33,982 reputation
1381151
bio website linkedin.com/in/avidouglen
location Israel
age 40
visits member for 4 years, 5 months
seen 8 mins ago

Security expert and experienced Windows programmer


1d
comment Public and private key geerating in C Code source ?
Aside from that, you shouldn't be looking for code to implement this, you should always be using existing APIs provided by the platform.
1d
comment Public and private key geerating in C Code source ?
I'm voting to close this question as off-topic because it is simply asking for a source code implementation.
Apr
24
reviewed Leave Closed “Transferring” SSL certificate to another person
Apr
22
comment Solution for Protocol Downgrade Attacks
Hi djrecker, welcome to Information Security. Can you please elaborate your question a bit, explain what you mean. What protocol, what kind of attack? How does SCSV solve this, why doesn't TLS? What exactly are you looking for, and include any background information and previous research you may have done... (I'd rather not close this unless necessary, so it doesn't go back to crypto.se).
Apr
22
comment Why does the user pick the password?
@SteveDL or even further, perhaps those developers are themselves malicious towards other sites.... xkcd.com/792
Apr
22
comment Popular Security “Cargo Cults”
@Hyppy That's the point, these are "cargo cults" - i.e. not correct. As to your point - SHA-2 is not acceptable for password protection either - see security.stackexchange.com/a/31846/33
Apr
22
revised Is cacert.org more harmful than self-signing?
edited tags
Apr
22
revised How can I explain self-signed certificates to users?
edited tags
Apr
22
revised Does an established ssl connection mean a line is really secure
Added note about mobile apps.
Apr
22
comment Why does the user pick the password?
@RenéG that's great, you have a super strong password... that you then went and shared on a few dozen different sites. At that point it doesn't matter how much entropy there is, one of the other sites knows your password. xkcd.com/792
Apr
22
comment Why does the user pick the password?
@Dennis Rate limiting to one password attempt per second wont help the 40% of users who typically chose one of the top TEN common passwords. What would help them is making them use a different password (and here you can argue about HOW MUCH entropy you actually need, but it still comes back to entropy.)
Apr
17
comment How to find more details on Invalid Certificates
Hi Damon, after you figure out how to examine the certs, if it turns out that it's not about root certificate as @M'vy mentions, those very last 2 bits of your q WOULD be on topic here....
Apr
17
revised How to find more details on Invalid Certificates
added 26 characters in body
Apr
16
revised Is malware or screen capture possible with iMac as external display?
edited tags
Apr
16
revised What does a Firewall mean by “connect to TCP port without your permission”?
edited tags
Apr
16
revised Is it possible to re-install an operating system over an encrypted system?
edited tags
Apr
16
revised Windows Server Update Services (WSUS) - can I pivot to a client machine?
edited tags; edited tags; edited tags
Apr
16
revised Determine Security Of A PDF File
edited tags
Apr
16
revised Web Crawler for ASP.NET site
edited tags
Apr
16
revised Block An IP Address Scanner On Mac
edited tags