User AviD - IT Security Stack Exchange

bio	website	linkedin.com/in/avidouglen
	location	Israel
	age	38
visits	member for	2 years, 6 months
	seen	24 mins ago
stats	profile views	1,752

	20,336 reputation	bio	website	linkedin.com/in/avidouglen	visits	member for	2 years, 6 months
545114 badges		location	Israel		seen	24 mins ago

68

votes

20

answers

16

kviews

Lessons learned and misconceptions regarding encryption and cryptology

17h ago makerofthings7 12.6k

196

173

votes

3

answers

45

kviews

How does SSL work?

ssl certificates public-key-infrastructure

may 17 at 16:10 oleksii 362

172

371

votes

20

answers

57

kviews

XKCD #936: Short complex password, or long dictionary passphrase?

cryptography passwords entropy

mar 19 at 14:01 Thomas Pornin 82.5k

6

13

votes

8

answers

2

kviews

Any comprehensive solutions for binary code protection and anti-reverse-engineering?

linux attack-prevention java reverse-engineering binary-code

mar 13 at 17:39 Informed 1

12

17

votes

5

answers

13

kviews

How to trace a (mobile) phone?

mobile phone

mar 5 at 9:09 Guntis 21

3

7

votes

3

answers

260

views

Is it inconsistent to tell users to “not click on password links in email”, and requiring clicks on “forgot password” links?

passwords authentication web-browser email password-policy

mar 3 at 18:30 Eric G 3,016

3

8

votes

6

answers

473

views

What is preventing the widespread common use of MAC-type systems?

appsec operating-systems virus mandatory-access-control threat-mitigation

dec 12 at 21:02 catpnosis 40

21

34

votes

4

answers

11

kviews

Password Hashing add salt + pepper or is salt enough?

cryptography passwords hash salt hmac

dec 8 at 20:27 AviD♦ 20.3k

4

18

votes

3

answers

750

views

Should Stack Exchange be more obscure in its systems' structure?

disclosure obscurity

nov 5 at 7:10 amyassin 208

1

5

votes

1

answer

56

views

What are the security challenges encountered with attribute exchange?

privacy openid oauth

sep 27 at 5:01 Rook 21.2k

1

5

votes

1

answer

353

views

Does sandboxie “grab” all the system calls?

appsec windows operating-systems sandbox

sep 9 at 2:07 Scott Pack 7,981

1

4

votes

3

answers

164

views

(custom software) Security rules on each record when using user-groups per application

appsec access-control rbac

sep 6 at 20:23 Scott Pack 7,981

152

168

votes

4

answers

41

kviews

Do any security experts recommend bcrypt for password storage?

cryptography passwords hash

jul 11 at 16:30 PBKDF2 61

3

2

votes

2

answers

470

views

LDAP Security problems?

authentication macosx active-directory ldap

jul 9 at 10:50 Terry Gardner 145

1

5

votes

2

answers

696

views

Google Analytics on a secured site

web-application ssl logging metrics

may 19 '12 at 8:59 acidzombie24 617

2

votes

1

answer

206

views

Combining capability-based access control with SAML

access-control federation saml capabilities identity-management

mar 13 '12 at 22:59 D.W. 44.7k

2

3

votes

1

answer

2

kviews

Is there a sms authentication that works like 10minutemail?

tools privacy sms

mar 10 '12 at 6:03 SpellingD 141

4

7

votes

5

answers

428

views

What is the practical difference between MAC and Capabilities

access-control mandatory-access-control capabilities

nov 26 '11 at 10:56 D.W. 44.7k

1

7

votes

3

answers

154

views

What is the state of Security in Comp Sci Programs

user-education

sep 29 '11 at 13:56 Jeff Ferland♦ 21.4k

4

13

votes

5

answers

481

views

How to get into RFID auditing?

audit research professional-education rfid

sep 29 '11 at 13:47 Jeff Ferland♦ 21.4k

3

10

votes

4

answers

879

views

MS-SQL Password Storage

cryptography passwords hash

sep 5 '11 at 18:37 D.W. 44.7k

1

13

votes

2

answers

633

views

How can we accurately measure a password entropy range?

passwords password-management entropy

aug 11 '11 at 14:46 AviD♦ 20.3k

1

6

votes

2

answers

392

views

Outsourcing security evaluation

code-review people-management vendor-selection

aug 9 '11 at 18:32 Bell 558

5

17

votes

4

answers

532

views

How would you reason with and work with the security paranoiac on your team?

appsec professional-education business-risk

jul 29 '11 at 19:07 this.josh 5,921

5

10

votes

6

answers

690

views

Applications of probability/statistics in IT security?

ids research

jul 4 '11 at 22:10 AviD♦ 20.3k

1

2

votes

3

answers

270

views

Help me find the right Security Consultant for the stage our organization is in

appsec people-management

jun 28 '11 at 11:30 AviD♦ 20.3k

4

20

votes

4

answers

1

kviews

How is “something you have” typically defined for “two-factor” authentication?

authentication multi-factor

jun 10 '11 at 18:57 nealmcb 10.2k

4

17

votes

5

answers

735

views

Does PCI compliance really reduce risk and improve security?

risk-management compliance pci-dss

may 4 '11 at 21:54 VP. 558

8

12

votes

1

answer

5

kviews

What is the difference between RBAC and DAC/ACL?

authorization permissions access-control rbac

apr 6 '11 at 15:42 Rory Alsop♦ 32.5k

1

4

votes

3

answers

221

views

Is it possible to have authentication without state

cryptography authentication

mar 31 '11 at 19:46 kuhkatz 39

AviD

32 Favorites