User Deer Hunter - IT Security Stack Exchange

bio	website
	location
	age
visits	member for	7 months
	seen	6 hours ago
stats	profile views	160

	751 reputation	bio	website		visits	member for	7 months
518 badges		location			seen	6 hours ago

167

315

votes

17

answers

36

kviews

How can I explain SQL injection without technical jargon?

sql-injection

mar 11 at 8:13 martinstoeckli 901

81

211

votes

13

answers

36

kviews

What technical reasons are there to have low maximum password lengths?

passwords password-policy

apr 2 at 20:47 Luc 3,416

196

173

votes

3

answers

45

kviews

How does SSL work?

ssl certificates public-key-infrastructure

may 17 at 16:10 oleksii 362

80

168

votes

13

answers

27

kviews

Are passwords stored in memory safe?

passwords operating-systems memory

mar 18 at 11:08 petertonoli 111

152

168

votes

4

answers

42

kviews

Do any security experts recommend bcrypt for password storage?

cryptography passwords hash

jul 11 at 16:30 PBKDF2 61

67

148

votes

3

answers

32

kviews

CRIME - How to beat the BEAST successor?

ssl exploit defense

sep 17 at 13:08 Bill the Lizard 1,366

23

139

votes

18

answers

7

kviews

Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field

passwords authentication logging siem

may 15 at 9:35 Lex 1,140

76

130

votes

8

answers

52

kviews

Why not use larger cipher keys?

cryptography asymmetric cipher

dec 18 at 11:37 lynks 4,352

52

130

votes

9

answers

8

kviews

How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?

cryptography encryption ssl key-exchange

sep 21 '11 at 0:34 makerofthings7 12.6k

41

126

votes

12

answers

18

kviews

How is an ATM secure?

attack-prevention physical atm

may 17 at 22:20 Xander 2,464

105

123

votes

7

answers

8

kviews

How to store salt?

passwords hash salt

oct 26 at 12:22 Polynomial 32.8k

44

117

votes

7

answers

6

kviews

How do certification authorities store their private root keys?

public-key-infrastructure key-management certificate-authority certification key-generation

dec 11 at 13:43 Terry Chia 11.1k

86

114

votes

11

answers

14

kviews

How to securely hash passwords?

appsec cryptography passwords hash

apr 29 at 14:47 Valentin Rusk 1

16

104

votes

18

answers

7

kviews

What should I do when my boss asks me to fabricate audit log data?

ethics

apr 8 '12 at 1:19 ddyer 609

35

96

votes

8

answers

8

kviews

Are “man in the middle” attacks extremely rare?

network attacks man-in-the-middle statistics

jan 21 at 15:23 culix 157

33

83

votes

8

answers

4

kviews

Attacking an office printer?

ssl linux http vulnerability-scanners

nov 7 at 6:57 Polynomial 32.8k

25

70

votes

7

answers

4

kviews

How can I protect my internet-connected devices from discovery by Shodan?

network privacy hardening

apr 10 at 11:59 Manishearth 2,296

69

70

votes

21

answers

16

kviews

Lessons learned and misconceptions regarding encryption and cryptology

cryptography encryption .net java

1d ago makerofthings7 12.6k

16

69

votes

7

answers

3

kviews

How do I know a piece of software only does what the author claims?

source-code backdoor

feb 7 at 21:36 Tim X 344

22

67

votes

16

answers

2

kviews

At what point does something count as 'security through obscurity'?

obscurity

mar 10 at 15:22 Spook 101

82

63

votes

16

answers

14

kviews

What tools are available to assess the security of a web application?

appsec web-application penetration-test tools web-scanners

jul 15 at 21:43 Andrey Botalov 1,132

17

60

votes

13

answers

5

kviews

VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?

cryptography passwords hash

jan 2 at 16:59 KeithS 2,684

47

58

votes

12

answers

10

kviews

Apache Server Hardening

webserver hardening configuration apache

oct 18 at 8:48 Rory Alsop♦ 32.6k

27

57

votes

9

answers

7

kviews

How can PayPal spoof emails so easily to say it comes from someone else?

email

may 20 at 7:28 Steven B 1

15

56

votes

15

answers

3

kviews

How to write an email regarding IT Security that will be read, and not ignored by the end user?

corporate-policy antivirus business-risk patching

mar 27 '12 at 20:36 Brad 579

9

54

votes

11

answers

6

kviews

How can I punish a hacker?

legal

may 13 at 8:57 Indolering 90

21

53

votes

12

answers

3

kviews

Does an established ssl connection mean a line is really secure

web-application ssl

dec 26 '11 at 1:28 bstpierre 2,957

10

52

votes

7

answers

2

kviews

Touch Screen Password Guessing by Fingerprint Trace

passwords mobile

may 17 at 3:49 D3C4FF 3,127

12

51

votes

8

answers

6

kviews

Why would someone trust DuckDuckGo or other providers with a similar privacy policy?

privacy trust

sep 15 at 20:27 sfx 628

69

48

votes

18

answers

3

kviews

What security resources should a white-hat developer follow these days?

appsec attacks source-code professional-education

nov 27 at 10:14 Community♦ 1

Deer Hunter

531 Favorites