29,685 reputation
1170146
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 3 years, 11 months
seen 16 hours ago

Security expert and experienced Windows programmer


Mar
26
revised OpenBSD vs. NetBSD security
edited tags
Mar
25
revised Windows Honeypot user account for tracking laptop
edited tags
Mar
24
comment Where can I find a list of un-patched CVEs for a specific piece of software?
If it is registered as a CVE, it can't really be considered a zero-day anymore, can it?
Mar
24
comment How reliable is a password strength checker?
@SteveS - I took a trivial calculation, of how many possibilities there are in the acceptable range (for each character, 85|54 possibilities), and translated that into how many bits are required to represent those possibilities. Admittedly this was a pretty rough estimation, back-of-the-napkin type calculation, not very lab-worthy (hence the approximations), but I think it's still relatively representative.
Mar
24
comment How reliable is a password strength checker?
@iijj, thats exactly correct - length is more important.
Mar
24
revised How reliable is a password strength checker?
fixed mathness
Mar
24
answered How reliable is a password strength checker?
Mar
23
comment Download Windows 7 security updates and patch offline
@Rory ah, but you're still talking about general usage scenarios. What about the specific use case - connected to the Internet, but no outgoing connections except to Windows Update?
Mar
23
comment Download Windows 7 security updates and patch offline
@Rory yes, it makes a huge difference - for regular web usage. But in this case he's talking about just updating windows - IMMO "passive" attacks would be mostly irrelevant (or nearly so, relatively speaking), whereas "active" attacks would be much more in his face - and those would be stopped more by a FW than patching (though I agree there are some cases where that is relevant too, if the FW is onbox and it is connected directly to the Internet).
Mar
22
comment AntiXSS for ASP.NET 1.1
That's what I was afraid of... Still hoping someone has/had an alternative that they can just use...
Mar
22
asked AntiXSS for ASP.NET 1.1
Mar
22
comment Encryption and the “security time decay” of prior encrypted data
@Rory I meant the term, and as trying to specify the length thereof. As opposed to just a general "it's not infallible and will eventually break"
Mar
22
comment Encryption and the “security time decay” of prior encrypted data
Interesting idea, I guess this is kind of a security "half-life" for crypto... I'm curious what will turn up here.
Mar
22
revised Encryption and the “security time decay” of prior encrypted data
edited tags
Mar
19
revised OpenSSO and Basic Auth together
edited tags
Mar
19
revised How to find out if a connection encrypted?
edited tags
Mar
19
revised Firewall rules to block unwanted protocols on given ports
edited tags
Mar
18
revised Is disabling auto-run enough to protect against malicious code from removable media automatically infecting a machine?
edited tags
Mar
18
comment What factors do you use to choose data loss prevention techniques to use, if any?
and dont forget OS support - many DLP products wind up not supporting some client OSs (notably OSX and Linux)
Mar
18
revised What factors do you use to choose data loss prevention techniques to use, if any?
edited tags