26,794 reputation
1061137
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 3 years, 5 months
seen 12 hours ago

Security expert and experienced Windows programmer


Feb
17
revised How to track a laptop after theft?
edited tags
Feb
17
answered Testing PHP form injection
Feb
15
revised What should I ask a prospective security consultant?
edited tags
Feb
15
comment BlackBerry client authenticating to Java Web Service
I modified the title, to make the focus of the question clearer. It's likely that it wasn't being read because of "Blackberry"... and it's really a question about the Java WS.
Feb
15
revised BlackBerry client authenticating to Java Web Service
Changed title to clarify focus of questions
Feb
15
revised CloudFlare benefits or drawbacks
edited tags
Feb
15
revised Do mobile OS's provide crypto-quality randomness?
edited tags
Feb
15
revised Whitelisting applications in Windows7
edited tags
Feb
15
answered What tools exist to manage large scale firewall rulesets?
Feb
14
comment Detecting Steganography in images
Not an answer to the asked question, but to the actual situation you had: It might not be hidden data, but hidden binary code, e.g. GIFAR. See also http://security.stackexchange.com/q/600/33.
Feb
14
revised How can I secure a network share from the insider threat?
edited tags
Feb
13
comment What should I ask a prospective security consultant?
@packs, yes, but what about the excellent, small companies (and freelancers)? Usually, they do better work than "sufficiently large companies"...
Feb
13
comment What should I ask a prospective security consultant?
I agree that speaking at wellknown confs, and released papers, are good signs - but it's important to note that the absence of these should not at all be taken as a bad sign. Many consultants just get on with the work, and don't try to get lots of visibility. Admittedly, it's likely that he won't be brilliant (if he was, he'd probably get that visibility regardless...), but he might be able to do the regular 98% of the work just as well.
Feb
13
comment When the use of a AntiForgeryToken is not required /needed?
Not so contrived... See @D.W.'s answer.
Feb
13
comment When the use of a AntiForgeryToken is not required /needed?
+1, niice. CSRF-twist on the ol' session fixation... Nice paper, too, btw.
Feb
13
revised BlackBerry client authenticating to Java Web Service
copied question details + retagged
Feb
13
comment What can one do when encryption methods fail?
Can God create an encryption algorithm that even God cannot break?
Feb
13
comment What can one do when encryption methods fail?
Are you saying God can read my encrypted files?? Dang, looks like its time to move over to atheism.stackexchange.com ...
Feb
13
comment Is 2008 Server Core installation the most secure deployment?
yfuhs I don't think "is it more secure" should go over to SF, though the "is it more difficult" probably should. It's 2 different questions... Your "lower attack surface" bit would probably get missed at SF (+1 for that, btw)
Feb
13
revised When the use of a AntiForgeryToken is not required /needed?
edited tags