AviD

Moderator ♦ less info
meta site favicon meta user | stack exchange network profile network profile
21,070 reputation
546118
bio website linkedin.com/in/avidouglen
location Israel
age 38
visits member for 2 years, 7 months
seen 1 hour ago
stats profile views 1,831

Security expert and experienced Windows programmer


251 Answers

newest activity votes
2
I am still logged in using a browser X, can CSRF attack work when I use another (default) browser Y on the same machine?
mar 5 '11 at 21:05
10
Why do we authenticate by prompting a user to enter both username and password? Does prompting the password only suffice?
mar 5 '11 at 19:14
10
Code Analysis: Binary vs Source
mar 1 '11 at 22:59
16
Should I bother teaching buffer overflows any more?
mar 1 '11 at 11:58
3
2 factor authentication - cost effective solution for a web startup
feb 27 '11 at 19:35
6
How feasible is it for a CA to be hacked? Which default trusted root certificates should I remove?
feb 27 '11 at 19:26
6
Testing PHP form injection
feb 17 '11 at 0:58
1
What tools exist to manage large scale firewall rulesets?
feb 15 '11 at 6:20
5
What is an appropriate auditing standard for a law firm?
feb 10 '11 at 7:35
2
Should CSRF 'Double Submit Cookie' technique have a different seed value for the cookie versus the HTTP POST?
feb 9 '11 at 16:59
5
Is PBKDF2-based System.Cryptology.RFC2898DeriveBytes() “better” for Unicode Password hashing than traditional methods?
feb 8 '11 at 10:22
4
Concerns and Gotcha with Secure Programming Standards Development
feb 1 '11 at 22:06
4
How can TOCTTOU vulnerabilities within the Windows OS be mitigated?
feb 1 '11 at 15:40
6
What's the real reason behind blocking the social sites? Even legitimate sites like twitter which acts as a knowledge repository?
jan 29 '11 at 23:25
1
Initialization vector with cipher block
jan 25 '11 at 22:37
2
Can anyone suggest good open source tools for scanning source code for vulnerabilities?
jan 25 '11 at 6:41
5
Does the compiler feature of Closures decrease member variable security?
jan 24 '11 at 6:00
1
Master thesis topic - mod_security
jan 23 '11 at 7:51
12
Nessus vs third-party scans
jan 14 '11 at 12:29
10
Is visiting HTTPS websites on a public hotspot secure?
jan 11 '11 at 6:37
13
Access to a router's GUI
jan 11 '11 at 7:23
2
What's the standard way to encrypt a file with a public key in Java?
jan 9 '11 at 0:30
2
What is the difference in security between a VPN- and a SSL-connection?
jan 6 '11 at 20:09
8
How to address XSS security issues in FCKeditor / CKeditor?
jan 5 '11 at 22:34
6
What is the difference between an x.509 “client certificate” and a normal SSL certificate?
jan 3 '11 at 22:07
12
Is anybody using client browser certificates?
jan 3 '11 at 7:49
9
What common products use Public-key cryptography?
jan 2 '11 at 0:05
6
PCI Encryption Key Management
jan 1 '11 at 22:32
10
UNIX Servers: Possible intrusions or attacks that do not use any of the open listen sockets
dec 27 '10 at 20:10
4
Escaping JavaScript constants
dec 23 '10 at 22:44
1 … 3 4 5 6 7 … 9