Beware of user information being shared with all SharePoint users in extranet scenarios

Your SharePoint extranet may have a serious security hole

If you think the SharePoint security model shields you from any security – or, more precisely, privacy – concern when it comes to your public-facing SharePoint sites, think again. As a matter of fact, privacy has never been a huge concern for SharePoint, simply because SharePoint was originally built for – and still mostly caters […]


Beware of the ASP.NET SQL Membership Provider for your SharePoint Extranet

If you’re exploring how to leverage Forms-based Authentication for your SharePoint Extranet, chances are you’ve run into the ASP.NET SQL Membership Provider. Aside from the MSDN link I just pointed to, you’ll probably find countless tutorials about it online, as well as a few open-source products (such as the CodePlex SharePoint FBA Pack) and other […]


A chat tool for SharePoint 2013

It’s been a while Mark Jones started to gently pressure me to write a blog post about CometChat for SharePoint, and today I’ve eventually given in. It turns out quite a few people have wondered how we implemented the chat tool on the SP24 Conference web site, so this blog post will try to explain […]