33,982 reputation
1381151
bio website linkedin.com/in/avidouglen
location Israel
age 40
visits member for 4 years, 5 months
seen 7 hours ago

Security expert and experienced Windows programmer


Apr
26
comment iPhone Tracking debacle - risks and countermeasures
"Unclear" was referring to the massive amounts of posts out there claiming that right now, it is admittedly hard to sift through what is FUD and what is not. In any event there is at least suggestion of evidence :)
Apr
26
comment iPhone Tracking debacle - risks and countermeasures
@nealmcb, I dont think so, but I may have misread. In any event, you're correct that cell tower triangulation is a whole set of issues by itself
Apr
26
comment What do you do to protect data on a Macbook in the event of theft/loss of the device?
@atdre, not exactly a smoking gun, but there is a lot of disclarity as of yet. Also, I asked a question here, based on the points you raised... You've piqued my curiosity, I'd appreciate if you can jump in.
Apr
26
asked iPhone Tracking debacle - risks and countermeasures
Apr
26
comment 2 factor authentication - cost effective solution for a web startup
@Rory, sending a code over SMS is not really 2 factor... It is out of band, and thus adds security, but a 2nd factor it is not.
Apr
26
comment How can IT audit for installation of IIS Express?
@makerofthings, for the record note that this really only becomes a real issue when its configured to accept remote requests - which it does not by default.
Apr
26
comment How can IT audit for installation of IIS Express?
@atdre apparently (havent used it yet...) IIS Express is intended to replace the older Cassini product, but its not just a relabelling...
Apr
26
comment How do you manage security-related OCD (i.e. paranoia)?
Even so, I'd like to +100 this question! It really puts the light on where it should be, and we need more intelligent risk analysis / management questions here.
Apr
26
answered Can we still provide confidentiality when cryptography is outlawed?
Apr
26
comment Can we still provide confidentiality when cryptography is outlawed?
@Ormis, I assume you mean steganography? Although some stenagrophists could really be doing that too...
Apr
26
comment Question about the SessionLock paper
+1 nice work, and thanks for stopping in! (Just out of curiosity, how did you happen to know to come here?)
Apr
26
comment How do you manage security-related OCD (i.e. paranoia)?
ayup, that's really just moving the requirement around...
Apr
26
comment How do you manage security-related OCD (i.e. paranoia)?
@beth, and having been on the using side of some of those systems, I can say that sometimes its just better off going with verbal authentication - that is, calling on the secure radio systems, and talking to somebody who knows you. personally.
Apr
26
answered How do you manage security-related OCD (i.e. paranoia)?
Apr
26
comment How do you manage security-related OCD (i.e. paranoia)?
+1, good answer. @nealmcb, note that @beth was talking about a warzone - the clear and present danger is men with guns. Better off, to have "easier" security (where the higher priority is jumping to the C&C / rocket control / intelligence systems faster) at the password level, and have compensating controls for the event the position is overrun (as it will be, eventually) and passwords retrieved, possibly by torture. Remember, this is WAR! ;)
Apr
26
comment How do you manage security-related OCD (i.e. paranoia)?
You DO realize that article was a joke, right? :)
Apr
26
revised How do you manage security-related OCD (i.e. paranoia)?
edited tags
Apr
26
comment How to securely store my passwords?
Not an answer, but I recommend PassSafe...
Apr
26
comment How to securely store my passwords?
Btw, I realized that it is not clear from your question that you're asking about your own passwords, for other services, stored on your desktop (or laptop, or whatever) - as opposed to an application / service storing passwords for all registered users. Can you put that clarification in the question (assuming I understood correctly)?
Apr
26
revised How to securely store my passwords?
edited tags