34,447 reputation
1381151
bio website linkedin.com/in/avidouglen
location Israel
age 40
visits member for 4 years, 6 months
seen 52 mins ago

Security expert and experienced Windows programmer


Apr
27
revised What is your process for wiping a lost Blackberry or similar device?
edited tags
Apr
27
reviewed Approve Is strong cryptography legal across the internet?
Apr
27
comment iPhone Tracking debacle - risks and countermeasures
Heh, thats the trouble with hearsay - it always sounds believable, the FUD in this situation case in point. Though from social experiments, it's pretty easy to get completely non-believable rumours started too...
Apr
27
revised Can we still provide confidentiality when cryptography is outlawed?
added 67 characters in body
Apr
27
comment “Phishing” red flags and countermeasures
Btw phishing over SMS is called "smishing", and over voice call "vishing". True story.
Apr
27
comment “Phishing” red flags and countermeasures
Good question. Do you mean at a syntactical level, like so tools can deal with it? Do you mean, what tools should Alice be using to flag these attempts? Or factors Alice should consider in her risk-analysis decision? Or, all of the above...
Apr
27
revised How do you make sure a pdf is deleted after being viewed in the browser?
edited tags
Apr
27
comment iPhone Tracking debacle - risks and countermeasures
do you have any source for that? Because many sources claim the opposite....
Apr
27
comment How do you manage security-related OCD (i.e. paranoia)?
@user1971 - right, and that's where TM comes in: it can point you where to spend the minimal amount of security resources you have, and where/how to spend it most wisely.
Apr
27
comment How do you manage security-related OCD (i.e. paranoia)?
@user1971 oh yes. I wasnt sure at first either, but the kids comments made it clear... also, read some of the comments on Schneier's post.
Apr
26
comment iPhone Tracking debacle - risks and countermeasures
"Unclear" was referring to the massive amounts of posts out there claiming that right now, it is admittedly hard to sift through what is FUD and what is not. In any event there is at least suggestion of evidence :)
Apr
26
comment iPhone Tracking debacle - risks and countermeasures
@nealmcb, I dont think so, but I may have misread. In any event, you're correct that cell tower triangulation is a whole set of issues by itself
Apr
26
comment What do you do to protect data on a Macbook in the event of theft/loss of the device?
@atdre, not exactly a smoking gun, but there is a lot of disclarity as of yet. Also, I asked a question here, based on the points you raised... You've piqued my curiosity, I'd appreciate if you can jump in.
Apr
26
asked iPhone Tracking debacle - risks and countermeasures
Apr
26
comment 2 factor authentication - cost effective solution for a web startup
@Rory, sending a code over SMS is not really 2 factor... It is out of band, and thus adds security, but a 2nd factor it is not.
Apr
26
comment How can IT audit for installation of IIS Express?
@makerofthings, for the record note that this really only becomes a real issue when its configured to accept remote requests - which it does not by default.
Apr
26
comment How can IT audit for installation of IIS Express?
@atdre apparently (havent used it yet...) IIS Express is intended to replace the older Cassini product, but its not just a relabelling...
Apr
26
comment How do you manage security-related OCD (i.e. paranoia)?
Even so, I'd like to +100 this question! It really puts the light on where it should be, and we need more intelligent risk analysis / management questions here.
Apr
26
answered Can we still provide confidentiality when cryptography is outlawed?
Apr
26
comment Can we still provide confidentiality when cryptography is outlawed?
@Ormis, I assume you mean steganography? Although some stenagrophists could really be doing that too...