User TRiG - IT Security Stack Exchange

bio	website	timothy.green.name
	location
	age
visits	member for	1 year, 10 months
	seen	11 mins ago
stats	profile views	9

	123 reputation	bio	website	timothy.green.name	visits	member for	1 year, 10 months
5 badges		location			seen	11 mins ago

167

315

votes

17

answers

36

kviews

How can I explain SQL injection without technical jargon?

sql-injection

mar 11 at 8:13 martinstoeckli 901

196

172

votes

3

answers

45

kviews

How does SSL work?

23h ago oleksii 362

80

168

votes

13

answers

27

kviews

Are passwords stored in memory safe?

passwords operating-systems memory

mar 18 at 11:08 petertonoli 111

76

130

votes

8

answers

52

kviews

Why not use larger cipher keys?

cryptography asymmetric cipher

dec 18 at 11:37 lynks 4,352

17

69

votes

7

answers

3

kviews

How do I know a piece of software only does what the author claims?

source-code backdoor

feb 7 at 21:36 Tim X 344

40

68

votes

7

answers

3

kviews

Is social-engineering an actual threat

apr 11 at 21:02 Marek Sebera 659

22

67

votes

16

answers

2

kviews

At what point does something count as 'security through obscurity'?

obscurity

mar 10 at 15:22 Spook 101

67

66

votes

16

answers

15

kviews

Lessons learned and misconceptions regarding encryption and cryptology

cryptography encryption .net java

2d ago John Deters 556

27

53

votes

9

answers

7

kviews

How can PayPal spoof emails so easily to say it comes from someone else?

email

feb 15 at 16:53 makerofthings7 12.5k

51

49

votes

8

answers

5

kviews

Can anyone provide references for implementing web application self password reset mechanisms properly?

appsec web-application password-management

jul 31 at 10:21 ccellar 103

7

47

votes

8

answers

3

kviews

Why not allow spaces in a password?

password-policy

mar 20 at 10:15 w0lf 101

27

43

votes

6

answers

3

kviews

Can anybody explain XSS to an idiot?

appsec web-application attacks owasp-top-ten xss

feb 13 at 1:49 TRiG 123

12

33

votes

9

answers

6

kviews

I just discovered major security flaws in my web store?

appsec web-application

oct 26 '11 at 16:13 Antony Vennard 11.3k

7

31

votes

3

answers

3

kviews

Are all SSL Certificates equal?

ssl certificates certificate-authority

apr 30 at 6:11 Gumbo 419

12

29

votes

9

answers

1

kviews

Use additional “password” in Referer to hide private site?

authentication http apache obscurity

may 6 at 21:18 Adnan 5,846

4

22

votes

12

answers

1

kviews

How secure are passwords made of whole english sentences

passwords password-policy

oct 18 at 15:20 Luke Sheppard 484

3

21

votes

4

answers

632

views

Security seals and the “perception of safety”?

phishing trust security-seal

apr 6 at 19:03 Mayank Sharma 1,086

4

20

votes

7

answers

2

kviews

Does it matter which Certificate Authority I source my SSL Certificate from?

ssl certificate-authority

nov 21 at 8:19 Greg 1

6

20

votes

8

answers

1

kviews

Why improvising your own Hash function out of existing hash functions is so bad

passwords hash bcrypt scrypt

apr 2 at 14:58 Polynomial 32.5k

2

17

votes

4

answers

971

views

When hashing passwords, is it ok to use the hashed password as the salt?

passwords hash salt

apr 1 at 14:52 Chirayu Chiripal 1

8

14

votes

3

answers

1

kviews

What's an easy way to perform a man-in-the-middle attack on SSL?

ssl tools man-in-the-middle

apr 4 at 17:58 mr.spuratic 1,216

4

14

votes

4

answers

4

kviews

How did anonymous use UTF-16 ASCII to fool PHP escaping?

php sql-injection

feb 7 '12 at 20:32 Yoav Aner 2,867

3

12

votes

4

answers

598

views

How is a worm different from a virus?

malware virus antivirus

nov 20 at 10:38 TRiG 123

3

12

votes

2

answers

2

kviews

Which SSL/TLS ciphers can be considered secure?

encryption cryptography ssl hash

sep 15 at 1:44 Thomas Pornin 82.2k

4

12

votes

1

answer

373

views

Risks of a php image upload form

php

mar 19 at 13:55 Starkers 163

3

10

votes

3

answers

1

kviews

What are the security risks of letting the users upload content to my site?

web-application appsec file-upload

nov 21 '10 at 13:42 AviD♦ 20.3k

2

9

votes

6

answers

586

views

Are password reset links that don't expire a security risk?

passwords

dec 30 at 11:47 Yasin Okumus 103

2

7

votes

4

answers

736

views

Copyright issues with encryption algorithms

cryptography encryption legal

jul 16 '11 at 0:42 Hendrik Brummermann♦ 15.6k

1

7

votes

4

answers

643

views

Generate cryptographically strong pseudorandom numbers in Javascript?

cryptography web-application javascript random key-generation

apr 17 at 11:37 CodesInChaos 3,807

2

7

votes

1

answer

1

kviews

How should API keys be generated?

cryptography key-generation

sep 5 at 22:00 Thomas Pornin 82.2k

TRiG

38 Favorites