29,755 reputation
1170146
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 3 years, 11 months
seen yesterday

Security expert and experienced Windows programmer


Mar
30
awarded  Nice Answer
Mar
29
comment Are there any serious problems with this technique for generating symmetric keys?
@Rook, the point of adding the known value isnt to create entropy, it is to make the first part different from the second part. That way the keys are different, even though they're done together.
Mar
29
comment What tools are available to assess the security of a web application?
I beg to differ - while NTOSpider is indeed a solid tool, it is far from "undisputed". I know of quite a few vendors that would "dispute" that claim, correctly or not.
Mar
29
comment Web server file sniffing
That's not really so common...
Mar
29
revised Web server file sniffing
edited tags
Mar
29
answered Web server file sniffing
Mar
29
answered Is Content Security Policy an approach that is worth to support?
Mar
29
comment Are there any serious problems with this technique for generating symmetric keys?
+1 for simplicity, +100 for reusing existing channel.
Mar
29
revised Are there any serious problems with this technique for generating symmetric keys?
edited tags
Mar
29
comment What tools are available to assess the security of a web application?
Specifically, according to PCI you would need to check for the current OWASP Top 10.
Mar
28
revised Wireless auto-join on laptops
edited tags
Mar
28
revised Is Content Security Policy an approach that is worth to support?
edited tags
Mar
28
awarded  Nice Answer
Mar
26
revised How do I configure nmap to verify my firewall is performing stateful packet inspection?
edited tags
Mar
26
comment Starting with sandbox development
Is there a question here? I suggest you edit your post to clarify what it is you're asking.
Mar
26
revised How would I implement “Broadcast Encryption”?
edited tags
Mar
26
comment xp_cmdshell: should it ever be used?
@SteveS - current version of MSSQL allow you to set a different OS account to run xp_cmdshell commands under.
Mar
26
comment OpenBSD 32 or 64bit installer?
Can you please focus your question on security topics? Is your question specifically wrt ASLR, or is it something else?
Mar
26
revised OpenBSD 32 or 64bit installer?
edited tags
Mar
26
revised Exploit-db like websites, where people can search for security bugs
edited tags