So I can learn what I need for both a new job and my game, I'm reading the massive ASP.NET Core In Action by @andrewlock.bsky.social. My roommate called it a magical tome and pointed out: there's even a wizard on the cover! Anyway, now I imagine I'm reading a magical tome for casting complex spells

Blogged: Making foreach of an IEnumerable allocation-free, using reflection and dynamic methods andrewlock.net/making-forea... In this post I describe why foreach sometimes allocates, and show how you can use DynamicMethod and Reflection.Emit to go allocation-free #dotnet #csharp

Blogged: The Windows File Explorer replacement, File Pilot, is awesome andrewlock.net/windows-expl... In this post I describe my experience with the Windows File Explorer replacement, File Pilot. It's blazingly fast, feature rich, and has hotkeys everywhere

Blogged: Recent updates to NetEscapades.EnumGenerators: new APIs and System.Memory support andrewlock.net/updates-to-n... In this post I describe some recent changes to the NetEscapades.EnumGenerators source generator, including support for the System.Memory package and new APIs #dotnet

HeroDevs has joined Microsoft, Canonical, and Red Hat as a member of the .NET Security Group www.herodevs.com/blog-posts/h...

Blogged: [HOWTO] Implement Audit Logging in a .NET Core application using Entity Framework Core and Audit.NET #dotnet #dotnetcore #efcore #auditdotnet #auditing #auditlog #audittrail #traceability

Also a great follow up :) andrewlock.net/migrating-co...

The new Spectre.Console (and Spectre.Console.Cli) website is now live! 🎉 This is all courtesy of @philco.bsky.social, who has done an amazing job, just as he did with the previous website. spectreconsole.net

Blogged: Digital Authentication and Identity validation damienbod.com/2025/12/20/d... #oidc #identity #iam #swiyu #eid #oauth #dpop #openid #security #ecollecting #authentication #loa #loi #vc #oauth2 #swiss #ch #cybersecurity

Today I ran into a deadlock in VS2026. I debugged it, and it turned out to be a common issue you may run into when writing a profiler. I wrote a short article about it: minidump.net/investigatin...

Creating a .NET CLR profiler using C# and NativeAOT with Silhouette | by Andrew Lock buff.ly/8dnlOXH #dotnet #programming #csharp #profiler #aot

Blogged: Creating a .NET CLR profiler using C# and NativeAOT with Silhouette andrewlock.net/creating-a-d... In this post I look at how to create a simple .NET profiler. But instead of using C++, the profiler uses C# and NativeAOT with @kevingosse.net's Silhouette library #dotnet

Blogged: Trying out the Zed editor on Windows for .NET and Markdown andrewlock.net/trying-out-t... In this post I try out Zed on Windows to see if it can replace my VS Code usages for quick edits of .NET projects and writing Markdown documents. #dotnet

Kind of scary when you think about it: nesbitt.io/2025/12/06/g...

Blogged: Recent updates to NetEscapades.EnumGenerators: [EnumMember] support, analyzers, and bug fixes andrewlock.net/recent-updat... In this post I describe some recent changes to the NetEscapades.EnumGenerators source generator, including support for [EnumMember] and new analyzers #dotnet

MSBuild tip: if you're working with binlogs, set the environment variable MSBuildLogPropertyTracking=15. It enables logging of where each property was initially assigned from during evaluation and lights up more features in the binlog viewer.

And it's up! All together now... 🎶 Somebody told me the user provider should use an adaptor to proxy the query factory builder... 🎶 www.youtube.com/watch?v=p03o...

Blogged: Exploring the .NET boot process via host tracing andrewlock.net/exploring-th... In this post we enable host tracing and use that to understand how a .NET app boots up via the dotnet muxer, hostfxr, and hostpolicy.dll #dotnet

Great post about TUnit here medium.com/@thomhurst/t...

I've also put a blog post together which outlines what this is, how it might affect your web framework or reverse proxy, and things you can put to decision makers. rjj-software.co.uk/blog/cve-202...

If you learn one thing today, please let it be about CVE-2025-55315. And if you want a place to start, you could try this conversation I had with @unixterminal.bsky.social: dotnetcore.show/season-8/hay...

Blogged: Companies complaining .NET moves too fast should just pay for post-EOL support andrewlock.net/companies-us... In this post I describe a solution to .NET "releasing too quickly": just pay for support of older versions, such as HeroDevs' Never Ending Support for .NET 6… #dotnet @hero.dev

Blogged: Companies complaining .NET moves too fast should just pay for post-EOL support andrewlock.net/companies-us... In this post I describe a solution to .NET "releasing too quickly": just pay for support of older versions, such as HeroDevs' Never Ending Support for .NET 6… #dotnet @hero.dev

Given the port from Disqus to Gisqus worked so well for my personal website (thanks to @andrewlock.bsky.social! 🙏), I've just done the same for the podcast! A good time to go and comment on your favorite episodes! 😊 unhandledexceptionpodcast.com

.NET 10 Breaking Changes To Keep An Eye On When Upgrading duendesoftware.com/blog/2025110...

Blogged: Easier reflection with [UnsafeAccessorType] in .NET 10 andrewlock.net/exploring-do... In this post I show how to work with [UnsafeAccessor] to do 'easier' reflection and how to use .NET 10's [UnsafeAccessorType] with types you can't reference at compile time #dotnet

Blogged: Understanding the worst .NET vulnerability ever: request smuggling and CVE-2025-55315 andrewlock.net/understandin... In this post I discuss request smuggling, the recent vulnerability in ASP.NET Core with a severity score of 9.9, and how attackers could exploit it #dotnet #aspnetcore

Blogged: Implement a secure MCP server using OAuth DPoP and Duende identity provider damienbod.com/2025/11/03/i... #aspnetcore #mcp #llm #duende #openidconnect #oidc #oauth #dpop #jwt #openai #ai

Understanding the worst .NET vulnerability ever: request smuggling and CVE-2025-55315 by @andrewlock.bsky.social andrewlock.net/understandin... #aspnetcore

Blogged: Understanding the worst .NET vulnerability ever: request smuggling and CVE-2025-55315 andrewlock.net/understandin... In this post I discuss request smuggling, the recent vulnerability in ASP.NET Core with a severity score of 9.9, and how attackers could exploit it #dotnet #aspnetcore

Blogged: Adding metadata to fallback endpoints in ASP​.NET Core andrewlock.net/adding-metad... In this post I discuss fallback endpoints and show how adding metadata to MVC or Razor Page fallback endpoints has some quirks to be aware of #dotnet #aspnetcore

I just published a new article: Using profiler function hooks in .NET with Silhouette. In the process, we also learn how to use static linking with NativeAOT. minidump.net/using-functi...

Blogged: Publishing NuGet packages from GitHub actions the easy way with Trusted Publishing andrewlock.net/easily-publi... In this post I describe how you can use nuget's new Trusted Publishing feature to publish NuGet packages from a GitHub Actions workflow #dotnet #NuGet #GitHubActions

Blogged: sleep-pc: a .NET Native AOT tool to make Windows sleep after a timeout andrewlock.net/sleep-pc-a-d... In this post I describe a small native AOT .NET tool that I built to force a Windows PC to go to sleep after a timer expires #dotnet

As requested, I published an article about how the UI profiler works: minidump.net/measuring-ui... It allows me to measure the responsiveness of Visual Studio when running with ReSharper, in various conditions. I also made the source code available on github: github.com/kevingosse/U...

.NET STS releases are now supported for 2 years instead of 18 months starting with .NET 9 (the current STS). STS releases now go out-of-support on the same day as the previous LTS release. Upgrading to an STS release will no longer cause you to lose support! devblogs.microsoft.com/dotnet/dotne...

Supporting platform-specific .NET 10 tools on old .NET SDKs Exploring the .NET 10 preview - Part 8 andrewlock.net/exploring-do... In this post I look at the advantages, trade-offs, and implications of the new platform-specific .NET tool feature added in .NET 10 and how to support old SDKs #dotnet

Blogged: Packaging self-contained and native AOT .NET tools for NuGet - Exploring the .NET 10 preview - Part 7 andrewlock.net/exploring-do... This post looks at the new support for platform-specific .NET tools that lets you pack tools as self-contained or Native AOT packages #dotnet

If you're using github.com/VerifyTests/..., e.g. to protect your library's public API, also check out plugins.jetbrains.com/plugin/17240... created by Mathias Koch.

Great post! Something I think missed (because it is not correctly documented😀) is `dotnet tool install --allow-roll-forward`. You can use this when installing a tool to force it to allow roll forward, even if the tool itself doesn't. Unfortunately I can't recall which SDK introduced it.

Blogged: Using and authoring .NET tools andrewlock.net/using-and-au... In this post I describe some of the complexities around authoring .NET tools, specifically around supporting multiple .NET runtimes and testing in CI #dotnet

Blogged: Fixing an old .NET Core native library loading issue on Alpine andrewlock.net/fixing-an-ol... In this post I walk through the process of solving a native library loading issue on alpine with an old .NET runtime, showing the steps we took and the solution #dotnet

Running .NET in the browser without Blazor by @andrewlock.bsky.social andrewlock.net/running-dotn... #aspnetcore #blazor

Blogged: Converting an xUnit test project to TUnit andrewlock.net/converting-a... In this post I discuss the new TUnit testing framework, why I ported one of my libraries to use it instead of xUnit and related issues I had to deal with #dotnet #testing

Blogged: Reset Cookies and force new sign-in using ASP.NET Core Identity damienbod.com/2025/08/18/r... #aspnetcore #identity #iam #cookie #duende #dotnet #net

Redid the way my content engine handled file watchers thanks to this post ( and @maartenballiauw.be, @woodruff.dev , @khalidabuhakmeh.mastodon.social.ap.brid.gy on @breakpoint.show ). Took the drifter example and tweaked it so that the lifetime of the object is determined by a file watcher.

Andrew Lock explains that .NET 10 preview 6 adds passkey support to ASP.NET Core Identity, enabling passwordless login with WebAuthn in the new Blazor template. via andrewlocknet https://andrewlock.net/exploring-dotnet-10-preview-features-6-passkey-support-for-aspnetcore-identity/

Blogged: Running .NET in the browser without Blazor andrewlock.net/running-dotn... In this post I show how to run .NET in your browser without using Blazor, and instead rely on lower-level abstractions provided by [JSImport] and [JSExport] #dotnet #aspnetcore #wasm #webassembly

A while back, I created "dotnet make" which will invoke your favourite build tool (cake, fake, make, nuke, csproj, fsproj, proj, sln) by convention, regardless of the current working directory in the repository. github.com/patriksvenss...

Blogged: Passkey support for ASP.NET Core identity - Exploring the .NET 10 preview - Part 6 andrewlock.net/exploring-do... In this post I look at the passkey support added to ASP.NET Core Identity and the Web App template, explore how it works, and look at the implementation #dotnet #aspnetcore