31,159 reputation
1275149
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 4 years, 1 month
seen 17 hours ago

Security expert and experienced Windows programmer


21h
comment Is SSL more secure than encoding?
Heck, I would even say "anyone with the technical capabilities to intercept your message over the air" would be able to see right through it.
21h
comment Is SSL more secure than encoding?
Q: "If you call a dog's tail a leg, how many legs would the dog have?" A: "Four, because it doesn't matter a damn what you call the tail, it's still not a leg."
21h
comment Is SSL more secure than encoding?
Why on earth would you call that security? It's not even "... by obscurity". It's like that guy from the kids' song, Yankee Doodle - just cuz you call it "macaroni", doesn't mean it is anything BUT a feather.
21h
comment Things to remember while building a password manager
Also required is in-memory protection, and don't forget about the component properties, and if this is in .NET or Java you have to worry about immutable strings, and and and...
21h
comment Things to remember while building a password manager
There is no such thing as a "simple" or "basic" password manager. Unless it is broken, and worthless...
1d
revised Things to remember while building a password manager
edited tags
1d
comment Things to remember while building a password manager
@Curious: Because a password manager is never simple.
2d
awarded  tls
2d
comment What Man-made Physical Threat Could Pose Severe Danger to a Server Farm?
Not my realm of expertise, but I would lean more towards something with the HVAC - broken AC units, for example, will quickly lead to massive server overheating and crashes, sometimes worse. You could try to make that extreme... In that scenario (as one of the answers stated a threat to machines but not people), it would be more reasonable to deal with up-to-minute backups, since the protocol is (usually) to shut down servers in an orderly fashion and perform failover to the backup site - but not in an immediate "flip the switch" fire style. But then again as I said, this is not my expertise.
Dec
15
reviewed Close honeypot configuration (honeyd) - finding attack
Dec
14
reviewed Close how make some attack to my own honeypot
Dec
14
reviewed Close Unable to verify the certificate from startSSL?
Dec
14
reviewed Close Should the whole web *really* be encrypted? Isn't plaintext sometimes faster/better?
Dec
11
comment Remote Registry allows bypass of 2FA enforcement with 1FA
ephams.com/2013/08/09/…
Dec
11
comment Remote UAC bypass and Microsoft does not regard it as security Boundry
Or, equally likely, didnt realize that he already approved the UAC prompt when he opened MMC.exe in the first place.
Dec
11
comment Confusion about keepass portable and keyfile on an USB-stick
Correct. You would need a very strong password for your cloud service, and remember that - and you would also need to remember another, different, very strong password for your keepass database. I recommend Diceware passphrases - easy to remember, and can be ridiculously strong (I have no problem keeping half a dozen 5-word passphrases in memory, and I'm practically senile. Though any more than that would be a problem...)
Dec
11
answered Confusion about keepass portable and keyfile on an USB-stick
Dec
11
comment Remote UAC bypass and Microsoft does not regard it as security Boundry
@raven for the record (relating to your comments elsewhere) it is not "the mods" downvoting your questions, it is the community as a whole - because they were not good questions. Likewise, if your questions get closed, it is not because we don't like your SUPERHACK, again it is because it is not a good question, that fits well on our site. Please take a few minutes to take the tour, and peruse the help center.
Dec
9
reviewed Close How do I start securing a virtual appliance to avoid manipulation?
Dec
9
comment generate certificate at runtime and validate
Resetting close votes so this doesn't wrongly get migrated to the wrong site. It belongs here.