31,179 reputation
1275149
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 4 years, 1 month
seen 16 hours ago

Security expert and experienced Windows programmer


Apr
14
comment Topics for SecureCoding course in C
naw, its not college courses, its training for professional developers - "programming team".
Apr
14
comment Topics for SecureCoding course in C
Hmm, dangling pointers is a good point to add. Stack smashing and such is already covered, and I dont have time to get into testing, CR, etc. Anyways that wouldn't be in this session (as I said this is the practical, how-to coding part - anything else is done seperately).
Apr
14
comment How To - Learn basic hacking skills?
@James, still not the place for it - SE is not a tutorials site, it's focused Q&A. Of course, if you get stuck on something specific we very much welcome any and all specific questions... In the meantime, why dont you search this site for pointers? The [ education ] tag specifically might help you find some good reading materials, books, sites, etc.
Apr
14
comment How to submit credit card info to a separate server/website (PCI)
Only (nitpicking) comment: I'm not a QSA - even if you were a QSA it wouldn't matter, as you are not his QSA, and whomever that is gets to make the calls anyway :D
Apr
14
comment How to submit credit card info to a separate server/website (PCI)
Excellent answer, well done. +1.
Apr
14
comment How To - Learn basic hacking skills?
Welcome to the site! Are you asking for tutorial on linux? That's not the topic of this site - you could try over at serverfault - but I seriously doubt you'd get an instant tutorial, SE is not built or intended for that. If you're asking a specific question - it's not clear from what you wrote...
Apr
14
revised Security Operation Center (SOC)
edited tags
Apr
14
comment Topics for SecureCoding course in C
@Ams oh nice. +1 from me.
Apr
14
comment Topics for SecureCoding course in C
Thanks, that is indeed a very good approach, and the one I usually take with training series. However in this case I'm looking for the specific techniques, relevant for each specific language - the general principles etc are done seperately, in prior sessions.
Apr
14
reviewed Approve Topics for SecureCoding course in C
Apr
14
asked Topics for SecureCoding course in C
Apr
13
revised What is more secure: Many subdirectories, or many subdomains?
edited tags
Apr
13
comment How secure are virtual machines really? False sense of security?
+1, but the recognized leader in these field, Joanna Rutkowska, can be found at theinvisiblethings.blogspot.com
Apr
13
revised Are there consumer-grade VPN services that support two-factor authentication, like SecurID?
edited tags
Apr
13
comment Are there consumer-grade VPN services that support two-factor authentication, like SecurID?
Heh, nowadays it's questionable if using SecurId will actually increase your security, or decrease it ;)
Apr
13
comment strongswan setup for ipsec environment
btw, what exactly do you mean "private shared secret"? If it's private - its not shared, and if you share it, its no longer private... I think youre conflating two terms: "private key" and "shared secret" or "secret key". Can you clarify?
Apr
13
comment How to use and create attack graphs
Well I've never heard it called an attack graph, only an attack tree. And, judging from the answers, I'm guessing that's what you meant. As far as data structure go, a tree is a kind of a graph, so...
Apr
13
accepted AntiXSS for ASP.NET 1.1
Apr
13
accepted What issues are most important to cover in Corporate Security Policy?
Apr
13
accepted Does default ModSecurity protect enough against XSS?