I applaud the client as they were definitely security conscious. Although, there’s a balance between security and usability that this site definitely did not comprehend. The main argument from their InfoSec team was the concern over “AllowDotInPath”. After presenting the aforementioned material to their resident security head we were allowed to move forward with commenting out the various items that were unneeded or caused problems. I never received any gratitude for pointing out these issues nor would the security head admit to being incorrect on their stance. I was later told one vendor had to re-write an entire module for their code to work with URLScan, due to the “AllowDotInPath” issue. I recommended that the InfoSec team create a IIS 6.0 only configuration file when using URLScan with IIS 6.0. Otherwise, they’re bound to run into issues further down the line.

Sunday was a little more interesting at the Taste of Madison. I’d recommend the pulled pork from JAmerica any time. We also went and saw a fantastic movie called Crank. I’d highly recommend this to anyone looking for a kid-NOT-friendly movie that keeps your adult ADD at bay. Follow that up with some Porta Bella’s and some red wine and you have yourself a great weekend.

I’m finally back in Madison and there’s really nothing else to be said right now.

My entry today is simple, people in Texas talk to me in the elevators and it scares me.