Showing posts with label code. Show all posts
Showing posts with label code. Show all posts

Friday, March 9, 2012

mailto: protocol

i am using mailto: protocol in jump to URL. if i hard code the value
(xyz@.microsoft.com), it works fine. But if i try to use
mailto:Fields!email.Value, it throws out an error to me saying "Invalid URI"
Has anyone faced such kind of problem or has a solution for it?
--
Thanks!
AshishDid you try this expression:
="mailto:" & Fields!email.Value
--
This posting is provided "AS IS" with no warranties, and confers no rights.
"Ashish" <Ashish@.discussions.microsoft.com> wrote in message
news:9D7D36EE-784E-424C-81CF-BFA53B4173AB@.microsoft.com...
> i am using mailto: protocol in jump to URL. if i hard code the value
> (xyz@.microsoft.com), it works fine. But if i try to use
> mailto:Fields!email.Value, it throws out an error to me saying "Invalid
URI"
> Has anyone faced such kind of problem or has a solution for it?
> --
> Thanks!
> Ashish|||Hi Robert,
Thanks for the reply.
I tried the expression ="mailto:" & Fields!email.Value but everytime it
gives me an error saying "Invalid URI: Hostname could not be parsed"
Thanks
"Robert Bruckner [MSFT]" wrote:
> Did you try this expression:
> ="mailto:" & Fields!email.Value
> --
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Ashish" <Ashish@.discussions.microsoft.com> wrote in message
> news:9D7D36EE-784E-424C-81CF-BFA53B4173AB@.microsoft.com...
> > i am using mailto: protocol in jump to URL. if i hard code the value
> > (xyz@.microsoft.com), it works fine. But if i try to use
> > mailto:Fields!email.Value, it throws out an error to me saying "Invalid
> URI"
> >
> > Has anyone faced such kind of problem or has a solution for it?
> > --
> > Thanks!
> > Ashish
>
>|||Do you have RS 2000 SP1 installed?
--
This posting is provided "AS IS" with no warranties, and confers no rights.
"Ashish" <Ashish@.discussions.microsoft.com> wrote in message
news:0A5C0D9C-B4F2-4947-81B5-0854CB00395D@.microsoft.com...
> Hi Robert,
> Thanks for the reply.
> I tried the expression ="mailto:" & Fields!email.Value but everytime it
> gives me an error saying "Invalid URI: Hostname could not be parsed"
> Thanks
> "Robert Bruckner [MSFT]" wrote:
> > Did you try this expression:
> > ="mailto:" & Fields!email.Value
> >
> > --
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> >
> > "Ashish" <Ashish@.discussions.microsoft.com> wrote in message
> > news:9D7D36EE-784E-424C-81CF-BFA53B4173AB@.microsoft.com...
> > > i am using mailto: protocol in jump to URL. if i hard code the value
> > > (xyz@.microsoft.com), it works fine. But if i try to use
> > > mailto:Fields!email.Value, it throws out an error to me saying
"Invalid
> > URI"
> > >
> > > Has anyone faced such kind of problem or has a solution for it?
> > > --
> > > Thanks!
> > > Ashish
> >
> >
> >|||I had the same problem. If any record in your data set does not return an
email address in the form of name@.abc.com, you will receive that message. I
got around it by setting a default email address to any record that did not
have an email specified.
Hope that helps.
Stan
"Ashish" <Ashish@.discussions.microsoft.com> wrote in message
news:0A5C0D9C-B4F2-4947-81B5-0854CB00395D@.microsoft.com...
> Hi Robert,
> Thanks for the reply.
> I tried the expression ="mailto:" & Fields!email.Value but everytime it
> gives me an error saying "Invalid URI: Hostname could not be parsed"
> Thanks
> "Robert Bruckner [MSFT]" wrote:
> > Did you try this expression:
> > ="mailto:" & Fields!email.Value
> >
> > --
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> >
> > "Ashish" <Ashish@.discussions.microsoft.com> wrote in message
> > news:9D7D36EE-784E-424C-81CF-BFA53B4173AB@.microsoft.com...
> > > i am using mailto: protocol in jump to URL. if i hard code the value
> > > (xyz@.microsoft.com), it works fine. But if i try to use
> > > mailto:Fields!email.Value, it throws out an error to me saying
"Invalid
> > URI"
> > >
> > > Has anyone faced such kind of problem or has a solution for it?
> > > --
> > > Thanks!
> > > Ashish
> >
> >
> >|||I do have RS 2000 SP 1 installed
One more thing was that how can we add custom subject and body with the
mailto: protocol
Thanks for the help
Ashish
"Robert Bruckner [MSFT]" wrote:
> Do you have RS 2000 SP1 installed?
> --
> This posting is provided "AS IS" with no warranties, and confers no rights.
> "Ashish" <Ashish@.discussions.microsoft.com> wrote in message
> news:0A5C0D9C-B4F2-4947-81B5-0854CB00395D@.microsoft.com...
> > Hi Robert,
> >
> > Thanks for the reply.
> > I tried the expression ="mailto:" & Fields!email.Value but everytime it
> > gives me an error saying "Invalid URI: Hostname could not be parsed"
> >
> > Thanks
> >
> > "Robert Bruckner [MSFT]" wrote:
> >
> > > Did you try this expression:
> > > ="mailto:" & Fields!email.Value
> > >
> > > --
> > > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > >
> > >
> > > "Ashish" <Ashish@.discussions.microsoft.com> wrote in message
> > > news:9D7D36EE-784E-424C-81CF-BFA53B4173AB@.microsoft.com...
> > > > i am using mailto: protocol in jump to URL. if i hard code the value
> > > > (xyz@.microsoft.com), it works fine. But if i try to use
> > > > mailto:Fields!email.Value, it throws out an error to me saying
> "Invalid
> > > URI"
> > > >
> > > > Has anyone faced such kind of problem or has a solution for it?
> > > > --
> > > > Thanks!
> > > > Ashish
> > >
> > >
> > >
>
>|||Yes, you were right. If any record in the dataset doesn't return any email
then it throws out that error.
Do you know how we can write the custom mail subject and mail body in that
expression.
Thanks for the help
Ashish
"SSVette@.Hotmail.com" wrote:
> I had the same problem. If any record in your data set does not return an
> email address in the form of name@.abc.com, you will receive that message. I
> got around it by setting a default email address to any record that did not
> have an email specified.
> Hope that helps.
> Stan
> "Ashish" <Ashish@.discussions.microsoft.com> wrote in message
> news:0A5C0D9C-B4F2-4947-81B5-0854CB00395D@.microsoft.com...
> > Hi Robert,
> >
> > Thanks for the reply.
> > I tried the expression ="mailto:" & Fields!email.Value but everytime it
> > gives me an error saying "Invalid URI: Hostname could not be parsed"
> >
> > Thanks
> >
> > "Robert Bruckner [MSFT]" wrote:
> >
> > > Did you try this expression:
> > > ="mailto:" & Fields!email.Value
> > >
> > > --
> > > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > >
> > >
> > > "Ashish" <Ashish@.discussions.microsoft.com> wrote in message
> > > news:9D7D36EE-784E-424C-81CF-BFA53B4173AB@.microsoft.com...
> > > > i am using mailto: protocol in jump to URL. if i hard code the value
> > > > (xyz@.microsoft.com), it works fine. But if i try to use
> > > > mailto:Fields!email.Value, it throws out an error to me saying
> "Invalid
> > > URI"
> > > >
> > > > Has anyone faced such kind of problem or has a solution for it?
> > > > --
> > > > Thanks!
> > > > Ashish
> > >
> > >
> > >
>
>

Mails

I have the following code to send email using DTS and CDO objects.

I am getting run time error. Dont know why ?

Any configurations to be made ?

'**********************************************************************
' Visual Basic ActiveX Script
'************************************************************************

Function Main()
dim sch

sch = "http://schemas.microsoft.com/cdo/configuration/"
Set cdoConfig =CreateObject("CDO.Configuration")

cdoConfig.Fields.Item(sch & "sendusing") =2
cdoConfig.Fields.Item(sch & "smtpserver") = MPBAKOREX01.corp.mphasis.com"

cdoConfig.fields.update

Set cdoMessage =CreateObject("CDO.Message")
Set cdoMessage.Configuration = cdoConfig
cdoMessage.From = "shanmuga.r@.mphasis.com"

cdoMessage.To = "shanmuga.r@.mphasis.com"

cdoMessage.Subject = "Sample CDONTS NewMail"
cdoMessage.HTMLBody="<html><b>rajaganapathy</b></html>"
msgbox "before "
cdoMessage.Send
msgbox "Send"

Set cdoMessage = Nothing
Set cdoConfig = Nothing


Main = DTSTaskExecResult_Success
End Function

hi RajaGanapathy,

What sort of error you see? COM error?

From a .dtsx file or DTS 2000?

|||

Hi,

Creating a new instance of "CDO.Configuration" requires a dll to be registered on the server. Is the dll available on the server. Also please specify the error.

Thanks

Mohit

|||

Thanks enric vives and mohtigupta,

Even i can use xp_sendmail, but i cant send in htmlformat.

I dont think my system is installed with cdo.dll.

Can u just tell me how to send a mail in html format !

|||This forum concerns SSIS, not DTS. However, the DTS newsgroup is still available.

Saturday, February 25, 2012

MAC used as search index for Encrypted data: how secure?

I have read recommendations about searching encrypted data. Typically, they involve creating a MAC (message authentication code) table. One of the elements of that table is a HASH of the encrypted data (plus a Mac key) that is used as an index for searching. Is that HASH as secure as the encrypted data itself, or is this approach less secure? If it is less secure, then may I assume that approach is the only feasible way to search data encrypted by nondeterministic algorithms?

TIA,

Barkingdog

Is the hash as secure as the encrypted data? This is a difficult question, because the answer depends on what you are trying to secure against, and what algorithms you are using, and what vulnerabilities they develop over time. One thing that a hash would disclose, and that encryption would normally not disclose, is data identity. That is, you can encrypt the same piece of data and you won't be able to determine from the resulting blobs whether they are corresponding to identical data, but if you hash the data, the result will be identical.

Strictly speaking, the only way to search encrypted data (and I mean non-deterministic, although I should not need to specify this because encryption is always intended to be a non-deterministic operation) is to decrypt all data and search through the decrypted text. Using hashes is a workaround that allows you to search hashes instead of the encrypted data, to answer an equality search. You can probably devise other alternative search schemes, depending on what searches you want to allow and how much information you are willing to give away.

Thanks
Laurentiu

|||

>>>Using hashes is a workaround

Yes, I agree with that. I'm just concerned that the creation of hashes (out of practical necessity) results in a workable solution because the hash codes are easier to "crack" than the encrypted data itself. Maybe "cracking" the hash can lead to cracking the encrypted data?

Barkingdog.

|||

Strictly speaking, yes it is possible to user a rainbow attack against a pure hash on the data we are trying to protect, especially if the domain of the plaintext is finite and well defined (i.e. SSN, CCN, etc.). For example, I can easily create an offline rainbow table with all possible hashes (SHA1, MD5, etc.) for every possible SSN, once I find your hashed value I just need to find the corresponding value on the rainbow table.

This is the reason why I was suggesting using an HMAC, that way the domain of the plaintext is different and creating a dictionary is far more expensive that the example above. You are still giving away some information to the potential attacker, but the difference is that now there is a random bag of bits of arbitrary length (the HMAC key) combined with the data we want to protect, that way the hash input does not belong to the same domain as the original plaintext.

Assuming that the key is truly random, large enough and well protected, the previous attack is rendered useless, and to the best of our knowledge the attacker will need to brute force all possibilities (i.e. hash( ‘111-111-111’ + 0x00…001 ), hash( ‘111-111-111’ + 0x00…002 ) … hash( ‘999-999-999’ + 0xFF…FFF ), as you can see this is far more expensive, and the larger the key, the better.

Is this better or worse than trying to brute force a symmetric key? That is a really difficult question as Laurentiu mentioned. Hashes are less expensive (computational wise) than decryptions, but there are too many factors to consider (domain of your plaintext, domain of the key, reusing keys, new attack methods being discovered, etc.).

The best option if you want to create an index over the encrypted data may be to create a completely new identifier for it, i.e. a customer ID that is completely unrelated to the data being protected, but we understand this option is not always possible due to business reasons.

I would recommend defining what assets you are trying to protect and against what kind of threats. From there you need to evaluate what options you have to protect against such threats, as well as what mechanisms (preferably use defense in depth) you have to prevent, detect and halt a possible attack, as well as what are the steps to follow after the situation is back under control.

Thanks a lot,

-Raul Garcia

SDE/T

SQL Server Engine