28,975 reputation
1168143
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 3 years, 9 months
seen 15 hours ago

Security expert and experienced Windows programmer


Mar
22
comment Encryption and the “security time decay” of prior encrypted data
Interesting idea, I guess this is kind of a security "half-life" for crypto... I'm curious what will turn up here.
Mar
22
revised Encryption and the “security time decay” of prior encrypted data
edited tags
Mar
19
revised OpenSSO and Basic Auth together
edited tags
Mar
19
revised How to find out if a connection encrypted?
edited tags
Mar
19
revised Firewall rules to block unwanted protocols on given ports
edited tags
Mar
18
revised Is disabling auto-run enough to protect against malicious code from removable media automatically infecting a machine?
edited tags
Mar
18
comment What factors do you use to choose data loss prevention techniques to use, if any?
and dont forget OS support - many DLP products wind up not supporting some client OSs (notably OSX and Linux)
Mar
18
revised What factors do you use to choose data loss prevention techniques to use, if any?
edited tags
Mar
18
revised Anybody have additional information on the EMC RSA SecurID compromise?
edited tags
Mar
17
answered Are there any security measures that are resistant to a brute force attack?
Mar
17
comment Are there any security measures that are resistant to a brute force attack?
The original q on stackoverflow: stackoverflow.com/q/5336992/10080
Mar
17
revised How to apply FIPS to Microsoft Access database with custom VBA
edited tags
Mar
17
revised How can Network Disconnect be implemented for RDP on a Windows system (2003/XP or later)?
edited tags
Mar
17
comment In inSSIDer, what is the difference between WPA2-CCMP and RSNA-CCMP?
By that, I take it you're the original programmer for inssider? Feel free to point that out :)
Mar
16
revised Setting DHCP lease time to very small time increases security?
edited tags
Mar
16
answered Security Architecture - Settings to drive UI and Privileges (Rights) - Role-Based, per User-Account
Mar
16
revised Should the bit-strength selection of a child certificate be influenced by the CA or the chain?
edited tags
Mar
16
revised What SSL key should I make for IIS: RSA or DH? What bit length is appropriate?
edited tags
Mar
14
comment When should I not use CSRF protection for a form?
... curious what other people disagree with here...
Mar
14
comment When should I not use CSRF protection for a form?
Wrt development process, I'm not familiar with Twig or Liquid, but there are frameworks that let you seperate UI and code (i.e. "codebehind"). Also in many frameworks the CSRF protection is configuration-based, on shouldnt interfere with UI designers.