28,975 reputation
1168143
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 3 years, 9 months
seen yesterday

Security expert and experienced Windows programmer


Aug
21
comment If you have option to choose between static code analysis vs dynamic code analysis which one would you pick and why?
Which would you rather, a dentist or a heart specialist? I can't afford to send you to both.
Aug
21
revised White-box vs. Black-box
Area51 proposal not really relevant anymore...
Aug
20
awarded  Notable Question
Aug
5
comment How to deal with misbehaving clients on an authoritative server?
This is squarely a security question, definitely not at all SF, not even programmers.se - its not about "how to do it", the question is basically "what do we do with misbehaving users / requests". If this was on programmers.se, it should be migrated here.
Aug
4
awarded  Famous Question
Aug
3
revised what type of database server is used by fb?
edited tags
Jul
29
comment How should I distribute my public key?
hehe DNSSSEC lawl @PieterEnnes
Jul
25
awarded  Favorite Question
Jul
23
revised Why do static code analyzers cite CWE rather than CVE in their findings?
edited tags
Jul
21
comment Tools to make a security researchers life easier - tracking vulnerability research
+1, but I would just add that you should also include some security fields, starting with marking it as being "security", and having a risk, at the very least. Later you can add additional fields, like vuln class, exploitation, etc.
Jul
20
comment MAC vs DAC vs RBAC
Welcome to Information Security! This is related but not a duplicate, might have interest for you: security.stackexchange.com/a/348/33
Jul
17
reviewed Leave Open Girlfriend just sent Personal info over email
Jul
17
comment Is “the oft-cited XKCD scheme […] no longer good advice”?
@wfaulk Password Safe is Bruce Schneier's creation, so his argument about the competition still stands. Your fail statement fails ;-)
Jul
17
comment Is “the oft-cited XKCD scheme […] no longer good advice”?
@Doorknob "random thing I thought of" - that is a contradiction. Humans do not think of random things, in fact humans are very poor generators of entropy. The emphasis and assumption is that these are actually random, i.e. NOT something you "think of".
Jul
15
awarded  Good Answer
Jul
13
revised How long does it take for Google to detect click fraud and suspend an AdSense account?
edited tags
Jul
10
revised How to turn of telnet and FTP on Thomson 789vn router?
edited tags
Jul
10
revised NMAP not reporting open ports with -sS scan
edited tags
Jul
10
revised Can't successfully do an idle scan
edited tags
Jul
10
answered What implementations are possible for dual control?