31,244 reputation
1275149
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 4 years, 1 month
seen 5 hours ago

Security expert and experienced Windows programmer


Apr
20
comment Topics for SecureCoding course in C
A lot of good answers here, ultimately I chose @Ams's answer because there were a couple of good solid topics that I hadn't covered, but should. Thanks all!
Apr
20
accepted Topics for SecureCoding course in C
Apr
20
revised Secure memcpy for pure C
cross post
Apr
20
revised Secure memcpy for pure C
edited tags
Apr
20
revised Secure memcpy for pure C
added 76 characters in body
Apr
20
asked Secure memcpy for pure C
Apr
20
comment Is there an organization that reviews/approves crypto implementations?
+1. I'm pretty sure MS Windows' CryptoAPI was also certified thusly, and I think also the System.Security.Cryptography namespace classes in the .NET Framework. But I am not positive...
Apr
20
answered Legal process for suing joejobber?
Apr
20
revised Legal process for suing joejobber?
edited tags
Apr
17
comment Legal process for suing joejobber?
I'm sorry, but what is joejob? Or am I showing my ignorance?
Apr
17
comment Is Schneier's “Applied Cryptography” current?
@Gilles, thanks, I guess I should get me a copy of crypto eng. I've been putting it off...
Apr
17
answered MIME sniffing protection
Apr
17
comment MIME sniffing protection
Also, this question (security.stackexchange.com/q/600/33) shows some of the potential issues...
Apr
17
comment Topics for SecureCoding course in C
Thanks, decent idea, but harder to implement as a security lecture. The memory management I might be able to push on them, since there are so many other issues involved with that (if it was C++ on Windows I'd be pushing SAL, but it's not...). I'm open to ideas on how to deliver this effectively, though.
Apr
17
comment Topics for SecureCoding course in C
oo yeah, I'd love to tell them to stop using prehistoric C... in fact I have to restrain myself from saying that. But that's not really going to work... I suffice with being ridiculed for suggesting they try to minimize some of the dirty C tricks they love doing - creative pointer arithmetic, mangled memory management, and of course the beloved union which just makes my fibers scream... While this answer is very much coming from the same place as me, I have accepted that this is one battle that is hopeless... :(
Apr
17
comment Can my company see what HTTPS sites I went to?
Strictly speaking, the encrypted connection is created by sending a CONNECT http request, but that's not a "regular" HTTP request...
Apr
17
answered Is Schneier's “Applied Cryptography” current?
Apr
17
revised Is Schneier's “Applied Cryptography” current?
edited tags
Apr
15
revised How to detect hosts running in virtual machines with nmap?
edited tags
Apr
15
revised Should one sign and encrypt using the same key? The Azure Training Labs are taking this approach
edited tags