared this photo in a tweet that shows two interesting tidbits, .NET 5 preview 7 is the last preview (AKA 'alpha') release and .NET 5 (Version 5.0.100) RC1 is coming soon. The other interesting tidbit is the 'master' branch (poor naming choice) is .NET 6.0.x, and at least as of this moment .NET 6 is slated for November 2021 . Microsoft Ignite is September 22-24th, 2020, and is Free. Sign up h...
Aug 24, 2020•13 min•Ep. 7
My favorite sentence from a "That's interesting" perspective is: "Buffalo buffalo Buffalo buffalo buffalo buffalo Buffalo buffalo" . With the flurry of patches for one CVE, I can only imagine someone at Microsoft is saying "Patch patch Patch patch patch patch Patch patch", to the same effect. .NET Core 3.1.7 has been released Release Notes The big news here is another major CVE has been patched, this time against ASP.NET Core. CVE-2020-1597 which is a Denial of Service vulnerability that targets...
Aug 17, 2020•7 min•Ep. 6
Links: Shahed Chowduri releases his ASP.NET Core 3.1 A-Z an ebook ( twitter ) .NET Core fails to build from source: https://github.com/dotnet/sdk/issues/11795 With commentary as to why (can't build nightlies when there are undisclosed security vulnerabilities?) https://twitter.com/runfaster2000/status/1290363230322212866?s=20 .NET Conf "Focus on Microservices" Playlist now on youtube. Microsoft let's employees sponsor open source projects at $10,00 a piece. Microsoft's Ignite - September 22-24 2...
Aug 10, 2020•4 min•Ep. 5
VB.NET "Not along for the ride" in .NET Core and .NET 5. Eject Mailman, eject. For those of you that were hoping for VB.NET to get some love in .NET 5, it doesn't look like it's going to happen . This is of course causing some consternation ; but overall I get it. Visual Basic was written for a time when we really thought we could make a language look like english and not be laughed out of the room. Now we know better. VB.NET has done good things; and I know a few products even today that are st...
Aug 03, 2020•30 min•Ep. 4
