User John - IT Security Stack Exchange

bio	website	com
	location	United States
	age	93
visits	member for	2 years, 2 months
	seen	Apr 25 at 17:42
stats	profile views	10

	224 reputation	bio	website	com	visits	member for	2 years, 2 months
29 badges		location	United States		seen	Apr 25 at 17:42

67

151

votes

3

answers

33

kviews

CRIME - How to beat the BEAST successor?

jun 11 at 7:39 Espo 147

48

62

votes

12

answers

10

kviews

Apache Server Hardening

webserver hardening configuration apache

oct 18 at 8:48 Rory Alsop♦ 33.3k

49

43

votes

8

answers

6

kviews

Hardening Linux Server

operating-systems configuration linux hardening

aug 26 '11 at 19:34 Rory Alsop♦ 33.3k

9

22

votes

4

answers

4

kviews

Why AES is not used for secure hashing, instead of SHA-x?

encryption cryptography hash

sep 15 at 2:47 Thomas Pornin 85.4k

10

21

votes

3

answers

1

kviews

Help me find a lightweight threat modeling framework

business-risk threat-modeling

nov 12 '11 at 20:34 Epoch Win 492

6

21

votes

3

answers

665

views

What is an SSL certificate intended to prove, and how does it do it?

ssl certificates privacy public-key-infrastructure

jun 16 '12 at 14:53 Oleksi 2,971

13

20

votes

5

answers

2

kviews

Professional certifications for IT Security

professional-education certification people-management

mar 11 '12 at 21:09 Rory Alsop♦ 33.3k

3

18

votes

10

answers

1

kviews

Is it ever appropriate to fight back?

incident-response ethics

nov 15 at 0:44 Thomas Pornin 85.4k

4

12

votes

2

answers

2

kviews

Why is it always `HASH( salt + password )` that we recommend?

cryptography passwords hash

jun 15 '11 at 16:48 bethlakshmi 6,992

5

11

votes

2

answers

805

views

What should be included in a jump bag and how often should it be reviewed?

tools incident-response forensics

jan 28 '11 at 15:48 Scott Pack 8,121

2

11

votes

2

answers

327

views

Network policies under AppArmor/SELinux

network linux access-control selinux apparmor

dec 22 at 4:38 mricon 765

4

11

votes

1

answer

800

views

Passive and active attacks via X11. Is Wayland any better?

desktop x11

may 27 '11 at 17:52 nealmcb 10.3k

4

10

votes

3

answers

7

kviews

How do you discover what permissions an AD group has, if you have no documentation?

windows access-control active-directory

jul 3 '12 at 7:48 Rory Alsop♦ 33.3k

2

10

votes

2

answers

1

kviews

Reject IP packets with an ICMP error, or just drop them?

network firewalls ddos iptables

jan 18 at 6:22 Ali Ahmad 1,521

1

8

votes

3

answers

826

views

How to manually check for rootkits on a server

operating-systems linux incident-response forensics rootkits

jul 16 '11 at 15:19 nealmcb 10.3k

4

8

votes

2

answers

611

views

Risks of ssh to an untrusted host?

ssh x11

sep 24 '11 at 9:31 chris 2,307

1

8

votes

7

answers

13

kviews

How can I determine the encryption strength of an SSL connection

encryption ssl

nov 27 at 8:16 Community♦ 1

2

8

votes

1

answer

399

views

Relative importance of CHROOT for web servers

webserver linux mod-security

apr 1 '11 at 21:49 Hendrik Brummermann♦ 15.9k

1

7

votes

3

answers

597

views

Freelance security work

career

aug 15 at 22:17 Rory Alsop♦ 33.3k

1

7

votes

3

answers

1

kviews

What does a common workstation setup look like for pentesting and vulnerability research?

audit fuzzing

jan 12 '12 at 20:19 atdre 6,585

1

6

votes

3

answers

1

kviews

Secure sync of TrueCrypt containers

backup truecrypt

may 14 '12 at 9:23 Graham Hill 6,728

2

6

votes

3

answers

564

views

Should SSL be terminated at a load balancer?

ssl network firewalls

feb 6 at 21:25 makerofthings7 12.9k

2

5

votes

3

answers

1

kviews

How to detect Meterpreter and similar malware?

linux antimalware

may 21 '11 at 19:29 atdre 6,585

1

5

votes

3

answers

1

kviews

Is CentOS a good choice from a security perspective?

operating-systems linux

mar 7 at 7:41 D.W. 45.7k

2

5

votes

2

answers

209

views

Enterprise security incident response and detection

incident-response siem

jun 23 '11 at 16:29 Rakkhi 3,559

1

5

votes

2

answers

370

views

Is this a good way to manage Incident-Response

incident-response

apr 4 '11 at 11:10 Marc Wickenden 591

3

5

votes

3

answers

243

views

Certifiable standards for server security, besides PCI-DSS?

compliance pci-dss risk-management

dec 20 '11 at 18:01 Antony Vennard 11.4k

7

4

votes

4

answers

10

kviews

Tips for a secure iptables config to defend from attacks. (client side!)

network linux firewalls iptables

jan 18 at 6:21 Ali Ahmad 1,521

1

4

votes

1

answer

298

views

Server monitoring for security

linux windows monitoring

sep 8 at 16:14 Zuly Gonzalez 317

6

3

votes

11

answers

3

kviews

Definitely safest password storage scheme?

encryption passwords hash password-management

aug 29 at 0:39 Peter O. 131

John

33 Favorites