User curiousguy - IT Security Stack Exchange

bio	website
	location
	age
visits	member for	1 year, 7 months
	seen	3 hours ago
stats	profile views	301

	1,711 reputation	bio	website		visits	member for	1 year, 7 months
1514 badges		location			seen	3 hours ago

1

6

votes

1

answer

214

views

What are the security measures taken on GPS transmissions?

network mobile

sep 6 at 6:52 Community♦ 1

3

26

votes

7

answers

5

kviews

Are powerline ethernet adapters inherently secure?

jan 29 at 13:19 Camayoc 1

1

2

votes

4

answers

302

views

Clickjacking: can't browsers just forbid/reject placing transparent elements over frames?

web-application web-browser html

jul 24 at 6:37 curiousguy 1,711

8

13

votes

5

answers

2

kviews

Preventing information disclosure from browser back button/history?

appsec web-application web-browser javascript data-leakage

nov 22 '11 at 11:19 Z_TLAW 46

1

3

votes

1

answer

294

views

Should I include a random padding in every HTTPS request and response?

encryption ssl http random ajax

sep 30 '11 at 12:52 Thomas Pornin 82.3k

5

13

votes

3

answers

4

kviews

Is there a way to mitigate BEAST without disabling AES completely?

ssl attack-prevention apache beast

nov 25 at 23:36 Thomas Pornin 82.3k

2

4

votes

3

answers

3

kviews

Is NAT Loopback on my router a security problem?

network routing

jun 23 at 16:28 w3d 123

1

3

votes

2

answers

298

views

Are sandboxes overrated?

xss javascript sandbox chrome

aug 3 at 4:22 D.W. 44.7k

1

2

votes

3

answers

152

views

Are my credentials unsafe if I am already logged-in before connecting to a public network?

network ssl logging sniffer man-in-the-middle

jun 20 '12 at 8:22 Rory Alsop♦ 32.4k

4

11

votes

5

answers

1

kviews

Solution to allow JavaScript input but prevent XSS

appsec web-application web-browser xss javascript

may 20 '12 at 23:31 D.W. 44.7k

1

2

votes

1

answer

2

kviews

Does Google Chrome protect against cross site scripting (XSS)?

web-browser xss scripting chrome

aug 3 at 4:54 Community♦ 1

2

7

votes

1

answer

236

views

Why is there no Domain CA?

ssl certificates public-key-infrastructure

jan 6 at 20:04 Thomas Pornin 82.3k

4

13

votes

4

answers

1

kviews

Why does Facebook serve several SSL certificates?

ssl web-browser certificate-authority

sep 20 '11 at 23:13 corrector 41

1

7

votes

3

answers

518

views

Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?

network wifi

may 16 '12 at 21:29 quodlibetor 140

1

5

votes

1

answer

223

views

What are formal parameters for fingerprint scanner selection?

biometrics

dec 29 '11 at 21:42 flpmor 136

2

7

votes

2

answers

311

views

Running proprietary software on Linux safely

operating-systems linux sandbox

aug 14 '11 at 21:11 AviD♦ 20.3k

3

15

votes

12

answers

2

kviews

Why do we even use passwords / passphrases next to biometrics?

authentication passwords multi-factor biometrics

nov 12 at 23:07 John 1

4

7

votes

5

answers

428

views

What is the practical difference between MAC and Capabilities

access-control mandatory-access-control capabilities

nov 26 '11 at 10:56 D.W. 44.7k

3

21

votes

6

answers

5

kviews

Sharing wifi at a business - Bad Policy?

wifi password-management legal password-policy

aug 24 '11 at 16:25 user606723 544

2

5

votes

2

answers

327

views

What is the background of the Reference Counter Overflow in Microsoft TCP/IP (MS11-083)?

windows operating-systems firewalls

feb 25 '12 at 22:32 AviD♦ 20.3k

3

6

votes

3

answers

3

kviews

PHP functions for preventing XSS

php xss

nov 11 '11 at 5:00 D.W. 44.7k

1

5

votes

3

answers

267

views

Is randomizing cookie names a good idea?

appsec web-application cookies session-management

feb 10 at 15:45 makerofthings7 12.5k

5

7

votes

5

answers

776

views

Websites that interactively test browser security (XSS, CSRF, Javascript, etc)

web-application web-browser http automated-testing

feb 25 '12 at 22:03 AviD♦ 20.3k

2

10

votes

1

answer

2

kviews

Is WPA2 WiFi protected against ARP poisoning and sniffing?

network wifi

jun 8 '11 at 18:45 Jeff Ferland♦ 21.4k

7

24

votes

3

answers

5

kviews

Is it enough to only wipe a flash drive once?

usb-drive destruction deletion

mar 28 '12 at 19:46 Jim B 123

6

15

votes

2

answers

488

views

Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?

cryptography encryption ssl privacy

oct 5 '11 at 15:04 Thomas Pornin 82.3k

8

23

votes

5

answers

1

kviews

Why is HTTPS not the default protocol?

cryptography web-application ssl http

oct 6 '11 at 15:53 Thomas Pornin 82.3k

1

4

votes

3

answers

587

views

Wrapping system call (in reliable and secure way)

operating-systems linux sandbox

dec 10 '11 at 7:52 William 1

2

5

votes

2

answers

3

kviews

Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?

cryptography network passwords wifi

oct 31 '11 at 17:00 Paŭlo Ebermann 1,439

3

11

votes

4

answers

2

kviews

Protection against account lockout DoS

access-control denial-of-service brute-force

may 16 '12 at 12:31 Georgios 1,231

curiousguy

37 Favorites