Professional Visual Studio 2008, Nick Randolph and Dave Gardner (Wrox)

I have been remiss by not mentioning this book sooner (it came out towards the end of July, 2008).

The authors, Dave Gardner and Nick Randolph will be familiar to members who regularly attend the Perth .NET user group. Nick Randolph originally started the Perth .NET user group and both Dave and Nick have recently presented to the group. Dave Gardner donated a copy of the book to the Perth .NET user group library, and several local user group members helped review some of the pre-print chapters.

Let me start with a disclaimer: I know Nick Randolph and Dave Gardner personally through my involvement with the Perth .NET user group. They are both very talented and skilled developers and active in their support of the developer community. I tried not to let this fact bias this short review too much!

I reviewed the Visual Studio 2005 predecessor of this book some time ago, and I think the new 2008 version is an improvement.

It’s a big book and not just by its size. It covers a huge amount of material and could probably have been subtitled ‘everything you wanted to know about Visual Studio 2008 but were afraid to ask’! The Visual Studio 2008 Integrated Development Environment (IDE) is a complex beast, and worth getting to know well, if like me, you spend most of your working life in it! You could, of course, still do most of your development in Notepad, but you could also wear a hair shirt…

The primary focus of this book is on the IDE itself, rather than the specific languages that can be used within .NET or indeed the .NET Framework itself. I’m not going to give a chapter by chapter account of what is contained in this book, mainly because it would take a loooooong time, but also because I fear my head might explode! Seriously though, I have read around 75% of it. The writing style is clear and I doubt whether you could make any book about Visual Studio more engaging than they have achieved.

The authors’ goals, as stated, were not just updating the Visual Studio 2005 version of this book or simply to explain how to use Visual Studio, but also to create a set of productivity best practices and recommendations on how to use Visual Studio features in an effective way. I think they have achieved that goal.

One of the first Amazon reviews was not favourable, but that reviewer was looking for a book that would teach C# and an introduction to the .NET framework. As Dave mentioned in his response to that reviewer, although both authors do have a bias towards Visual Basic, approximately 40% of the code samples are written in C#. There is also a chapter that provides coverage of F# (http://mitch-wheat.blogspot.com/2008/09/new-net-f-ctp-release.html)

It is probably not the sort of book you would read cover to cover, but rather delve into specific chapters to gain insight into particular features. It’s great for quickly finding out what features are available. The first day it was on my desk at work, I used it to quickly find a debugging gem that might have otherwise remained undiscovered.

Kudos goes to Nick and Dave for producing a great resource for developers.

There is a companion website and blog here: http://www.professionalvisualstudio.com/

Links to the book:
http://www.amazon.com/Professional-Visual-Studio-2008-Programmer/dp/0470229888
http://www.wrox.com/WileyCDA/WroxTitle/Professional-Visual-Studio-2008.productCd-0470229888.html

Free ebook: The Top Ten New Features for DBAs in SQL Server 2008

A short while ago I blogged about Brad McGehee’s free book from red-gate. He has recently made another available, discussing what he feels are the top ten new features of SQL Server 2008. This 112 page free book is available here. (Once again, the single, zipped download contains all 3 of the free ebooks).

I mentioned Brad’s short roundup up of new SQL Server 2008 features here.

Perth .NET User Group Meeting: Thurs 4th Sept, 5:30pm – 7pm: Federated Identity Management in a Service Oriented World with Bill Poole

Join us at the Perth .NET Community of Practice, Sept 4th to hear Bill Poole talk about Federated Identity Management in a Service Oriented World. Gone are the days of siloed applications that identify users with a simple username/password combination stored in the application database. In today’s world of Internet based e-commerce where secure transactions occur over insecure open networks and in a service oriented world of composite applications where identity must be shared between systems hosted by different organisations on disparate platforms; in a world where increasing numbers of businesses are turning to hosting their applications in the cloud, and where users from partner organisations need to be securely granted access to enterprise resources, architects are turning to an ever increasingly complex array of security solutions to solve their identity woes. How do we as mere mortals make sense of PKI, Kerberos, SAML, and a plethora of WS-* standards aimed at addressing these concerns? This session will provide a clear and practical description of how to apply today’s security technologies in order to effectively manage and share identity across applications, service and organisational boundaries.

TOPIC: Federated Identity Management in a Service Oriented World with Bill Poole
DATE: Thursday, Sept 4th, 5:30pm
VENUE: Excom, Level 2, 23 Barrack Street, Perth
COST: Free. All welcome.

Core .NET Reference Card

Jon skeet has produced a handy Core .NET refcard for some of those things you might commonly look up in MSDN. It’s 6 pages long and quickly covers:

  • Common .NET types, aliases and sizes
  • String literals and escape sequences
  • Format strings (general, numeric, date/time)
  • Working with dates and times
  • Text encodings
  • Threading
  • Using the new features of C# 3.0 / VB 9.0 in .NET 2.0 projects

You have to register which is a bit of a pain (although if you have registered before, you don’t need to register again). There are a few other handy reference cards there too.

SQL Server 2008 Express

The release of SQL Server 2008 means that the Express version is also available. SQL Server 2008 Express edition comes in 3 flavours: Express, Express with Tools and Express with Advanced Services. You can get more details on the individual versions and download them here.

Microsoft Urlscan Helps to Filter SQL Injection Attacks

Microsoft recently re-released an improved version of a security filter for IIS that is designed to help thwart SQL injection attacks by restricting the types of HTTP requests that IIS will process. UrlScan 3.0 is an IIS add-on that provides real-time validation of HTTP server requests, potentially blocking SQL injection exploits.

UrlScan has actually been available for several years, but Microsoft added some new features in this 3.0 release, including support for query string scanning.