36,918 reputation
1488159
bio website linkedin.com/in/avidouglen
location Israel
age 40
visits member for 4 years, 8 months
seen 6 hours ago

Security expert and experienced Windows programmer


20h
reviewed Close Is there a tool in Kali Linux that get Wi-Fi passwords only by capturing the traffic?
20h
reviewed Close Writing an information security policy
20h
reviewed Leave Open Server authentication during the SSL handshake
20h
reviewed Leave Closed Where to search for vulnerabilities in a WordPress theme?
1d
reviewed Close How do I completely delete the “Chrome Remote Desktop Viewer” that comes with Google Chrome?
1d
reviewed Close Searching for an updated IP/URL Blacklist
1d
reviewed Close Why can't you steal the synchroniser token to do CSRF?
2d
comment How can I decrypt my files from “Cryptowall” encryption?
Also - I am sorry to say, I just had to deal with this myself (for a family member, not myself) and sadly enough it looks like they are one of the few that got crypto right - which means there is no simple way to break it :-( I really hope to be proven wrong...
2d
comment How can I decrypt my files from “Cryptowall” encryption?
For one thing, stop running random programs you find on the internet - this is how you got caught in the first place! ;-)
2d
awarded  Constituent
Jul
24
comment How hard is it to intercept SMS (two-factor authentication)?
You're talking about two step authentication, not two factor. SMS cannot be a valid "something you have" authentication factor, for several reasons - but it is a good out-of-band solution, and does improve security in some scenarios.
Jul
24
comment The best algorithm for defensing DOS attack
Are you talking about DDoS? Or flooding? Or brute forcing? I think you need to read up on the basics here.
Jul
24
comment How to define the rate in rate limiting
Also, what does this have anything to do with CSP (Content Security Policy)?
Jul
24
comment How to define the rate in rate limiting
Your question is very unclear - what kind of requests? why are you rate limiting them? What are the risks and attacks you're trying to mitigate?
Jul
22
revised The best algorithm for defensing DOS attack
edited tags
Jul
22
comment The best algorithm for defensing DOS attack
DoS is not an attack, it is a result, the damage from the attack. There are many different types of attacks that could result in a DoS (e.g. account lockouts, flooding, BO crashes, infinite looping, SYN flood, etc etc), and each one needs to be mitigated differently. Please be more specific about the attack you're trying to defend against.
Jul
22
revised Comparing the 2FA Vendors
Clarified and focused on selection process, not specific vendors
Jul
22
comment Should I implement incorrect password delay in a website or a webservice?
@tylerl well put, however the only problem I have with this is the consideration for IPs. The problem with that is often IPs are not used by a single user - corporate proxies, shared IPs, rotating DHCP for some dialups, heck some ISPs even use NAT for their users. So cooldowning by IP could effectively DoS all other users on that IP.
Jul
21
awarded  Good Answer
Jul
21
awarded  passwords