30,646 reputation
1173149
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 4 years
seen 15 hours ago

Security expert and experienced Windows programmer


14h
awarded  Nice Answer
16h
comment How do you explain to experts that a Database Server should not reside in the DMZ?
Though in that case the better solution would be to leave out a plate of cookies, but I think at that point the analogy starts breaking down....
16h
comment How do you explain to experts that a Database Server should not reside in the DMZ?
Hmm... perhaps you should adjust your analogy "Leave the jewelry box outside the house so the robbers don't make a mess in the kitchen when they make a sandwich because they got hungry while doing all the robbing."
17h
comment How do you explain to experts that a Database Server should not reside in the DMZ?
Good that you also gave practical solutions. My feeling was that if they wanted practical solutions it would be trivial to find one, even for incompetents - I hope that's not the case :-)
17h
revised How do you explain to experts that a Database Server should not reside in the DMZ?
deleted 8 characters in body; edited tags
18h
answered How do you explain to experts that a Database Server should not reside in the DMZ?
2d
comment Which is more in demand Web or Wireless pen-testing.?
This question appears to be off-topic because it depends far too much on the specific context and circumstances, not to mention location, specific skillset, personal experience, and of course connections.
2d
comment ISAKMP and OSI layer
Umm... you do know that the OSI model isn't actually USED on the internet today, right? That's why you see it on the TCP model (which is used nearly universally), and find nothing regarding the OSI model - which is, basically, irrelevant.
Nov
25
comment How strong is a simple XOR encryption with random IV?
@thexacre no, his scheme does not have the required properties, which is the problem. But in concept he is trying to aim for something like an OTP (some unnecessary additions notwithstanding) - at least that's the way I am understanding it.
Nov
24
revised How strong is a simple XOR encryption with random IV?
Formatting
Nov
24
answered How strong is a simple XOR encryption with random IV?
Nov
24
awarded  Good Answer
Nov
23
comment PHP secure random number generator
These two statements have no business being together (with regards to crypto code): "It look pretty secure to me" and "I'm no cryptography expert."
Nov
23
reviewed Close how to gain root access to linux machine?
Nov
20
revised Is a government entity capable of establishing a secure virtual currency system?
edited tags
Nov
20
revised Life in cybersecurity: How do I get there?
edited tags
Nov
20
reviewed Leave Open Industry average for security as a percentage of product budget?
Nov
20
reviewed Close How and why does not having https allow people to trace my browsing habits if at home?
Nov
20
reviewed Close Advice on if I should talk at my local user group about NIST, InfoSec etc
Nov
20
reviewed Leave Open Penetration Testing on Thick Client Application