The C# study group meeting last night was quite good.  More of what Michael wanted - lots of heckling and questions (even from the presenter to the audience).  Paul Lockwood gave us a brief synopsis of Writing Secure Code.  He gave quite an impressive demo of a buffer overrun.  I've always heard of buffer overruns, and I knew in theory what they were, but I've never really seen one.  He showed us (in ANSI C no less) how to do one, and I was extremely impressed.  Also a quick overview of SQL Injection (watch out for that XP_CMDSHELL!) and mitigation steps for the whole thing.  I can't say that (aside from the demo) it was new to me, Glen Gordon has been doing a fantastic job of pounding security into me at the several MSDN events I've gone to.

After the razzle-dazzle security overview, Keith Rome gave us a talk on SOA without using web services over HTTP.  Keith demo'd sending SOAP envelopes across TCP with distinct receiver facades, sender agents, chicken nuggets, and an architecture UML diagram laid out in MSPaint.  Great job, and Keith, don't forget to e-mail me that code before you nuke your VM.

-- Matt Ranlett