26,834 reputation
1061140
bio website linkedin.com/in/avidouglen
location Israel
age 39
visits member for 3 years, 5 months
seen 2 hours ago

Security expert and experienced Windows programmer


Feb
10
reviewed Approve suggested edit on Snort's great, but BASE isn't. What are some alternative front-ends?
Feb
10
awarded  Citizen Patrol
Feb
9
answered Should CSRF 'Double Submit Cookie' technique have a different seed value for the cookie versus the HTTP POST?
Feb
9
revised Should CSRF 'Double Submit Cookie' technique have a different seed value for the cookie versus the HTTP POST?
edited tags
Feb
8
comment Is PBKDF2-based System.Cryptology.RFC2898DeriveBytes() “better” for Unicode Password hashing than traditional methods?
+1 for explaining the details much better than I did.
Feb
8
comment Multiple VPN clients in parallel
Very practical idea, thanks. Though in my case, I'm RDP'ing into other machines, which are actually hosting some VMs, so that level of meta-virtualization would just confuse me, be annoying, and make me think of those matryoshkas...
Feb
8
comment Multiple VPN clients in parallel
Very detailed, thanks! However, though this is correct from a purist PoV, I'm pretty sure that not all implementations actually work that way.
Feb
8
comment Multiple VPN clients in parallel
Thanks, though @Thomas's answer is more "correct" from a purist point of view, this is actually more in line with realworld VPN's, as I see them...
Feb
8
accepted Multiple VPN clients in parallel
Feb
8
asked Multiple VPN clients in parallel
Feb
8
answered Is PBKDF2-based System.Cryptology.RFC2898DeriveBytes() “better” for Unicode Password hashing than traditional methods?
Feb
5
reviewed Approve suggested edit on Books about Penetration Testing
Feb
5
revised Books about Penetration Testing
edited tags
Feb
3
revised Windows hardening
edited tags
Feb
3
revised Tools to identify and report hacking attempts originating inside reputable organizations?
edited tags
Feb
2
comment How can TOCTTOU vulnerabilities within the Windows OS be mitigated?
Then can I suggest, changing the body of the question? The example you gave is not a problem of TOC-TOU. And, in general, that is not a "vulnerability", it is the way Windows security tokens are designed. There was never any intention of immediate privilege removal, especially not in the case of administrators... (yes yes, it's feature, not a bug ;) )
Feb
2
revised Automated tools for Cisco IOS config auditing?
edited tags
Feb
2
reviewed Approve suggested edit on Are there any smartcard/hardware-tokens for certificate-based authentication which are easily destroyed?
Feb
1
answered Concerns and Gotcha with Secure Programming Standards Development
Feb
1
comment How can TOCTTOU vulnerabilities within the Windows OS be mitigated?
@Iszi I think you're having issue with the given answers, because you're actually asking two different questions. 1. How does one deal with TOC-TOU issues, in general? 2. How can you prevent a temporary administrator (on Windows) from secretly becoming one permanently? And maybe even a third: 3. How does one fix vulnerabilities in Windows :).... Perhaps if you separate the questions, you'll get better answers (better being more helpful to you).