User Ali Ahmad - IT Security Stack Exchange

bio	website
	location
	age
visits	member for	9 months
	seen	7 mins ago
stats	profile views	139

	1,453 reputation	bio	website		visits	member for	9 months
1523 badges		location			seen	7 mins ago

80

168

votes

13

answers

27

kviews

Are passwords stored in memory safe?

mar 18 at 11:08 petertonoli 111

57

198

votes

16

answers

19

kviews

How does changing your password every 90 days increase security?

authentication passwords password-management

may 19 '12 at 7:21 Sklivvz♦ 101

82

63

votes

16

answers

14

kviews

What tools are available to assess the security of a web application?

appsec web-application penetration-test tools web-scanners

jul 15 at 21:43 Andrey Botalov 1,132

18

37

votes

6

answers

12

kviews

How secure are virtual machines really? False sense of security?

virtualization malware

jan 5 '12 at 19:59 Community♦ 1

22

41

votes

5

answers

10

kviews

Certificate based authentication vs Username and Password authentication

cryptography authentication passwords certificates

apr 18 '12 at 3:25 Community♦ 1

29

28

votes

6

answers

9

kviews

Servers for penetration testing

penetration-test remote-server

mar 13 at 15:16 Aman Hardikar 1

105

123

votes

7

answers

8

kviews

How to store salt?

passwords hash salt

oct 26 at 12:22 Polynomial 32.8k

6

24

votes

5

answers

6

kviews

Detecting Steganography in images

forensics steganography

mar 8 at 5:09 user162098 11

11

76

votes

13

answers

6

kviews

Why do we lock our computers?

operating-systems physical

oct 25 at 17:09 ssg 358

89

68

votes

13

answers

6

kviews

What “hacking” competitions/challenges exist?

professional-education exploit conference

mar 1 at 1:49 Eric G 3,031

49

42

votes

8

answers

6

kviews

Hardening Linux Server

operating-systems configuration linux hardening

aug 26 '11 at 19:34 Rory Alsop♦ 32.6k

3

8

votes

2

answers

6

kviews

Setting up a honeypot

honeypot

oct 11 at 21:30 user13959 51

6

21

votes

3

answers

5

kviews

How to secure a MongoDB instance?

databases hardening mongodb nosql

mar 30 '12 at 20:45 user7982 11

18

38

votes

4

answers

5

kviews

How much can I trust Tor?

web-browser anonymity trust tor

jan 19 at 16:44 RTOSkit 162

5

16

votes

13

answers

4

kviews

How can I intercept and modify HTTP requests?

appsec tools penetration-test http

may 18 '12 at 9:51 Mark Hillick 1,684

29

28

votes

8

answers

4

kviews

Books about Penetration Testing

penetration-test professional-education books

apr 8 at 9:10 Ashish 33

33

83

votes

8

answers

4

kviews

Attacking an office printer?

ssl linux http vulnerability-scanners

nov 7 at 6:57 Polynomial 32.8k

10

48

votes

10

answers

4

kviews

How do you explain the necessity of “nuke it from orbit” to management and users?

malware antivirus risk-management user-education

nov 19 at 21:32 Akber Choudhry 379

9

22

votes

4

answers

3

kviews

Why AES is not used for secure hashing, instead of SHA-x?

encryption cryptography hash

sep 15 at 2:47 Thomas Pornin 82.9k

16

69

votes

7

answers

3

kviews

How do I know a piece of software only does what the author claims?

source-code backdoor

feb 7 at 21:36 Tim X 344

21

53

votes

12

answers

3

kviews

Does an established ssl connection mean a line is really secure

web-application ssl

dec 26 '11 at 1:28 bstpierre 2,957

6

11

votes

6

answers

3

kviews

How useful is CISSP to a recent graduate?

certification cissp

may 7 '12 at 12:52 Andrey Botalov 1,132

9

20

votes

2

answers

3

kviews

Why is it possible to sniff an HTTPS / SSL request?

http ssl

sep 1 at 15:57

3

8

votes

4

answers

3

kviews

How safe is it to install XAMPP on my home computer to test PHP code?

php webserver apache

aug 29 at 20:46 msanford 228

69

48

votes

18

answers

3

kviews

What security resources should a white-hat developer follow these days?

appsec attacks source-code professional-education

nov 27 at 10:14 Community♦ 1

3

votes

6

answers

3

kviews

monitoring outgoing network traffic

network sniffer monitoring

jul 4 at 15:20 Scott Pack 7,986

8

32

votes

1

answer

2

kviews

default.php file found on the server, is this a security threat?

php

jan 29 at 9:14 Polynomial 32.8k

11

41

votes

16

answers

2

kviews

Can we still provide confidentiality when cryptography is outlawed?

cryptography encryption legal government

nov 10 at 12:51 youjustreadthis 58

5

22

votes

4

answers

2

kviews

What is the purpose of a fuzzer?

fuzzing

oct 10 at 19:42 parisa shad 1

8

20

votes

8

answers

2

kviews

Software that encrypts the data before deleting it

encryption

oct 14 at 18:11 Jeff Gibbs 11

Ali Ahmad

116 Favorites