1,894 reputation
11323
bio website il.linkedin.com/in/…
location Israel
age 40
visits member for 3 years, 8 months
seen Feb 26 at 14:38

App Security Expert


Nov
7
asked Concerns of data being on the cloud
Nov
7
comment CSRF protection needed for clients that don't accept cookies?
What is business impact of CSRF attack? Someone can trade on stock market? Add comment to blog? When you know what is the impact of the attack you can decide how/if you need to deal with it.
Nov
7
awarded  Peer Pressure
Nov
7
answered PHP/JavaScript with RSA
Nov
5
comment Storing credit cards for automatic payments?
They are PCI compliant as an infrastructure, you still need to be PCI compliant on application level
Nov
3
awarded  Autobiographer
Nov
3
answered Is my Company Tracking Me?
Nov
2
comment How serious is InstallIQ?
According Wikipedia "Adware, or advertising-supported software, is any software package which automatically plays, displays, or downloads advertisements to a computer." en.wikipedia.org/wiki/Adware, so "Adware is Adware"
Nov
2
answered How serious is InstallIQ?
Nov
2
answered Risks with Amazon S3 and costs
Nov
1
answered Am I required to hash passwords
Nov
1
revised Why banking websites always ask me to authenticate my PC even after I'd chosen to “Remember my Computer”?
edited tags
Oct
31
answered Is there a superior approach for threat modeling?
Oct
28
answered How to catch a gmail hacker/money-scammer? (in conversation with one right now!)
Oct
27
comment Securely signing a container package
Again, that exactly what I wrote, but what ever
Oct
27
comment Securely signing a container package
He is not talking about signing SW distribution package, rather to sign some data that his program uses. Because it is desktop application it can be decompiled and the signature check removed in any case.
Oct
27
comment Securely signing a container package
That exactly what I wrote
Oct
27
answered Securely signing a container package
Oct
27
awarded  Critic
Oct
27
awarded  Analytical