AviD

Israel

linkedin.com/in/avidouglen

Age: 38

Security expert and experienced Windows programmer

top accounts reputation activity favorites subscriptions

How to securely hash passwords?

appsec cryptography passwords hash asked Nov 12 '10 at 12:36

security.stackexchange.com

53 votes

Non-random salt for password hashes

security authentication hash cryptography password-protection asked Feb 11 '09 at 12:33

stackoverflow.com

43 votes

What are rainbow tables and how are they used?

attack-prevention cryptography attacks hash asked Nov 16 '10 at 7:26

security.stackexchange.com

22 votes

Serializing null in JSON.NET

c# .net serialization json.net asked Jan 12 '12 at 11:00

stackoverflow.com

20 votes

Does it matter which Certificate Authority I source my SSL Certificate from?

ssl certificate-authority asked Nov 11 '10 at 23:42

security.stackexchange.com

17 votes

What tools are there to inspect Flash SWF files?

appsec penetration-test vulnerability-scanners flash asked Nov 16 '10 at 7:31

security.stackexchange.com

12 votes

Startup security

appsec sdl agile asked Nov 12 '10 at 12:49

security.stackexchange.com

12 votes

What is the difference between RBAC and DAC/ACL?

authorization permissions access-control rbac asked Nov 14 '10 at 19:27

security.stackexchange.com

12 votes

How can I test my web application for timing attacks?

appsec web-application penetration-test vulnerability-scanners penetration-test asked Nov 16 '10 at 7:34

security.stackexchange.com

11 votes

Is too much focus on testing benefits a bad thing overall?

design design-patterns testing tdd asked May 24 '09 at 11:23

stackoverflow.com

Top Answers

194

XKCD #936: Short complex password, or long dictionary passphrase?

security.stackexchange.com

Has reCaptcha been cracked / hacked / OCR'd / defeated / broken?

stackoverflow.com

Does an established ssl connection mean a line is really secure

security.stackexchange.com

Will HTML Encoding prevent all kinds of XSS attacks?

stackoverflow.com

Can I protect against SQL Injection by escaping single-quote and surrounding user input with single-quotes?

stackoverflow.com

How reliable is a password strength checker?

security.stackexchange.com

Is BASIC-Auth secure if done over HTTPS?

security.stackexchange.com

Is it OK to tell or give your password to an admin?

security.stackexchange.com

How to Implement Password Resets?

stackoverflow.com

What are the pros and cons of site wide SSL (https)?

security.stackexchange.com

What are the career paths in the computer security field?

security.stackexchange.com

Laws of Computer Science and Programming

stackoverflow.com

Practical non-image based CAPTCHA approaches?

stackoverflow.com

How would you reason with and work with the security paranoiac on your team?

security.stackexchange.com

What security resources should a white-hat *developer* follow these days?

security.stackexchange.com

What to transfer? Password or its hash?

security.stackexchange.com

Is XSS dangerous in application without database?

security.stackexchange.com

Does PCI compliance really reduce risk and improve security?

security.stackexchange.com

What is your way to create good passwords that can actually be remembered?

security.stackexchange.com

Can I protect against SQL Injection by escaping single-quote and surrounding user input with single-quotes?

stackoverflow.com

Professional certifications for IT Security

security.stackexchange.com

What are some good practices before checking in source code?

programmers.stackexchange.com

What techniques do advanced firewalls use to protect againt DoS/DDoS?

security.stackexchange.com

How can I intercept and modify HTTP requests?

security.stackexchange.com

Online password managers

security.stackexchange.com

What is the difference between RBAC and DAC/ACL?

security.stackexchange.com

User input data, is filtering enough or should it be parsed?

security.stackexchange.com

What cryptographic algorithms are not considered secure?

security.stackexchange.com

Should I bother teaching buffer overflows any more?

security.stackexchange.com

A phone call hack

security.stackexchange.com