User curiousguy - IT Security Stack Exchange

bio	website
	location
	age
visits	member for	1 year, 8 months
	seen	9 hours ago
stats	profile views	302

	1,721 reputation	bio	website		visits	member for	1 year, 8 months
1614 badges		location			seen	9 hours ago

1

6

votes

1

answer

214

views

What are the security measures taken on GPS transmissions?

network mobile

sep 6 at 6:52 Community♦ 1

5

13

votes

3

answers

4

kviews

Is there a way to mitigate BEAST without disabling AES completely?

nov 25 at 23:36 Thomas Pornin 82.9k

2

4

votes

3

answers

3

kviews

Is NAT Loopback on my router a security problem?

network routing

jun 23 '12 at 16:28 w3d 123

1

3

votes

2

answers

301

views

Are sandboxes overrated?

xss javascript sandbox chrome

aug 3 at 4:22 D.W. 44.9k

1

2

votes

1

answer

2

kviews

Does Google Chrome protect against cross site scripting (XSS)?

web-browser xss scripting chrome

aug 3 at 4:54 Community♦ 1

1

2

votes

3

answers

152

views

Are my credentials unsafe if I am already logged-in before connecting to a public network?

network ssl logging sniffer man-in-the-middle

jun 20 '12 at 8:22 Rory Alsop♦ 32.6k

1

7

votes

3

answers

524

views

Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?

network wifi

may 16 '12 at 21:29 quodlibetor 140

1

2

votes

4

answers

303

views

Clickjacking: can't browsers just forbid/reject placing transparent elements over frames?

web-application web-browser html

jul 24 at 6:37 curiousguy 1,721

1

5

votes

1

answer

224

views

What are formal parameters for fingerprint scanner selection?

biometrics

dec 29 '11 at 21:42 flpmor 136

3

26

votes

7

answers

5

kviews

Are powerline ethernet adapters inherently secure?

encryption network data-leakage physical

jan 29 at 13:19 Camayoc 1

4

7

votes

5

answers

433

views

What is the practical difference between MAC and Capabilities

access-control mandatory-access-control capabilities

nov 26 '11 at 10:56 D.W. 44.9k

2

5

votes

2

answers

328

views

What is the background of the Reference Counter Overflow in Microsoft TCP/IP (MS11-083)?

windows operating-systems firewalls

feb 25 '12 at 22:32 AviD♦ 20.4k

3

6

votes

3

answers

3

kviews

PHP functions for preventing XSS

php xss

nov 11 '11 at 5:00 D.W. 44.9k

2

7

votes

1

answer

237

views

Why is there no Domain CA?

ssl certificates public-key-infrastructure

jan 6 at 20:04 Thomas Pornin 82.9k

5

7

votes

5

answers

777

views

Websites that interactively test browser security (XSS, CSRF, Javascript, etc)

web-application web-browser http automated-testing

feb 25 '12 at 22:03 AviD♦ 20.4k

1

4

votes

3

answers

593

views

Wrapping system call (in reliable and secure way)

operating-systems linux sandbox

dec 10 '11 at 7:52 William 1

2

5

votes

2

answers

3

kviews

Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?

cryptography network passwords wifi

oct 31 '11 at 17:00 Paŭlo Ebermann 1,439

8

13

votes

5

answers

2

kviews

Preventing information disclosure from browser back button/history?

appsec web-application web-browser javascript data-leakage

nov 22 '11 at 11:19 Z_TLAW 46

1

3

votes

1

answer

258

views

What does it mean when a webpage says refresh is disabled?

web-browser

oct 14 '11 at 17:02 SteveS 6,935

2

6

votes

1

answer

436

views

Spoofed IPv4 and IPv6 addresses over the internet

network ip-spoofing ipv6

oct 12 '11 at 13:31 Rory Alsop♦ 32.6k

4

14

votes

1

answer

956

views

Does the practice of blocking an off-site “Referer:” HTTP requests improve website security?

webserver javascript xss http openid

nov 11 '11 at 5:17 D.W. 44.9k

1

3

votes

1

answer

298

views

Should I include a random padding in every HTTPS request and response?

encryption ssl http random ajax

sep 30 '11 at 12:52 Thomas Pornin 82.9k

10

37

votes

7

answers

3

kviews

Online backup : how could encryption and de-duplication be compatible?

cryptography encryption privacy backup

may 3 '12 at 11:31 Community♦ 1

4

13

votes

4

answers

1

kviews

Why does Facebook serve several SSL certificates?

ssl web-browser certificate-authority

sep 20 '11 at 23:13 corrector 41

3

21

votes

6

answers

5

kviews

Sharing wifi at a business - Bad Policy?

wifi password-management legal password-policy

aug 24 '11 at 16:25 user606723 544

3

15

votes

12

answers

2

kviews

Why do we even use passwords / passphrases next to biometrics?

authentication passwords multi-factor biometrics

nov 12 at 23:07 John 1

2

7

votes

2

answers

311

views

Running proprietary software on Linux safely

operating-systems linux sandbox

aug 14 '11 at 21:11 AviD♦ 20.4k

8

25

votes

3

answers

5

kviews

Is it enough to only wipe a flash drive once?

usb-drive destruction deletion

mar 28 '12 at 19:46 Jim B 123

4

11

votes

5

answers

1

kviews

Solution to allow JavaScript input but prevent XSS

appsec web-application web-browser xss javascript

may 20 '12 at 23:31 D.W. 44.9k

6

15

votes

2

answers

497

views

Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?

cryptography encryption ssl privacy

oct 5 '11 at 15:04 Thomas Pornin 82.9k

curiousguy

37 Favorites