26,984 reputation
1061140
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 3 years, 5 months
seen 13 hours ago

Security expert and experienced Windows programmer


Feb
13
comment What can one do when encryption methods fail?
Are you saying God can read my encrypted files?? Dang, looks like its time to move over to atheism.stackexchange.com ...
Feb
13
comment Is 2008 Server Core installation the most secure deployment?
yfuhs I don't think "is it more secure" should go over to SF, though the "is it more difficult" probably should. It's 2 different questions... Your "lower attack surface" bit would probably get missed at SF (+1 for that, btw)
Feb
13
revised When the use of a AntiForgeryToken is not required /needed?
edited tags
Feb
13
revised What can one do when encryption methods fail?
edited tags
Feb
13
comment How do I apply a security baseline to Windows 2008 R2?
@SteveSyfuhs, I'm on the fence... it is a sysadmin q, but it is about hardening the system...
Feb
13
revised How do I apply a security baseline to Windows 2008 R2?
edited tags
Feb
11
revised intel wireless 5100 AGN adapter to support injection
edited tags
Feb
10
comment intel wireless 5100 AGN adapter to support injection
Is this a security question? I don't see the connection...
Feb
10
reviewed Approve suggested edit on How to prevent CSRF if you want to include Flash plugins in your form like Uploadify in your form?
Feb
10
comment How useful is CISSP to a recent graduate?
I'm not so sure how much an entry-level position is expected to have the CISSP checkbox... Also, I find the CISSP exam to be much easier after a few years experience...
Feb
10
revised SQL injection for a username/password form?
edited tags
Feb
10
comment Altering a $_SESSION variable in PHP via XSS?
Why do you not consider XSS as "bad programming"? Of course it's bad programming, and of course the effects of the XSS very much depend on internal implementation. Bottom line, XSS can affect the session variables, in certain situations and depending on implementation.
Feb
10
revised Altering a $_SESSION variable in PHP via XSS?
edited tags
Feb
10
revised Replicating javascript actions from different website (XSS?)
edited tags
Feb
10
comment Replicating javascript actions from different website (XSS?)
I think @Steve's question was referring more to Same-Origin Policy, where it very much matters the context of which server the script was downloaded from.
Feb
10
revised How to hijack a session?
edited tags
Feb
10
comment How to hijack a session?
Wait, my previous comment may have been jumping the gun... What is it you're trying to do? Get access to someone else's record, or go for the bigger SQL Injection vulnerability there?
Feb
10
comment How to hijack a session?
what you're asking about is not "hijacking", it's poisoning, manipulation, injection... it does have a lot of names, but hijacking is something else: that is when you steal someone else's session.
Feb
10
answered What is an appropriate auditing standard for a law firm?
Feb
10
revised What is an appropriate auditing standard for a law firm?
edited tags