37,003 reputation
1488159
bio website linkedin.com/in/avidouglen
location Israel
age 40
visits member for 4 years, 8 months
seen 2 hours ago

Security expert and experienced Windows programmer


3h
answered Is sending a string (representing a HTTP message) over SSL be the same as sending a HTTPS message?
Jul
20
answered Should I implement incorrect password delay in a website or a webservice?
Jun
21
answered Why is it insecure to store the session ID in a cookie directly?
Jun
15
answered DDOS - security or operational risk?
Jun
7
answered How can I know that developers will be ethical and not record my password in plaintext
May
8
answered How to prevent user from removing disabled attribute and manually editing role?
Apr
29
answered Does it increase the security if we split data to n pieces and encrypt each one with different key and different algorithm?
Apr
13
answered Why does the user pick the password?
Jan
29
answered is it feasible to improve the entropy of XKCD #936 by using a larger dictionary?
Jan
19
answered How do you determine if an open source script contains malicious code?
Jan
6
answered Can I prevent brute forcing of hashed+salted user passwords without a dedicated validation server?
Dec
11
answered Confusion about keepass portable and keyfile on an USB-stick
Dec
4
answered What is the difference between login throttling and temporary account lockout?
Nov
27
answered How do you explain to experts that a database server should not reside in the DMZ?
Nov
24
answered How strong is a simple XOR encryption with random IV?
Nov
7
answered Should security-critical code be reused or rewritten?
Jul
10
answered What implementations are possible for dual control?
May
5
answered SAML and OpenID, centralized and decentralized
Mar
17
answered Is a console application with NT Authority/System rights dangerous?
Dec
24
answered Does it make sense to use two factor authentication with password protected wp-admin folder?