Nice Question Badge - IT Security Stack Exchange

aug 7 '11 at 8:18

How to detect “forged” SSL certificates from the webserver end — JohnB 1675

aug 7 '11 at 0:08

security implications of NULL dereference — StasM 818212

aug 6 '11 at 15:16

How to scan a PDF for malware? — D.W. 44.8k261156

aug 5 '11 at 17:15

Is Steganography a safe method to store secret data? — Vahid Asefi 534

aug 4 '11 at 19:04

Is there any legal reason to save a cleartext password? — makerofthings7 12.6k331137

aug 3 '11 at 20:48

How to write an email regarding IT Security that will be read, and not ignored by the end user? — makerofthings7 12.6k331137

aug 1 '11 at 20:41

Am I wrong to believe that passwords should never be recoverable (one way hash)? — Brian Reindel 36018

aug 1 '11 at 16:41

Why doesn't the client's web browser need to be PCI compliant? — ixe013 882413

aug 1 '11 at 16:26

Has anyone achieved PCI compliance on AWS? — Boris Popov 963

jul 30 '11 at 17:05

In what scenarios is relying on source IP address as a security control acceptable/unacceptable? — Rory McCune 14.4k22361

jul 27 '11 at 15:48

I just discovered major security flaws in my web store? — Moses 674414

jul 27 '11 at 9:53

Password manager vs remembering passwords — KilledKenny 614722

jul 27 '11 at 9:48

Is it enough to only wipe a flash drive once? — LanceBaynes 717840

jul 27 '11 at 2:48

Salting password with the first 8 bit of the password itself — Mohamed 764512

jul 26 '11 at 16:48

Do any of you who are *really* dealing with APT have any recommended intelligence feeds for SIEM/IDS/etc? — Tate Hansen 8,56521849

jul 26 '11 at 7:08

How to secure a WiFi network? — Jonas 86711023

jul 26 '11 at 6:33

What are the downsides of BrowserID/Persona compared to OpenID/OAuth/Facebook? — Hendrik Brummermann♦ 15.6k23483

jul 25 '11 at 23:18

Why should one not use the same asymmetric key for encryption as they do for signing? — Iszi 9,23812377

jul 25 '11 at 14:32

How to get into RFID auditing? — Chris Andrè Dale 9,06052257

jul 25 '11 at 6:57

Are malicious relying parties able to abuse OpenID logins? — Pacerier 709815

jul 24 '11 at 19:31

Why do people think that this is bad way to hash passwords? — genesis 363413

jul 23 '11 at 0:33

Are there any security problems with Google false start for TLS? — Rakkhi 3,534433

jul 23 '11 at 0:18

SSL TLS renegotiation vulnerability - current situation in clients — Hubert Kario 1,186416

jul 22 '11 at 23:58

Is BASIC-Auth secure if done over HTTPS? — Morten 32337

jul 22 '11 at 21:38

Advantages and disadvantages of Stream versus Block Ciphers — Eric W 1,0541717

jul 22 '11 at 15:22

Is it OK to tell or give your password to an admin? — BЈовић 352212

jul 22 '11 at 10:12

Storing sensitive information securely — Mike 1707

jul 21 '11 at 19:22

Is it OK to tell your password to an admin? [duplicate] — BЈовић 352212

jul 21 '11 at 9:12

iPhone Tracking debacle - risks and countermeasures — AviD♦ 20.3k545114

jul 21 '11 at 9:12

Secure memcpy for pure C — AviD♦ 20.3k545114

jul 20 '11 at 22:57

open source software security rating — 3rd-party authority — kcrumley 1535

jul 20 '11 at 21:57

Is there a method of generating site-specific passwords which can be executed in my own head? — Mnementh 25617

jul 19 '11 at 17:18

When a sysadmin leaves what extra precautions need to be taken? — Toby 42538

jul 18 '11 at 3:12

List of good security blogs one should read — GG01 13914

jul 17 '11 at 13:05

Which HTTP status codes are interesting from a security point of view? — pootzko 1,268923

jul 15 '11 at 23:00

Do non-keyboard characters make my password less susceptible to brute forcing? — jnm2 672111

jul 15 '11 at 3:34

Recommended # of iterations when using PKBDF2-SHA256? — Tails 32836

jul 14 '11 at 17:49

What's a good way to trigger a hidden 'distress signal' in instant messaging? — Stefano Palazzo 281313

jul 14 '11 at 9:58

What happens when an Intermediate CA is revoked? — Anne Stellingwerf 1837

jul 14 '11 at 2:35

how long does it take to actually generate rainbow tables? — stickman 44656

jul 12 '11 at 21:09

Pitfalls of using OAuth for mobile Applications — Rory McCune 14.4k22361

jul 11 '11 at 10:02

What's the difference between SSL, TLS, and HTTPS? — jrdioko 1,2672624

jul 8 '11 at 8:44

Most secure password hash algorithm(s)? — Core Xii 19115

jul 7 '11 at 16:09

What is gained by hashing the last block on-device? — emboss 761315

jul 7 '11 at 2:49

2 factor authentication - cost effective solution for a web startup — kimsia 405213

jul 7 '11 at 2:49

How should one properly dispose of a printer or fax which is used for sensitive documents? — Iszi 9,23812377

jul 6 '11 at 13:24

Designing in zero day attack mitigations — Eric W 1,0541717

jul 6 '11 at 13:04

What techniques do advanced firewalls use to protect againt DoS/DDoS? — Jonas 86711023

jul 5 '11 at 19:02

NoScript: How to determine which sites/scripts to whitelist? — Iszi 9,23812377

jul 5 '11 at 15:57

Is anybody using client browser certificates? — StasM 818212

jul 5 '11 at 7:57

Are all security requirements expected to be testable? — Phoenician-Eagle 1,299313

jul 4 '11 at 21:57

Applications of probability/statistics in IT security? — cespinoza 1534

jul 4 '11 at 0:46

How long should the password be? — Mohamed 764512

jul 4 '11 at 0:31

Are GUIDs safe for one-time tokens? — Michael Haren 23227

jul 4 '11 at 0:31

Are there security issues with embedding an HTTPS iframe on an HTTP page? — yahelc 18316

jul 3 '11 at 16:46

How can a Software application defend against DoS or DDoS? — Phoenician-Eagle 1,299313

jul 1 '11 at 14:49

What to transfer? Password or its hash? — Konrad Garus 21213

jun 30 '11 at 19:38

What security requirements do you have for Domain Administrators? — makerofthings7 12.6k331137

jun 30 '11 at 6:07

Should usernames be kept secret? — Rakkhi 3,534433

jun 30 '11 at 6:07

Can anyone provide references for implementing web application self password reset mechanisms properly? — bdg 26446

Badge

This badge has been awarded 1018 times. Recently awarded to: