User curiousguy - IT Security Stack Exchange

bio	website
	location
	age
visits	member for	1 year, 8 months
	seen	3 hours ago
stats	profile views	302

	1,721 reputation	bio	website		visits	member for	1 year, 8 months
1614 badges		location			seen	3 hours ago

10

37

votes

7

answers

3

kviews

Online backup : how could encryption and de-duplication be compatible?

may 3 '12 at 11:31 Community♦ 1

3

26

votes

7

answers

5

kviews

Are powerline ethernet adapters inherently secure?

encryption network data-leakage physical

jan 29 at 13:19 Camayoc 1

8

25

votes

3

answers

5

kviews

Is it enough to only wipe a flash drive once?

usb-drive destruction deletion

mar 28 '12 at 19:46 Jim B 123

8

23

votes

5

answers

1

kviews

Why is HTTPS not the default protocol?

cryptography web-application ssl http

oct 6 '11 at 15:53 Thomas Pornin 82.9k

3

21

votes

6

answers

5

kviews

Sharing wifi at a business - Bad Policy?

wifi password-management legal password-policy

aug 24 '11 at 16:25 user606723 544

4

20

votes

7

answers

2

kviews

Does it matter which Certificate Authority I source my SSL Certificate from?

ssl certificate-authority

nov 21 at 8:19 Greg 1

6

15

votes

2

answers

496

views

Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?

cryptography encryption ssl privacy

oct 5 '11 at 15:04 Thomas Pornin 82.9k

3

15

votes

12

answers

2

kviews

Why do we even use passwords / passphrases next to biometrics?

authentication passwords multi-factor biometrics

nov 12 at 23:07 John 1

4

14

votes

1

answer

956

views

Does the practice of blocking an off-site “Referer:” HTTP requests improve website security?

webserver javascript xss http openid

nov 11 '11 at 5:17 D.W. 44.9k

4

13

votes

4

answers

1

kviews

Why does Facebook serve several SSL certificates?

ssl web-browser certificate-authority

sep 20 '11 at 23:13 corrector 41

8

13

votes

5

answers

2

kviews

Preventing information disclosure from browser back button/history?

appsec web-application web-browser javascript data-leakage

nov 22 '11 at 11:19 Z_TLAW 46

5

13

votes

3

answers

4

kviews

Is there a way to mitigate BEAST without disabling AES completely?

ssl attack-prevention apache beast

nov 25 at 23:36 Thomas Pornin 82.9k

4

11

votes

5

answers

1

kviews

Solution to allow JavaScript input but prevent XSS

appsec web-application web-browser xss javascript

may 20 '12 at 23:31 D.W. 44.9k

3

11

votes

4

answers

2

kviews

Protection against account lockout DoS

access-control denial-of-service brute-force

may 16 '12 at 12:31 Georgios 1,231

3

10

votes

3

answers

1

kviews

What are the security risks of letting the users upload content to my site?

web-application appsec file-upload

nov 21 '10 at 13:42 AviD♦ 20.4k

2

10

votes

1

answer

2

kviews

Is WPA2 WiFi protected against ARP poisoning and sniffing?

network wifi

jun 8 '11 at 18:45 Jeff Ferland♦ 21.5k

5

7

votes

5

answers

777

views

Websites that interactively test browser security (XSS, CSRF, Javascript, etc)

web-application web-browser http automated-testing

feb 25 '12 at 22:03 AviD♦ 20.4k

2

7

votes

1

answer

237

views

Why is there no Domain CA?

ssl certificates public-key-infrastructure

jan 6 at 20:04 Thomas Pornin 82.9k

2

7

votes

2

answers

311

views

Running proprietary software on Linux safely

operating-systems linux sandbox

aug 14 '11 at 21:11 AviD♦ 20.4k

4

7

votes

5

answers

433

views

What is the practical difference between MAC and Capabilities

access-control mandatory-access-control capabilities

nov 26 '11 at 10:56 D.W. 44.9k

1

7

votes

3

answers

524

views

Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?

network wifi

may 16 '12 at 21:29 quodlibetor 140

1

6

votes

1

answer

214

views

What are the security measures taken on GPS transmissions?

network mobile

sep 6 at 6:52 Community♦ 1

3

6

votes

3

answers

3

kviews

PHP functions for preventing XSS

php xss

nov 11 '11 at 5:00 D.W. 44.9k

2

6

votes

1

answer

436

views

Spoofed IPv4 and IPv6 addresses over the internet

network ip-spoofing ipv6

oct 12 '11 at 13:31 Rory Alsop♦ 32.6k

4

5

votes

2

answers

371

views

Does DNSSec have any benefit if used with IPSec-enabled IPv6?

network ipsec ipv6 dnssec

may 24 '12 at 18:31 nealmcb 10.3k

2

5

votes

2

answers

3

kviews

Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?

cryptography network passwords wifi

oct 31 '11 at 17:00 Paŭlo Ebermann 1,439

2

5

votes

2

answers

328

views

What is the background of the Reference Counter Overflow in Microsoft TCP/IP (MS11-083)?

windows operating-systems firewalls

feb 25 '12 at 22:32 AviD♦ 20.4k

1

5

votes

3

answers

267

views

Is randomizing cookie names a good idea?

appsec web-application cookies session-management

feb 10 at 15:45 makerofthings7 12.6k

1

5

votes

1

answer

224

views

What are formal parameters for fingerprint scanner selection?

biometrics

dec 29 '11 at 21:42 flpmor 136

1

4

votes

3

answers

593

views

Wrapping system call (in reliable and secure way)

operating-systems linux sandbox

dec 10 '11 at 7:52 William 1

curiousguy

37 Favorites