User culix - IT Security Stack Exchange

bio	website
	location
	age
visits	member for	4 months
	seen	6 hours ago
stats	profile views	6

	157 reputation	bio	website		visits	member for	4 months
9 badges		location			seen	6 hours ago

44

203

votes

22

answers

287

kviews

I found that the company I work for is putting a backdoor into mobile phones

jun 27 at 10:18 Rory Alsop♦ 32.5k

196

173

votes

3

answers

45

kviews

How does SSL work?

ssl certificates public-key-infrastructure

may 17 at 16:10 oleksii 362

76

130

votes

8

answers

52

kviews

Why not use larger cipher keys?

cryptography asymmetric cipher

dec 18 at 11:37 lynks 4,352

43

117

votes

7

answers

6

kviews

How do certification authorities store their private root keys?

public-key-infrastructure key-management certificate-authority certification key-generation

dec 11 at 13:43 Terry Chia 10.9k

12

106

votes

10

answers

5

kviews

What alternatives are there when SSH is being actively filtered?

ssh

jan 7 '12 at 5:13 Skaperen 101

35

96

votes

8

answers

8

kviews

Are “man in the middle” attacks extremely rare?

network attacks man-in-the-middle statistics

jan 21 at 15:23 culix 157

21

53

votes

12

answers

3

kviews

Does an established ssl connection mean a line is really secure

web-application ssl

dec 26 '11 at 1:28 bstpierre 2,957

8

42

votes

15

answers

2

kviews

Why do law-abiding citizens need strong security?

defense user-education

jan 25 '12 at 2:45 Iszi 9,228

12

38

votes

11

answers

4

kviews

What are the pros and cons of site wide SSL (https)?

web-application ssl webserver

oct 26 '11 at 14:42 Mike Samuel 2,547

8

35

votes

5

answers

5

kviews

How do you destroy an old hard drive?

hardware data-leakage risk-management destruction

nov 5 at 14:57 Matthew Doucette 278

13

34

votes

4

answers

6

kviews

Is posting from HTTP to HTTPS a bad practice?

authentication ssl

oct 27 '11 at 23:00 Troy Hunt 453

9

28

votes

4

answers

13

kviews

What is the difference between an x.509 “client certificate” and a normal SSL certificate?

authentication ssl certificates public-key-infrastructure

jan 18 at 14:47 culix 157

11

24

votes

3

answers

810

views

A Different Approach to PKI

certificates public-key-infrastructure identity

jan 4 at 15:23 CodesInChaos 3,817

8

23

votes

5

answers

1

kviews

Why is HTTPS not the default protocol?

cryptography web-application ssl http

oct 6 '11 at 15:53 Thomas Pornin 82.5k

19

21

votes

5

answers

2

kviews

How to perform a security audit for a PHP application?

appsec php penetration-test code-review

dec 13 at 14:00 SecurityMatt 111

4

21

votes

3

answers

2

kviews

How does Convergence (CA replacement) prevent its notaries from being MITM'd as well?

cryptography network ssl protocols

oct 6 '11 at 15:15 Thomas Pornin 82.5k

6

21

votes

3

answers

619

views

What is an SSL certificate intended to prove, and how does it do it?

ssl certificates privacy public-key-infrastructure

jun 16 '12 at 14:53 Oleksi 2,941

9

20

votes

2

answers

3

kviews

Why is it possible to sniff an HTTPS / SSL request?

http ssl

sep 1 at 15:57

4

19

votes

11

answers

2

kviews

How feasible is it for a CA to be hacked? Which default trusted root certificates should I remove?

ssl certificates public-key-infrastructure certificate-authority trust

aug 9 at 11:36 makerofthings7 12.6k

5

19

votes

3

answers

975

views

Does overlaying the mouse on a virtual numeric keyboard really protect against keyloggers?

passwords attack-prevention keyloggers

mar 25 at 1:04 TildalWave 3,619

5

18

votes

3

answers

3

kviews

Why should one not use the same asymmetric key for encryption as they do for signing?

cryptography encryption digital-signature

mar 9 '11 at 5:35 D.W. 44.7k

9

17

votes

7

answers

997

views

What should a security audit report include?

audit

jan 25 at 13:25 F. Hauri 846

11

17

votes

4

answers

4

kviews

Why is writing zeros (or random data) over a hard drive multiple times better than just doing it once?

data-leakage deletion storage

jan 10 '12 at 0:49 Community♦ 1

4

16

votes

8

answers

829

views

Ways to secure yourself from Firesheep kiddies and other sniffing

attack-prevention web-browser http

may 30 '12 at 18:48 Scott Pack 7,981

5

15

votes

3

answers

1

kviews

What happens when an Intermediate CA is revoked?

cryptography certificates public-key-infrastructure certificate-authority

6h ago culix 157

3

15

votes

5

answers

1

kviews

How can I protect my computer from my potentially malicious colleagues?

operating-systems linux macosx

sep 6 '11 at 23:39 D.W. 44.7k

3

15

votes

4

answers

564

views

What is the potential impact of these SSL certificate validation vulnerabilities?

ssl certificates

oct 23 at 23:09 Bruno 4,186

4

13

votes

4

answers

1

kviews

Why does Facebook serve several SSL certificates?

ssl web-browser certificate-authority

sep 20 '11 at 23:13 corrector 41

2

13

votes

3

answers

864

views

How should one properly dispose of a printer or fax which is used for sensitive documents?

hardware data-leakage

jan 8 '11 at 17:16 duffbeer703 131

2

13

votes

2

answers

843

views

Methods for protecting computer systems from physical attacks

physical

jan 4 '12 at 14:46 Iszi 9,228

culix

62 Favorites