37,168 reputation
1488159
bio website linkedin.com/in/avidouglen
location Israel
age 40
visits member for 4 years, 8 months
seen yesterday

Security expert and experienced Windows programmer


Jul
31
reviewed Close Any audited cryptography library?
Jul
31
reviewed Leave Open How to Perform SQL insert or update command using SQL injection
Jul
31
comment Do card issuers give merchants new expiry dates for recurring payments?
"expiration date" - are you talking about e.g. credit cards?
Jul
31
reviewed Leave Open Is this code javascript vulnerable to DOM based XSS?
Jul
31
comment Is this code javascript vulnerable to DOM based XSS?
The simple answer is: it depends. Depends on a lot of information not present in the question, and is not possible to include in the question.
Jul
31
comment Is sending a string (representing a HTTP message) over SSL the same as sending a HTTPS message?
@begueradj I absolutely agree with you on that, except that usually it doesn't help but hinders. That's why I said your first 3 sentences are great, the rest is misleading and confusing (besides being technically wrong...)
Jul
31
comment Is sending a string (representing a HTTP message) over SSL the same as sending a HTTPS message?
It has been pointed out (see comments) that the OSI model is an over-generalisation and does not fit very well here. This is true. However, the use of this model is to demonstrate that SSL sits "somewhere" in between TCP and HTTP. It is not strictly accurate, and is a vague abstraction of reality.
Jul
31
comment Is sending a string (representing a HTTP message) over SSL the same as sending a HTTPS message?
begueradj, SSL doesn't act on ANY layer of the OSI model, and neither does TLS - because they do not use the OSI model. Despite the misleading comment from Wikipedia that @Scott posted.
Jul
31
comment Is sending a string (representing a HTTP message) over SSL the same as sending a HTTPS message?
@immibis yes, that is what I meant when I said "the CONNECT method is not anything special in HTTPS, it is part of the HTTP spec." Did I miss anything there?
Jul
30
reviewed Leave Open Simple exploit leads to wrong EIP and EBP
Jul
30
comment Is sending a string (representing a HTTP message) over SSL the same as sending a HTTPS message?
I really wanted to upvote you - except for the OSI model part. SSL is definitely NOT on OSI layer 5, since SSL has nothing to do with the OSI model, it lives in TCP/IP. OSI model is irrelevant ;-)
Jul
30
reviewed Leave Open A sneaky way of disabling Microsoft Security Essentials?
Jul
30
revised Can wiped SSD data be recovered?
edited tags
Jul
30
answered Is sending a string (representing a HTTP message) over SSL the same as sending a HTTPS message?
Jul
29
comment Security Implications of Neglecting the Extra Byte for NULL Termination in C/C++ Arrays
Cyan, part of the problem is that, as usual, Gibson did not quite understand the topic he was discussing, thus conflating terms often and making a general mess of things. You'd be best off completely ignoring what he said, since it's only value is in confusion. You should start fresh with a proper explanation.
Jul
29
comment OpenVPN redirect-gateway def1 bypass-dhcp not working on 3G
Hi @Gabriel, welcome to Information Security. Please do not crosspost on other SE sites, instead flag the question to be migrated over. Thanks!
Jul
28
reviewed Close Is there a tool in Kali Linux that get Wi-Fi passwords only by capturing the traffic?
Jul
28
reviewed Close Writing an information security policy
Jul
28
reviewed Leave Open Server authentication during the SSL handshake
Jul
28
reviewed Leave Closed Where to search for vulnerabilities in a WordPress theme?