User curiousguy - IT Security Stack Exchange

bio	website
	location
	age
visits	member for	1 year, 8 months
	seen	34 mins ago
stats	profile views	301

	1,711 reputation	bio	website		visits	member for	1 year, 8 months
1514 badges		location			seen	34 mins ago

1

5

votes

3

answers

267

views

Is randomizing cookie names a good idea?

feb 10 at 15:45 makerofthings7 12.5k

3

26

votes

7

answers

5

kviews

Are powerline ethernet adapters inherently secure?

encryption network data-leakage physical

jan 29 at 13:19 Camayoc 1

2

7

votes

1

answer

236

views

Why is there no Domain CA?

ssl certificates public-key-infrastructure

jan 6 at 20:04 Thomas Pornin 82.4k

5

13

votes

3

answers

4

kviews

Is there a way to mitigate BEAST without disabling AES completely?

ssl attack-prevention apache beast

nov 25 at 23:36 Thomas Pornin 82.4k

4

20

votes

7

answers

2

kviews

Does it matter which Certificate Authority I source my SSL Certificate from?

ssl certificate-authority

nov 21 at 8:19 Greg 1

3

15

votes

12

answers

2

kviews

Why do we even use passwords / passphrases next to biometrics?

authentication passwords multi-factor biometrics

nov 12 at 23:07 John 1

1

6

votes

1

answer

214

views

What are the security measures taken on GPS transmissions?

network mobile

sep 6 at 6:52 Community♦ 1

1

2

votes

1

answer

2

kviews

Does Google Chrome protect against cross site scripting (XSS)?

web-browser xss scripting chrome

aug 3 at 4:54 Community♦ 1

1

3

votes

2

answers

300

views

Are sandboxes overrated?

xss javascript sandbox chrome

aug 3 at 4:22 D.W. 44.7k

1

2

votes

4

answers

302

views

Clickjacking: can't browsers just forbid/reject placing transparent elements over frames?

web-application web-browser html

jul 24 at 6:37 curiousguy 1,711

2

4

votes

3

answers

3

kviews

Is NAT Loopback on my router a security problem?

network routing

jun 23 '12 at 16:28 w3d 123

1

2

votes

3

answers

152

views

Are my credentials unsafe if I am already logged-in before connecting to a public network?

network ssl logging sniffer man-in-the-middle

jun 20 '12 at 8:22 Rory Alsop♦ 32.4k

4

5

votes

2

answers

370

views

Does DNSSec have any benefit if used with IPSec-enabled IPv6?

network ipsec ipv6 dnssec

may 24 '12 at 18:31 nealmcb 10.2k

4

11

votes

5

answers

1

kviews

Solution to allow JavaScript input but prevent XSS

appsec web-application web-browser xss javascript

may 20 '12 at 23:31 D.W. 44.7k

1

7

votes

3

answers

518

views

Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?

network wifi

may 16 '12 at 21:29 quodlibetor 140

3

11

votes

4

answers

2

kviews

Protection against account lockout DoS

access-control denial-of-service brute-force

may 16 '12 at 12:31 Georgios 1,231

10

37

votes

7

answers

3

kviews

Online backup : how could encryption and de-duplication be compatible?

cryptography encryption privacy backup

may 3 '12 at 11:31 Community♦ 1

7

24

votes

3

answers

5

kviews

Is it enough to only wipe a flash drive once?

usb-drive destruction deletion

mar 28 '12 at 19:46 Jim B 123

2

5

votes

2

answers

327

views

What is the background of the Reference Counter Overflow in Microsoft TCP/IP (MS11-083)?

windows operating-systems firewalls

feb 25 '12 at 22:32 AviD♦ 20.3k

5

7

votes

5

answers

777

views

Websites that interactively test browser security (XSS, CSRF, Javascript, etc)

web-application web-browser http automated-testing

feb 25 '12 at 22:03 AviD♦ 20.3k

1

5

votes

1

answer

223

views

What are formal parameters for fingerprint scanner selection?

biometrics

dec 29 '11 at 21:42 flpmor 136

1

4

votes

3

answers

588

views

Wrapping system call (in reliable and secure way)

operating-systems linux sandbox

dec 10 '11 at 7:52 William 1

4

7

votes

5

answers

428

views

What is the practical difference between MAC and Capabilities

access-control mandatory-access-control capabilities

nov 26 '11 at 10:56 D.W. 44.7k

8

13

votes

5

answers

2

kviews

Preventing information disclosure from browser back button/history?

appsec web-application web-browser javascript data-leakage

nov 22 '11 at 11:19 Z_TLAW 46

4

14

votes

1

answer

940

views

Does the practice of blocking an off-site “Referer:” HTTP requests improve website security?

webserver javascript xss http openid

nov 11 '11 at 5:17 D.W. 44.7k

3

6

votes

3

answers

3

kviews

PHP functions for preventing XSS

php xss

nov 11 '11 at 5:00 D.W. 44.7k

2

5

votes

2

answers

3

kviews

Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?

cryptography network passwords wifi

oct 31 '11 at 17:00 Paŭlo Ebermann 1,439

1

3

votes

1

answer

257

views

What does it mean when a webpage says refresh is disabled?

web-browser

oct 14 '11 at 17:02 SteveS 6,935

2

6

votes

1

answer

432

views

Spoofed IPv4 and IPv6 addresses over the internet

network ip-spoofing ipv6

oct 12 '11 at 13:31 Rory Alsop♦ 32.4k

8

23

votes

5

answers

1

kviews

Why is HTTPS not the default protocol?

cryptography web-application ssl http

oct 6 '11 at 15:53 Thomas Pornin 82.4k

curiousguy

37 Favorites