Reputation
9,289
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
2 16 59
Newest
 Good Answer
Impact
~511k people reached

Dec
20
reviewed Approve How can I find the process that is trying to use smtp to send email?
Dec
20
reviewed Approve How does DNSSec work? Are there known limitations or issues?
Dec
14
reviewed Approve How can someone go off-web, and anonymise themselves after a life online?
Dec
10
reviewed Approve Server sends RST during TLS handshake. Why?
Dec
7
reviewed Approve How to know what others browse through the network?
Dec
4
reviewed Approve What to do about ssh breakin attempts
Dec
2
comment Is there any technical security reason not to buy the cheapest SSL certificate you can find?
I'm sure this is all technically true, but talking about your self-invented 5 tiers of security does not answer the question. And disclosure would be used when you are a certificate reseller, not when you (like most of the people here I think) got a website with a (hopefully signed) certificate.
Dec
2
revised Do I need a salt when hashing a randomly generated password?
You hash the output of a CSPRNG. It's very confusing to say you hash a CSPRNG or that your password "is" CSPRNG.
Dec
1
reviewed Approve What is SHA-3 and why did we change it?
Dec
1
reviewed Approve Can bankers' rounding be exploited to maliciously increase balances?
Nov
29
reviewed Approve Techniques to make a login page safe without using SSL
Nov
29
revised Is it considered a CSRF if it requires a unique identifier which is not a CSRF token - not tied to the user session?
Use example.com instead of random domain names...
Nov
29
reviewed Approve Metaploit: Exploits and its relevant payload
Nov
29
reviewed Approve How do you explain to experts that a database server should not reside in the DMZ?
Nov
28
reviewed Approve Why does my openssl connection fail with elliptic curve cipher ECDH-RSA-AES128-SHA?
Nov
28
reviewed Approve Hacked Ubuntu server, probably hacked commands (netstat, ps, …), how to replace them?
Nov
27
reviewed Approve IP address of an iPhone
Nov
26
reviewed Approve How is security of server's RSA private key is ensured?
Nov
26
reviewed Approve Is XSS a server-side or client-side vulnerability?
Nov
23
comment How do major sites prevent DDoS?
@NewWorld Well google for it, it's not hard to find. One example is PayPal (Ebay-owned) being DDoSed by "Anonymous" not too long ago.