3,116 reputation
221
bio website goodenoughsecurity.blogspot.c…
location Jerusalem, Israel
age 40
visits member for 1 year, 8 months
seen Mar 6 at 7:06

Digital security professional and manager. Work on chip hardware security (smart cards, USB tokens, consumer electronics), DRM, proprietary cryptography and protocols, embedded software security, end-to-end system security and security policy.

IT security (especially password security) is a hobby.


Oct
30
revised Should I be concerned when a “Forgot Password?” tool sends my password in plaintext?
added 14 characters in body
Oct
30
answered How does syskey in Windows increase the security in a domain?
Oct
30
answered Should I be concerned when a “Forgot Password?” tool sends my password in plaintext?
Oct
29
answered Keyboard sniffing through audio recorded typing patterns
Oct
28
revised Storing OAuth and other authentication tokens
Minor wording change
Oct
27
answered Storing OAuth and other authentication tokens
Oct
25
comment How to suspend a user from my website and prevent them from creating a second account?
See security.stackexchange.com/questions/19251/…
Oct
25
answered How do I construct a rainbow table to crack a 6 character password?
Oct
25
awarded  Enlightened
Oct
24
awarded  Nice Answer
Oct
24
answered Are there really functioning quantum computers?
Oct
24
awarded  Nice Answer
Oct
23
reviewed Reviewed Payment security on Android App
Oct
23
revised Client side password hashing
Added clarification in last sentence
Oct
23
answered Client side password hashing
Oct
22
answered What is the potential impact of these SSL certificate validation vulnerabilities?
Oct
22
comment Can someone detect the URL an android app uses?
@CodesInChaos Good comment - made a small edit to clarify this point
Oct
22
revised Can someone detect the URL an android app uses?
Adding explanation that rooting helps if the certificate is hardcoded.
Oct
19
revised What is a DoS Attack and how does it differ from a DDoS attack?
added 2 characters in body
Oct
19
revised What is a DoS Attack and how does it differ from a DDoS attack?
added TL;DR