User Shadok - IT Security Stack Exchange

bio	website
	location
	age
visits	member for	2 years, 3 months
	seen	Apr 6 at 17:21
stats	profile views	15

	326 reputation	bio	website		visits	member for	2 years, 3 months
110 badges		location			seen	Apr 6 at 17:21

152

168

votes

4

answers

41

kviews

Do any security experts recommend bcrypt for password storage?

jul 11 at 16:30 PBKDF2 61

76

130

votes

8

answers

52

kviews

Why not use larger cipher keys?

cryptography asymmetric cipher

dec 18 at 11:37 lynks 4,352

85

114

votes

11

answers

14

kviews

How to securely hash passwords?

appsec cryptography passwords hash

apr 29 at 14:47 Valentin Rusk 1

33

83

votes

8

answers

4

kviews

Attacking an office printer?

ssl linux http vulnerability-scanners

nov 7 at 6:57 Polynomial 32.5k

19

58

votes

9

answers

8

kviews

What would one need to do in order to hijack a satellite?

hardware protocols wireless apt

apr 23 at 19:47 Luc 3,361

47

58

votes

12

answers

10

kviews

Apache Server Hardening

webserver hardening configuration apache

oct 18 at 8:48 Rory Alsop♦ 32.4k

51

49

votes

8

answers

5

kviews

Can anyone provide references for implementing web application self password reset mechanisms properly?

appsec web-application password-management

jul 31 at 10:21 ccellar 103

15

43

votes

2

answers

5

kviews

What are rainbow tables and how are they used?

attack-prevention cryptography attacks hash

oct 26 '11 at 16:06 Antony Vennard 11.3k

8

35

votes

5

answers

5

kviews

How do you destroy an old hard drive?

hardware data-leakage risk-management destruction

nov 5 at 14:57 Matthew Doucette 278

9

33

votes

7

answers

2

kviews

“Real” Salt and “Fake” Salt

cryptography passwords hash password-management salt

jul 22 at 5:43 curiousguy 1,711

9

32

votes

3

answers

1

kviews

Mars Curiosity Rover Security

malware apt software

aug 13 at 21:18 AviD♦ 20.3k

10

25

votes

2

answers

2

kviews

Pre-hash password before applying bcrypt to avoid restricting password length

cryptography passwords hash passphrase

jun 28 at 6:17 Steven Alexander 61

8

23

votes

4

answers

8

kviews

Are salted SHA-256/512 hashes still safe if the hashes and their salts are exposed?

cryptography hash brute-force

jun 27 '11 at 12:58 nealmcb 10.2k

19

21

votes

5

answers

2

kviews

How to perform a security audit for a PHP application?

appsec php penetration-test code-review

dec 13 at 14:00 SecurityMatt 111

3

20

votes

3

answers

2

kviews

How does Convergence (CA replacement) prevent its notaries from being MITM'd as well?

cryptography network ssl protocols

oct 6 '11 at 15:15 Thomas Pornin 82.2k

3

16

votes

5

answers

463

views

What should I do when classified information stayed on a unauthorized laptop?

incident-response audit hardware forensics

jan 8 at 19:54 Iszi 9,213

5

15

votes

2

answers

342

views

What risks should I be aware of before allowing advertisements being placed on my website?

appsec web-application webserver javascript injection

nov 2 '11 at 9:06 Геннадий-Ванин 633

4

13

votes

5

answers

480

views

How to get into RFID auditing?

audit research professional-education rfid

sep 29 '11 at 13:47 Jeff Ferland♦ 21.4k

4

13

votes

2

answers

2

kviews

How does a crypter for bypass antivirus detection work?

encryption antivirus virus

oct 26 '11 at 9:06 Rory Alsop♦ 32.4k

31

13

votes

9

answers

2

kviews

Vulnerable OS's?

penetration-test professional-education exploit known-vulnerabilities operating-systems

jun 9 '12 at 7:58 Community♦ 1

2

12

votes

3

answers

545

views

Whistleblowing, business ethics and credit card data

compliance pci-dss disclosure ethics

jul 27 '11 at 14:16 M15K 851

5

11

votes

5

answers

363

views

How can I keep my programmer collegues informed about security issues?

user-education

dec 20 '11 at 3:13 bstpierre 2,947

1

10

votes

1

answer

382

views

What encryption prevents the tampering of Windows Identity Foundation (WIF) FedAuth cookies?

windows cookies federation identity openid

may 15 '12 at 14:46 Cyril N. 1,727

2

10

votes

3

answers

671

views

Attacks against windows kiosk software

operating-systems windows desktop

apr 11 '12 at 0:21 Community♦ 1

3

9

votes

2

answers

2

kviews

What are the most common password salting methods?

cryptography passwords hash salt

jul 22 at 15:20 Andrey Botalov 1,132

2

8

votes

3

answers

4

kviews

Whats the difference between MAC vs hash

cryptography hash

feb 9 at 12:29 Thomas Pornin 82.2k

5

8

votes

3

answers

424

views

What FOSS software do you like to use to build intrusion detection stacks?

ids

jan 28 '11 at 16:15 Scott Pack 7,961

2

7

votes

3

answers

456

views

Public wifi security protocols

ssl wifi ssh vpn

jan 5 '12 at 9:29 DDEV 11

3

7

votes

2

answers

470

views

What information is exposed by simply opening an RDP connection to the internet?

windows vpn rdp azure

mar 19 '12 at 7:40 Taylor Gibb 146

3

7

votes

2

answers

2

kviews

Worst case scenario, what can a Chrome extension do with “Your data on all websites” and “Your tabs and browsing activity”?

web-browser chrome

feb 11 at 2:29 Serdar 21

Shadok

41 Favorites