28,970 reputation
1168143
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 3 years, 9 months
seen 3 hours ago

Security expert and experienced Windows programmer


Mar
28
awarded  Nice Answer
Mar
26
revised How do I configure nmap to verify my firewall is performing stateful packet inspection?
edited tags
Mar
26
comment Starting with sandbox development
Is there a question here? I suggest you edit your post to clarify what it is you're asking.
Mar
26
revised How would I implement “Broadcast Encryption”?
edited tags
Mar
26
comment xp_cmdshell: should it ever be used?
@SteveS - current version of MSSQL allow you to set a different OS account to run xp_cmdshell commands under.
Mar
26
comment OpenBSD 32 or 64bit installer?
Can you please focus your question on security topics? Is your question specifically wrt ASLR, or is it something else?
Mar
26
revised OpenBSD 32 or 64bit installer?
edited tags
Mar
26
revised Exploit-db like websites, where people can search for security bugs
edited tags
Mar
26
revised OpenBSD vs. NetBSD security
edited tags
Mar
25
revised Windows Honeypot user account for tracking laptop
edited tags
Mar
24
comment Where can I find a list of un-patched CVEs for a specific piece of software?
If it is registered as a CVE, it can't really be considered a zero-day anymore, can it?
Mar
24
comment How reliable is a password strength checker?
@SteveS - I took a trivial calculation, of how many possibilities there are in the acceptable range (for each character, 85|54 possibilities), and translated that into how many bits are required to represent those possibilities. Admittedly this was a pretty rough estimation, back-of-the-napkin type calculation, not very lab-worthy (hence the approximations), but I think it's still relatively representative.
Mar
24
comment How reliable is a password strength checker?
@iijj, thats exactly correct - length is more important.
Mar
24
revised How reliable is a password strength checker?
fixed mathness
Mar
24
answered How reliable is a password strength checker?
Mar
23
comment Download Windows 7 security updates and patch offline
@Rory ah, but you're still talking about general usage scenarios. What about the specific use case - connected to the Internet, but no outgoing connections except to Windows Update?
Mar
23
comment Download Windows 7 security updates and patch offline
@Rory yes, it makes a huge difference - for regular web usage. But in this case he's talking about just updating windows - IMMO "passive" attacks would be mostly irrelevant (or nearly so, relatively speaking), whereas "active" attacks would be much more in his face - and those would be stopped more by a FW than patching (though I agree there are some cases where that is relevant too, if the FW is onbox and it is connected directly to the Internet).
Mar
22
comment AntiXSS for ASP.NET 1.1
That's what I was afraid of... Still hoping someone has/had an alternative that they can just use...
Mar
22
asked AntiXSS for ASP.NET 1.1
Mar
22
comment Encryption and the “security time decay” of prior encrypted data
@Rory I meant the term, and as trying to specify the length thereof. As opposed to just a general "it's not infallible and will eventually break"