Bill Bartlett will review 3 methods of adding a Second Factor Authentication based on possession of a personal device to a .NET web application. The 3 methods are, Google Authenticator app on a smartphone, Yubikey tokens, and FIDO Universal Second Factor (U2F) tokens. He will start with a review of why passwords are not adequate and review the benefits of a challenge/response model of authentication. He will then break down each of the 3 2FA solutions and compare the UX, TCO and the inherent security and risks. Finally, He will run a demo that shows all 3 methods. Bill will talk about implementation of all 3 methods and have the source code available if there are specific questions.
Microsoft has been getting a lot of press lately for revitalizing their business and taking a leadership role in innovation in many key areas . There have been several announcements in the run up to the Build 2015 Developer Conference, from Docker support and Nano Servers , to Surface 3 and Azure Service Fabric. Whether your interest is in Windows 10, cloud computing, developer tools, open source, or DevOps -- it is safe to say that Microsoft has more than likely saved up some exciting announcements for the Day 1 keynote at Build . Come join your peers and watch the live stream at the Microsoft Portland office. Stay after the keynote for a free box lunch, discussion, and conversation.
Part 1 – Testing the Untestable
Ever had someone tell you your feature is broken, even though all your Unit Tests are green? Has that made you wonder about the ROI on all that time you spent writing the tests? Omer will show you how to write strong "Journey Tests" that thoroughly exercise features end-to-end, without succumbing to writing brittle UI-testing code or rationalizing it away as "too hard". No more relying solely on the "we’ll find out eventually" approach. BDDfy is an excellent open-source library which lets us write beautiful, maintainable, and concise Acceptance Tests in prose-like C# code that reads like plain English. We'll see that and learn about the concept of 'Subcutaneous Testing'.
Part 2 – Becoming a Debugging Wiz with OzCode
Visual Studio hosts a very capable debugger, but many developers are unaware of some of its most powerful features. In this demo-intensive talk we'll take a deep dive into the Visual Studio debugger and into OzCode. OzCode is a Visual Studio extension that can help streamline and enhance the debugging experience, making debugging much simpler and more efficient. Super-useful tips for using the debugger will be given throughout the session.