AviD

Israel

linkedin.com/in/avidouglen

Age: 37

Security expert and experienced Windows programmer

top accounts reputation activity favorites subscriptions

How to securely hash passwords?

appsec cryptography passwords hash asked Nov 12 '10 at 12:36

security.stackexchange.com

36 votes

Non-random salt for password hashes

security authentication hash cryptography password-protection asked Feb 11 '09 at 12:33

stackoverflow.com

30 votes

What are rainbow tables and how are they used?

attack-prevention cryptography attacks hash asked Nov 16 '10 at 7:26

security.stackexchange.com

18 votes

Serializing null in JSON.NET

c# .net serialization json.net asked Jan 12 at 11:00

stackoverflow.com

16 votes

Does it matter which Certificate Authority I source my SSL Certificate from?

ssl certificate-authority asked Nov 11 '10 at 23:42

security.stackexchange.com

13 votes

What tools are there to inspect Flash SWF files?

appsec penetration-test vulnerability-scanners flash asked Nov 16 '10 at 7:31

security.stackexchange.com

11 votes

Is too much focus on testing benefits a bad thing overall?

design design-patterns testing tdd asked May 24 '09 at 11:23

stackoverflow.com

10 votes

Startup security

appsec sdl agile asked Nov 12 '10 at 12:49

security.stackexchange.com

10 votes

What is the difference between RBAC and DAC/ACL?

authorization permissions access-control rbac asked Nov 14 '10 at 19:27

security.stackexchange.com

10 votes

How can I test my web application for timing attacks?

appsec web-application penetration-test vulnerability-scanners penetration-test asked Nov 16 '10 at 7:34

security.stackexchange.com

Top Answers

Has reCaptcha been cracked / hacked / OCR'd / defeated / broken?

stackoverflow.com

XKCD #936: Short complex password, or long dictionary passphrase?

security.stackexchange.com

Does an established ssl connection mean a line is really secure

security.stackexchange.com

Will HTML Encoding prevent all kinds of XSS attacks?

stackoverflow.com

Laws of Computer Science and Programming

stackoverflow.com

How reliable is a password strength checker?

security.stackexchange.com

Can I protect against SQL Injection by escaping single-quote and surrounding user input with single-quotes?

stackoverflow.com

Practical non-image based CAPTCHA approaches?

stackoverflow.com

Is it OK to tell or give your password to an admin?

security.stackexchange.com

How to Implement Password Resets?

stackoverflow.com

How would you reason with and work with the security paranoiac on your team?

security.stackexchange.com

What are the pros and cons of site wide SSL (https)?

security.stackexchange.com

What to transfer? Password or its hash?

security.stackexchange.com

Is XSS dangerous in application without database?

security.stackexchange.com

Is BASIC-Auth secure if done over HTTPS?

security.stackexchange.com

What are some good practices before checking in source code?

programmers.stackexchange.com

Does PCI compliance really reduce risk and improve security?

security.stackexchange.com

What security resources should a white-hat *developer* follow these days?

security.stackexchange.com

What are the career paths in the computer security field?

security.stackexchange.com

When the bots attack!

stackoverflow.com

Can I protect against SQL Injection by escaping single-quote and surrounding user input with single-quotes?

stackoverflow.com

What cryptographic algorithms are not considered secure?

security.stackexchange.com

How can I intercept and modify HTTP requests?

security.stackexchange.com

A phone call hack

security.stackexchange.com

What's a good alternative to security questions?

stackoverflow.com

Professional certifications for IT Security

security.stackexchange.com

What techniques do advanced firewalls use to protect againt DoS/DDoS?

security.stackexchange.com

Online password managers

security.stackexchange.com

SFTP, FTPS and SecureFTP differences and security implications

security.stackexchange.com

What is your way to create good passwords that can actually be remembered?

security.stackexchange.com