31,214 reputation
1275149
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 4 years, 1 month
seen 1 hour ago

Security expert and experienced Windows programmer


1d
comment How The Sony Hack Was Traced, and So Quickly?
twitter.com/SwiftOnSecurity/status/546426218489208832
1d
comment Why study Information Security?
Bewildered welcome to Information Security! I suggest you take a few moments to take the tour, so you can see how this site works - we don't have much conversational, subjective style questions here. Your are welcome to jump in to the DMZ (InfoSec chatroom) though - always happy to be conversational and subjective there! Btw I was going to comment that it sounds like you know EXACTLY why you are interested, but @cremefraiche already answered you... :-)
Dec
18
comment Is SSL more secure than encoding?
Heck, I would even say "anyone with the technical capabilities to intercept your message over the air" would be able to see right through it.
Dec
18
comment Is SSL more secure than encoding?
Q: "If you call a dog's tail a leg, how many legs would the dog have?" A: "Four, because it doesn't matter a damn what you call the tail, it's still not a leg."
Dec
18
comment Is SSL more secure than encoding?
Why on earth would you call that security? It's not even "... by obscurity". It's like that guy from the kids' song, Yankee Doodle - just cuz you call it "macaroni", doesn't mean it is anything BUT a feather.
Dec
18
comment Things to remember while building a password manager
Also required is in-memory protection, and don't forget about the component properties, and if this is in .NET or Java you have to worry about immutable strings, and and and...
Dec
18
comment Things to remember while building a password manager
There is no such thing as a "simple" or "basic" password manager. Unless it is broken, and worthless...
Dec
18
revised Things to remember while building a password manager
edited tags
Dec
18
comment Things to remember while building a password manager
@Curious: Because a password manager is never simple.
Dec
17
awarded  tls
Dec
16
comment What Man-made Physical Threat Could Pose Severe Danger to a Server Farm?
Not my realm of expertise, but I would lean more towards something with the HVAC - broken AC units, for example, will quickly lead to massive server overheating and crashes, sometimes worse. You could try to make that extreme... In that scenario (as one of the answers stated a threat to machines but not people), it would be more reasonable to deal with up-to-minute backups, since the protocol is (usually) to shut down servers in an orderly fashion and perform failover to the backup site - but not in an immediate "flip the switch" fire style. But then again as I said, this is not my expertise.
Dec
15
reviewed Close honeypot configuration (honeyd) - finding attack
Dec
14
reviewed Close how make some attack to my own honeypot
Dec
14
reviewed Close Unable to verify the certificate from startSSL?
Dec
14
reviewed Close Should the whole web *really* be encrypted? Isn't plaintext sometimes faster/better?
Dec
11
comment Remote Registry allows bypass of 2FA enforcement with 1FA
ephams.com/2013/08/09/…
Dec
11
comment Remote UAC bypass and Microsoft does not regard it as security Boundry
Or, equally likely, didnt realize that he already approved the UAC prompt when he opened MMC.exe in the first place.
Dec
11
comment Confusion about keepass portable and keyfile on an USB-stick
Correct. You would need a very strong password for your cloud service, and remember that - and you would also need to remember another, different, very strong password for your keepass database. I recommend Diceware passphrases - easy to remember, and can be ridiculously strong (I have no problem keeping half a dozen 5-word passphrases in memory, and I'm practically senile. Though any more than that would be a problem...)
Dec
11
answered Confusion about keepass portable and keyfile on an USB-stick
Dec
11
comment Remote UAC bypass and Microsoft does not regard it as security Boundry
@raven for the record (relating to your comments elsewhere) it is not "the mods" downvoting your questions, it is the community as a whole - because they were not good questions. Likewise, if your questions get closed, it is not because we don't like your SUPERHACK, again it is because it is not a good question, that fits well on our site. Please take a few minutes to take the tour, and peruse the help center.