36,258 reputation
1485155
bio website linkedin.com/in/avidouglen
location Israel
age 40
visits member for 4 years, 7 months
seen 20 mins ago

Security expert and experienced Windows programmer


May
11
comment Access to other local files from a local HTML file
+1. An even more common scenario is installation media, including e.g. a readme.html file.
May
11
revised Access to other local files from a local HTML file
edited tags
May
11
awarded  Nice Answer
May
11
comment In what ways does Full or Partial Homomorphic Encryption benefit the cloud?
Interesting topic. A missing part of the question, I think, is "is homomorphic encryption considered secure, from a cryptanalysis PoV?"
May
11
revised In what ways does Full or Partial Homomorphic Encryption benefit the cloud?
edited tags
May
11
answered How would you reason with and work with the security paranoiac on your team?
May
11
comment How to best defend against Targeted Attacks?
If it is a targeted attack, they could just as easily target Macs. No advantage there, other than the generic one of mixing things up in the middle.
May
11
comment Incorrect use of HTTPS?
@Rory, that is strictly true, however I think this is more of a "user perception" type of thing - and for regular users, IF they happen to know/care about HTTPS at all, it looks like a problem with HTTPS.
May
11
comment How to review code for backdoors?
Think about it this way: a credit card comes into the system, and can be identified in code. It is then possible to correlate any use of that piece of data, no matter how obfuscated, and track anywhere the data goes or is used. Yes, you would need to specify what is interesting to you - e.g. you specified email and temp file, but you missed raw sockets - but it is possible to track and highlight all "suspicious" usages (for a given value of "suspicious").
May
11
comment How to review code for backdoors?
@D.W. ah, see - I agree with you there, if you use the term "general". However, as I said, if you limit what you're looking for, and define a specific type of backdoor, it is possible. Complicated, and dependant on the skill of the one doing it, but possible nonetheless.
May
11
revised Is there a way to identify the host of a malicious VM from across the network?
edited tags
May
11
comment How to review code for backdoors?
I think the issue is you're thinking of the traditional models of automated tools, ala fortify splint et al. There are some newer tools (such as the above Checkmarx, also others) that work very differently.
May
11
comment How to review code for backdoors?
@D.W. if you can define what type of backdoor you're looking for (as I listed some examples), you can definitely script up something appropriate. For example, I've built used to Checkmarx to build scripts (though they call them "queries") to discover any type of special authentication bypass. I've also done the same for backdoor stealing of creditcards.
May
11
answered How to review code for backdoors?
May
10
comment How to review code for backdoors?
:). yup, you pretty much covered almost all... See my addition below.
May
10
revised What are the main issues and best practice security controls when exposing SIP and H.323 to the Internet?
edited tags
May
9
revised Long running SMTP session
edited tags
May
8
revised SSL replay attack when client/server random is missing
edited tags
May
8
revised symmetric encryption session keys in SSL/TLS
Added point.3, as per Thomas
May
8
comment symmetric encryption session keys in SSL/TLS
LOL, though this is true enough, Quantum computing always makes me laugh... Though of course I realize that it's probably just a question of time...