User George Bailey - IT Security Stack Exchange

bio	website	en.wikipedia.org/wiki/…
	location
	age
visits	member for	2 years, 5 months
	seen	3 hours ago
stats	profile views	83

	1,687 reputation	bio	website	en.wikipedia.org/wiki/…	visits	member for	2 years, 5 months
520 badges		location			seen	3 hours ago

5

17

votes

6

answers

452

views

How to deal with a person who gets easily fooled by internet and mail scams?

feb 15 at 0:14 Tim X 344

2

votes

2

answers

216

views

Encrypt+Signing data: PKCS#7 / CMS or do-it-your-own way?

key-management

mar 6 at 2:24 Sid 170

5

17

votes

3

answers

530

views

What can an attacker do with Bluetooth and how should it be mitigated?

windows linux macosx threat-mitigation bluetooth

2d ago Adnan 6,442

1

3

votes

2

answers

118

views

Taking action for exploit attempts

exploit known-vulnerabilities snort

oct 10 at 23:41 schroeder 7,574

1

3

votes

2

answers

180

views

Chrome: Found a crash, is it a security vulnerability?

macosx chrome

aug 1 at 23:43 Iszi 9,238

1

-1

votes

1

answer

103

views

Would this be plausible for a metamorphic virus? Not repeatedly infecting same system

virus antivirus file-system

jul 30 at 21:14 Celeritas 1,213

1

4

votes

3

answers

643

views

How can I report PCI-DSS violations?

passwords known-vulnerabilities pci-dss

apr 15 at 19:04 Susan Leabhart 1

1

4

votes

2

answers

2

kviews

Lost passphrase recovery for SSL

openssl

jul 28 at 1:53 Bruno 4,186

2

4

votes

1

answer

591

views

How to detect cookie stuffing attacks?

web-application web-browser cookies defense detection

jul 25 at 19:42 Rook 21.2k

1

2

votes

4

answers

144

views

Is there an access-control model defined in terms of application structure?

web-application access-control

jul 24 at 23:24 jimw 151

1

2

votes

3

answers

147

views

I want to have the security of my crypto code checked, how should I go about doing so?

encryption audit protocols

jul 17 at 18:48 D.W. 44.8k

3

votes

2

answers

2

kviews

Better techniques than url parameter encryption

encryption web-application access-control

jul 17 at 18:16 D.W. 44.8k

2

3

votes

1

answer

169

views

Protect our payroll data from a legal and moral obligation

privacy legal

jul 16 at 12:47 resolver101 18

4

7

votes

2

answers

221

views

What are some good arguments for having your work send you to e.g. DEFCON or Black Hat

conference

jul 12 at 16:26 Rory Alsop♦ 32.5k

2

-1

votes

1

answer

204

views

Why don't G+, Facebook and Twitter use text editors to share? Why would someone receive each separately?

javascript

aug 26 at 6:27 AviD♦ 20.4k

5

13

votes

3

answers

4

kviews

Is there a way to mitigate BEAST without disabling AES completely?

ssl attack-prevention apache beast

nov 25 at 23:36 Thomas Pornin 82.7k

3

votes

1

answer

206

views

buffer/heap overflow - register of what is executed

buffer-overflow

jul 11 at 17:48 Shivam 974

3

9

votes

4

answers

387

views

How should I tell an organisation that they are vulnerable when I wasn't given permission to check?

authentication passwords wifi legal authorization

jul 10 at 15:52 Grant 243

1

3

votes

2

answers

702

views

Skype security concerns on an enterprise network

risk-analysis

jul 10 at 14:39 liviu 111

1

vote

2

answers

165

views

Am I a Hosting service provider in a sense of PCI-DSS SAQ D Appendix A?

pci-dss shared-hosting

jul 29 at 18:50 Community♦ 1

2

3

votes

3

answers

260

views

How would one make a network resistant to the unknown?

hardening defense

sep 6 at 20:40 Scott Pack 7,981

3

7

votes

3

answers

9

kviews

How was my Yahoo email account used to send spams

spam

mar 8 at 16:24 Connected 11

1

0

votes

2

answers

78

views

Should a host based firewall have an API accessible to other applications?

windows firewalls malware

jun 13 '12 at 9:47 symcbean 4,752

3

4

votes

2

answers

162

views

Is it a security risk to maintain an application developed for a version of .NET prior to 4.0?

.net

jun 12 '12 at 22:21 makerofthings7 12.6k

3

18

votes

5

answers

711

views

Is it possible to increase the cost of BCrypt or PBKDF2 when its already calculated and without the original password?

passwords hash password-management bcrypt pbkdf2

apr 8 at 1:14 RoadWarrior 111

2

3

votes

1

answer

513

views

How to backup database to comply with UK data protection act?

compliance legal backup

jun 7 '12 at 22:08 Peanut 397

2

11

votes

7

answers

503

views

Online Government Elections System - Is it possible?

cryptography webserver government

jan 11 at 18:37 Thomas Pornin 82.7k

1

-4

votes

1

answer

340

views

Can a Windows 7 password be hidden?

authentication windows

may 23 '12 at 18:24 Community♦ 1

1

vote

2

answers

82

views

Preventing a socially-engineered transaction

web-application web-browser smartcard

may 22 '12 at 5:45 jonsca 275

2

6

votes

2

answers

599

views

How does IP tracking work?

webserver backtrack

may 21 '12 at 15:33 Polynomial 32.6k

George Bailey

88 Favorites