36,943 reputation
1488159
bio website linkedin.com/in/avidouglen
location Israel
age 40
visits member for 4 years, 8 months
seen 7 hours ago

Security expert and experienced Windows programmer


May
7
revised Protection against synthetic queries
edited tags
May
7
revised SQL injection — why isn't escape quotes safe anymore?
edited tags
May
6
revised extract from pcap all protocols found
edited tags
May
6
revised what is a good public available iptables script for ddos mitigation?
edited tags
May
6
revised Certificate based authentication vs Username and Password authentication
edited tags
May
6
comment Standards for hiring trusted personnel - American or Canadian Government?
I think if you spell labor, "labour", you're automatically disqualified ;)
May
6
comment How do you compare risks from your websites, physical perimeter, staff etc
@Scott, can you pop up some more information that? E.g. how it would help with the above situation, in your work: balancing between securing the website and the front door...
May
6
revised CAM table attack in 2011?
edited tags
May
6
revised Standards for hiring trusted personnel - American or Canadian Government?
edited tags
May
6
revised What “hacking” competitions/challenges exist?
edited tags
May
6
revised Has SHA-3 Arrived?
edited tags
May
6
revised Escaping JavaScript constants
edited tags
May
5
answered How do you compare risks from your websites, physical perimeter, staff etc
May
5
comment Effect of Source Code Leakage of a security suite on security
+1, also, in many cases the actual source code is what damages the reputation - when you see how badly this company writes code, would you still want to buy their product? Also, a security company should have been following a complete SDLC, in which case the source code should have minimal defects - if that's not the case, the fact that you can determine that they did not have SDLC in place, is damaging enough, even besides the actual flaws.
May
5
comment Does PCI compliance really reduce risk and improve security?
@caelyx, you're correct - this was my first iteration of that "law", on later questions here it was already generalized. :)
May
5
awarded  Nice Answer
May
4
revised Books on Cryptography, with a focus on application to Network Security?
edited tags
May
4
comment ip-fragmentation and mod_security?
(To be clear, I'm not claiming there is such a flaw, I havent tested this at all. I'm only raising this as a possible issue, and curious if there is special handling for these.)
May
4
revised How does the padding scheme impact the security of encryption
edited tags
May
4
revised What is War Dialing?
edited tags