AviD

20,316 reputation

545114

bio	website	linkedin.com/in/avidouglen
	location	Israel
	age	38
visits	member for	2 years, 6 months
	seen	3 mins ago
stats	profile views	1,749

Security expert and experienced Windows programmer

	20,316 reputation	bio	website	linkedin.com/in/avidouglen	visits	member for	2 years, 6 months
545114 badges		location	Israel		seen	3 mins ago

summary answers questions tags badges favorites bounties reputation activity

1,623 Comments

suggestions reviews revisions comments badges posts accepts all

14h	comment	Please recommend scanner that allows to find XSS and SQL injections vulnerabilities for Web Application @Michael the question is still asking for a product recommendation. These types of questions are not a good fit for SE sites. You'd be better asking questions around how to know if a product is good, or what features or qualities are important, or how to compare two different products. Or take it a step further and ask about a methodology to find these flaws...
May 17	comment	Backup schedule for Encryption Keys But even more so, as @Thomas put it so well: `you do not want to make too many copies of your encryption keys because encryption keys are, by definition, extremely sensitive, and multiple copies are, also by definition, at odds with confidentiality.`
May 17	comment	Backup schedule for Encryption Keys I meant more about the timing, i.e. every time a key is exported, that is a sign that the key was generated. I dont think that it is likely that this would directly expose the key, but I wasn't sure that it doesnt leak some info.
May 16	comment	Prevent Malware attack on my site And btw please do not cross-post the same question to more than one SE site - if it were appropriate, a moderator could have migrated it here.
May 16	comment	Prevent Malware attack on my site Hi Codeeater, welcome to IT Security. As the commenters on Stack Overflow and the answerers here mentioned, there is really no way anybody here can answer your question - there are too many things to consider. You really need to sit down and learn about secure coding, and how to protect wordpress sites, and these are more than can be delivered in a single answer here. After you do the research, come back with a specific question and we will be glad to help you with it.
May 16	comment	Touch Screen Password Guessing by Fingerprint Trace "Obviously, cleaning your screen after every use is a practical (and not to difficult) defense against this specific attack"... especially after garlic bread.
May 16	comment	Backup schedule for Encryption Keys Re the cryptography I actually have no idea either. But if keys are exported every X days, regularly, I don't know that there is NOT an issue.
May 16	comment	Backup schedule for Encryption Keys Thanks, Brandon. Missing details as per my comment up top, I'm not asking about a single specific situation, but rather general guidelines. "Restoring and testing" - this is obvious, or rather always true with backups.
May 16	comment	Backup schedule for Encryption Keys @ewanm89 I suppose that's also true, but would be a factor in an answer. Make any assumptions on this you like, but they should be explicit...
May 15	comment	Hack a LAN with low security Hi, welcome to IT Security. Please make sure to read the FAQ and How to Ask. You really need to narrow your question down a bit, be specific. Perhaps do some research before asking, like reading wikipedia or other articles. If you get stuck on a particular problem, you can bring that here.
May 14	comment	vpn connectivity issue with windows XP Hi Saneetha, welcome to IT Security. Please read the FAQ and How to Ask - we don't do technical support here. You might try over on Super User, but your question as it stands would be closed there too, its not much of a question.
May 13	comment	optimal way to salt password? Out of curiousity, what about some globally-unique-but-not-random scheme, like concatenating your DNS name with a simple counter? E.g. `security.stackexchange.com-0001`. Obviously I would still recommend the simpler random value, but I'm curious how a scheme like this would hold up.
May 13	comment	Are there any Windows permissions management applications? Hi Brad, welcome to IT Security. Product recommendations are not a good fit for StackExchange sites, so I removed that part from your question. Otherwise, if it was just a product request, it would have been closed.
May 13	comment	How IP address are traced @anshulkatta, welcome to IT Security. Please keep a civil tone. Rule #1 of StackExchange: BE NICE. Please review the FAQ, and also How to Ask, before continuing on the site.
May 12	comment	File uploader: Does renaming protect from exploitation Hi John, welcome to IT Security. This is really missing a lot of necessary context and other information. What server? How did the file get there? What kind of script? Etc etc. Please see the FAQ and How to Ask.
May 11	comment	XKCD #936: Short complex password, or long dictionary passphrase? @JeffAtwood actually the xkcd is stating the exact opposite: passphrases are much harder to crack than any form of l33tsp34ked password, by order of magnitude. Contrast that with how much harder it is to remember the exact permutation, without adding sufficient benefit... So it seems from your comments that you are now concluding that the xkcd is correct, contrary to the implication in your answer?
May 9	comment	Intel How Strong is Your Password page, good advice? More importantly, if you willy nilly submit your actual passwords to any random site that asks for it - what would SSL help, anyway?
May 9	comment	Intel How Strong is Your Password page, good advice? Horrible. Just horrible, horrible, terrible advice. This is some shocking crap from Intel, usually they do quite a bit better. This must be direct from the marketing department with no engineers involvement. Do not listen to them, pay them no heed. See XKCD (and discussion here) instead.
May 9	comment	Standard algorithm for WEP key generator 64-bit Welcome to IT Security! Not really sure what you hope to achieve from this question, please see the FAQ and How to Ask. Regardless, DO NOT USE WEP, it is quite broken and considered very insecure.
May 9	comment	What are the security risks of pirating video or music? @yzT please see the FAQ. This site is collaboratively edited, like Wikipedia. `If you are not comfortable with the idea of your contributions being collaboratively edited by other trusted users, this may not be the site for you`. Everyone here is just trying to improve the content.