User Ali Ahmad - IT Security Stack Exchange

bio	website
	location
	age
visits	member for	9 months
	seen	6 mins ago
stats	profile views	139

	1,421 reputation	bio	website		visits	member for	9 months
1523 badges		location			seen	6 mins ago

57

198

votes

16

answers

19

kviews

How does changing your password every 90 days increase security?

may 19 '12 at 7:21 Sklivvz♦ 101

80

168

votes

13

answers

27

kviews

Are passwords stored in memory safe?

passwords operating-systems memory

mar 18 at 11:08 petertonoli 111

104

121

votes

7

answers

8

kviews

How to store salt?

passwords hash salt

oct 26 at 12:22 Polynomial 32.5k

33

83

votes

8

answers

4

kviews

Attacking an office printer?

ssl linux http vulnerability-scanners

nov 7 at 6:57 Polynomial 32.5k

11

76

votes

13

answers

6

kviews

Why do we lock our computers?

operating-systems physical

oct 25 at 17:09 ssg 358

17

69

votes

7

answers

3

kviews

How do I know a piece of software only does what the author claims?

source-code backdoor

feb 7 at 21:36 Tim X 344

89

68

votes

13

answers

6

kviews

What “hacking” competitions/challenges exist?

professional-education exploit conference

mar 1 at 1:49 Eric G 3,016

82

63

votes

16

answers

13

kviews

What tools are available to assess the security of a web application?

appsec web-application penetration-test tools web-scanners

jul 15 at 21:43 Andrey Botalov 1,132

21

53

votes

12

answers

3

kviews

Does an established ssl connection mean a line is really secure

web-application ssl

dec 26 '11 at 1:28 bstpierre 2,957

10

48

votes

10

answers

4

kviews

How do you explain the necessity of “nuke it from orbit” to management and users?

malware antivirus risk-management user-education

nov 19 at 21:32 Akber Choudhry 379

67

47

votes

18

answers

3

kviews

What security resources should a white-hat developer follow these days?

appsec attacks source-code professional-education

nov 27 at 10:14 Community♦ 1

49

42

votes

8

answers

6

kviews

Hardening Linux Server

operating-systems configuration linux hardening

aug 26 '11 at 19:34 Rory Alsop♦ 32.5k

22

41

votes

5

answers

10

kviews

Certificate based authentication vs Username and Password authentication

cryptography authentication passwords certificates

apr 18 '12 at 3:25 Community♦ 1

11

41

votes

16

answers

2

kviews

Can we still provide confidentiality when cryptography is outlawed?

cryptography encryption legal government

nov 10 at 12:51 youjustreadthis 58

18

38

votes

4

answers

5

kviews

How much can I trust Tor?

web-browser anonymity trust tor

jan 19 at 16:44 RTOSkit 162

18

37

votes

6

answers

11

kviews

How secure are virtual machines really? False sense of security?

virtualization malware

jan 5 '12 at 19:59 Community♦ 1

8

32

votes

1

answer

2

kviews

default.php file found on the server, is this a security threat?

php

jan 29 at 9:14 Polynomial 32.5k

29

28

votes

8

answers

4

kviews

Books about Penetration Testing

penetration-test professional-education books

apr 8 at 9:10 Ashish 33

29

28

votes

6

answers

9

kviews

Servers for penetration testing

penetration-test remote-server

mar 13 at 15:16 Aman Hardikar 1

3

26

votes

3

answers

659

views

What is this authentication method/approach called?

authentication phishing sitekey

mar 29 at 13:49 makerofthings7 12.6k

11

24

votes

3

answers

810

views

A Different Approach to PKI

certificates public-key-infrastructure identity

jan 4 at 15:23 CodesInChaos 3,817

6

24

votes

5

answers

6

kviews

Detecting Steganography in images

forensics steganography

mar 8 at 5:09 user162098 11

9

22

votes

4

answers

3

kviews

Why AES is not used for secure hashing, instead of SHA-x?

encryption cryptography hash

sep 15 at 2:47 Thomas Pornin 82.5k

5

22

votes

4

answers

2

kviews

What is the purpose of a fuzzer?

fuzzing

oct 10 at 19:42 parisa shad 1

6

21

votes

3

answers

5

kviews

How to secure a MongoDB instance?

databases hardening mongodb nosql

mar 30 '12 at 20:45 user7982 11

12

21

votes

3

answers

2

kviews

Should I be disabling Java?

known-vulnerabilities java zero-day

jan 20 at 21:04 Cristian Dobre 3,870

8

20

votes

8

answers

2

kviews

Software that encrypts the data before deleting it

encryption

oct 14 at 18:11 Jeff Gibbs 11

9

20

votes

2

answers

3

kviews

Why is it possible to sniff an HTTPS / SSL request?

http ssl

sep 1 at 15:57

7

19

votes

7

answers

893

views

How Involved Should a Developer Be in Designing a Security Policy?

appsec policy

jan 25 at 20:14 Paul 238

5

19

votes

3

answers

975

views

Does overlaying the mouse on a virtual numeric keyboard really protect against keyloggers?

passwords attack-prevention keyloggers

mar 25 at 1:04 TildalWave 3,619

Ali Ahmad

116 Favorites