|Nice Answer||Answer score of 10 or more. This badge can be awarded multiple times.|
AviD earned this badge 47 times
may 14 at 13:41CSRF protection with Session Id
may 12 at 2:26Code Analysis: Binary vs Source
may 12 at 2:26Criteria for Evaluating Static Analysis Tools
apr 23 at 12:17Why do we authenticate by prompting a user to enter both username and password? Does prompting the password only suffice?
mar 14 at 17:12Web Application encryption key management
jan 2 at 2:45Designing in zero day attack mitigations
oct 2 at 2:11symmetric encryption session keys in SSL/TLS
sep 9 at 14:30How should I distribute my public key?
sep 4 at 12:44What policies maximize employee buy-in to security?
aug 31 at 14:07IPsec (Internet Protocol Security) facts
aug 2 at 14:32UNIX Servers: Possible intrusions or attacks that do not use any of the open listen sockets
jul 23 at 8:14What is the difference between RBAC and DAC/ACL?
apr 14 '12 at 11:54What is the correct way to implement anti-CSRF form tokens?
feb 28 '12 at 19:29Installing Development Tools on Production Server? Security Risk?
jan 30 '12 at 7:40How to Securely Implement a “Remember Me” Feature?
dec 21 '11 at 19:41Access to a router's GUI
nov 8 '11 at 10:51How does using OpenID affect webapp security?
oct 23 '11 at 23:03What techniques do advanced firewalls use to protect againt DoS/DDoS?
oct 14 '11 at 11:53Is anybody using client browser certificates?
sep 24 '11 at 20:29Nessus vs third-party scans
aug 16 '11 at 10:21User input data, is filtering enough or should it be parsed?
aug 12 '11 at 11:03What is your way to create good passwords that can actually be remembered?
aug 11 '11 at 16:17XKCD #936: Short complex password, or long dictionary passphrase?
jul 25 '11 at 20:52Is XSS dangerous in application without database?
jul 22 '11 at 8:57Is it OK to tell or give your password to an admin?
jul 3 '11 at 21:21Professional certifications for IT Security
jul 1 '11 at 6:58What to transfer? Password or its hash?
jun 27 '11 at 18:37Online password managers
jun 23 '11 at 13:11Should I bother teaching buffer overflows any more?
jun 21 '11 at 13:53What are the career paths in the computer security field?
jun 14 '11 at 8:53A phone call hack
may 23 '11 at 14:49How reliable is a password strength checker?
may 11 '11 at 18:24How would you reason with and work with the security paranoiac on your team?
may 5 '11 at 4:11Does PCI compliance really reduce risk and improve security?
mar 28 '11 at 3:36What are the pros and cons of site wide SSL (https)?
dec 28 '10 at 18:14What cryptographic algorithms are not considered secure?
dec 20 '10 at 16:14Securing an E-commerce site
dec 14 '10 at 16:23How can I intercept and modify HTTP requests?
dec 8 '10 at 0:18Is BASIC-Auth secure if done over HTTPS?
dec 5 '10 at 20:28SFTP, FTPS and SecureFTP differences and security implications
nov 12 '10 at 1:00Does an established ssl connection mean a line is really secure