Badge

 Nice Answer Answer score of 10 or more. This badge can be awarded multiple times.

This badge has been awarded 1680 times. Recently awarded to:
apr 16 at 3:39
What is a Web Application Firewall? — Mark Davidson 4,49511548
apr 14 at 6:05
Why have username AND password? — Thomas Pornin 82.5k16155289
apr 12 at 16:20
I have a client that is worried about DDOS attacks on their site, and they want penetration testing. Will that help? — drunkenRabbit 2515
apr 12 at 16:10
How can encrypted traffic bypass the Great Firewall of China when it is being blocked? — lserni 1,38626
apr 12 at 15:25
How is “hacking” even possible if I “defend” properly? — Rory Alsop♦ 32.5k333154
apr 12 at 14:30
How is “hacking” even possible if I “defend” properly? — pnp 808219
apr 12 at 12:10
How is “hacking” even possible if I “defend” properly? — Graham Hill 6,688621
apr 12 at 9:00
How is “hacking” even possible if I “defend” properly? — Kitsune 55636
apr 12 at 1:50
Is there additional security value in using passwords with words or phrases in non-English languages? — Thomas Pornin 82.5k16155289
apr 11 at 19:09
htaccess hacked — Thomas Pornin 82.5k16155289
apr 10 at 19:34
What is ECDHE-RSA? — CodesInChaos 3,8171820
apr 10 at 17:48
Why have username AND password? — mikeazo 1,587212
apr 10 at 17:33
Firewall philosophy — mgjk 2,5081313
apr 10 at 13:01
Why don't people hash and salt usernames before storing them — AJ Henderson 10.7k1834
apr 10 at 12:06
How can I protect my internet-connected devices from discovery by Shodan? — Rory McCune 14.4k22361
apr 10 at 7:15
Using linux to combat windows flash drive malware? — Adnan 6,10811944
apr 10 at 7:15
Securing my web-server / website — Scott Pack 7,98132560
apr 10 at 7:15
What logs to retain for PCI-DSS? — Scott Pack 7,98132560
apr 10 at 1:35
Why do people say that PHP is inherently insecure? — nealmcb 10.2k2371
apr 10 at 0:15
I found a virus on my USB stick. Now what? — Terry Chia 11k42267
apr 9 at 23:25
How might the U.K. Government's proposed internet surveillance equipment “bypass” encryption? — Matrix 1,863114
apr 9 at 21:55
How can I protect my internet-connected devices from discovery by Shodan? — Manishearth 2,258518
apr 9 at 18:55
How can I protect my internet-connected devices from discovery by Shodan? — Scott Pack 7,98132560
apr 9 at 17:29
How can I protect my internet-connected devices from discovery by Shodan? — Tom Leek 24.9k42668
apr 8 at 23:44
Use additional “password” in Referer to hide private site? — Thomas Pornin 82.5k16155289
apr 8 at 23:39
Can I determine if my computer has a key logger installed? — Antony Vennard 11.3k12165
apr 8 at 21:44
What risks do Cookieless sessions have? What are the mitigations? — curiousguy 1,7211614
apr 8 at 18:23
Is there additional security value in using passwords with words or phrases in non-English languages? — Polynomial 32.5k1066135
apr 8 at 15:01
Use additional “password” in Referer to hide private site? — Adnan 6,10811944
apr 8 at 14:36
Preventing a spoofing man in the middle attack? — Tom Leek 24.9k42668
apr 8 at 11:56
Books about Penetration Testing — Scott Pack 7,98132560
apr 8 at 10:56
Books about Penetration Testing — atdre 6,5451328
apr 8 at 8:55
Handling passwords in a web application — Tom Leek 24.9k42668
apr 8 at 8:50
SQL Injection: Drop All Tables — Rook 21.2k11969
apr 8 at 5:14
How does hashing work? — Kaz 1,056210
apr 7 at 9:22
How does hashing work? — Thomas Pornin 82.5k16155289
apr 7 at 5:21
How does hashing work? — Gilles 10.1k22158
apr 6 at 23:24
What do I need to do to secure log-in and registration for my website? — Adam Caudill 62438
apr 6 at 23:09
Why are hash functions one way? If I know the algorithm, why can't I calculate the input from it? — Thomas Pornin 82.5k16155289
apr 6 at 23:04
how long does it take to actually generate rainbow tables? — Jesper Mortensen 3,0261025
apr 6 at 18:42
Can my company see what HTTPS sites I went to? — Hendrik Brummermann♦ 15.6k23483
apr 6 at 12:25
Why is it so hard to close onion domains (e.g. The Silkroad)? — scuzzy-delta 2,4211618
apr 6 at 6:23
DDoS - Impossible to stop? — Tom Leek 24.9k42668
apr 6 at 2:42
Handling passwords in a web application — Terry Chia 11k42267
apr 5 at 23:01
DDoS - Impossible to stop? — Sparr 4576
apr 5 at 19:45
I need a good cryptography algorithm that can be encoded and decoded — Stephen Touset 1,139211
apr 5 at 17:04
How to estimate the time needed to crack RSA encryption? — Antony Vennard 11.3k12165
apr 5 at 16:29
Security seals and the “perception of safety”? — Rook 21.2k11969
apr 5 at 16:24
Is it compulsory to have https on e-commerce site? — Thomas Pornin 82.5k16155289
apr 5 at 15:34
PINsentry PRNG and Bank Cards — John Deters 5543
apr 5 at 12:38
Security seals and the “perception of safety”? — Polynomial 32.5k1066135
apr 5 at 10:27
What technical reasons are there to have low maximum password lengths? — dr jimbob 11.7k1656
apr 5 at 5:51
What's an easy way to perform a man-in-the-middle attack on SSL? — mr.spuratic 1,21638
apr 5 at 5:41
Will encrypting the same file with GPG and the same key produce the same ciphertext? — Thomas Pornin 82.5k16155289
apr 5 at 2:10
Guidance for implementors of HTTPS-only sites (Server side) — D.W. 44.8k261156
apr 4 at 23:19
How do some sites (e.g. online banks) only ask for specific characters from a password without storing it as plaintext? — Jeff Ferland♦ 21.4k23388
apr 4 at 20:43
What justification is there for Comcast to block SMTP port 25 outbound from residential service? — Tom Leek 24.9k42668
apr 4 at 15:52
Port Knocking is it a good idea? — Michael Rash 1012
apr 4 at 14:11
How can I detect/withstand DNS amplification attack? — Ladadadada 2,4871727
apr 4 at 13:51
I have a client that is worried about DDOS attacks on their site, and they want penetration testing. Will that help? — Rory McCune 14.4k22361
1 2 3 4 5 … 28