User D.W. - IT Security Stack Exchange

bio	website
	location
	age
visits	member for	2 years, 4 months
	seen	7 hours ago
stats	profile views	1,630

	44,861 reputation	bio	website		visits	member for	2 years, 4 months
261156 badges		location			seen	7 hours ago

11

38

votes

5

answers

2

kviews

What cryptographic flaw was exploited by Flame, to get its code signed by Microsoft?

cryptography malware

jun 8 '12 at 21:02 Hendrik Brummermann♦ 15.7k

18

votes

2

answers

4

kviews

Can web sites detect whether you are using private browsing mode?

web-browser privacy

nov 28 '11 at 20:58 bstpierre 2,957

1

13

votes

4

answers

938

views

Security risks of scanning an unknown QR code

attacks mobile known-vulnerabilities

oct 11 at 5:32 Aji 138

14

13

votes

6

answers

6

kviews

How to scan a PDF for malware?

antivirus antimalware

aug 6 '11 at 0:59 Brandon Dixon 41

2

12

votes

2

answers

924

views

How do I use Markdown securely?

appsec web-application xss

may 7 '12 at 19:53 D.W. 44.9k

5

12

votes

5

answers

1

kviews

Android API/development security pitfalls

mobile android

dec 15 '11 at 14:11 D.W. 44.9k

2

11

votes

2

answers

183

views

Why do browsers allow public websites to attack intranet sites?

web-browser attack-prevention csrf

apr 7 at 18:22 D.W. 44.9k

3

11

votes

3

answers

291

views

What does a HTML filter need to do, to protect against SVG attacks?

web-application xss html

feb 6 at 13:34 x00mario 41

2

11

votes

4

answers

861

views

Password resets - what practices should web services follow?

authentication

aug 8 at 14:09 Polynomial 32.8k

4

11

votes

3

answers

2

kviews

How should web app developers defend against JSON hijacking?

appsec web-application json

sep 9 '11 at 23:09 Mike Samuel 2,557

5

10

votes

1

answer

490

views

Is Nokia's “institutional MITM” of SSL traffic vulnerable to CRIME attack?

ssl proxy man-in-the-middle

jan 13 at 15:55 Thomas Pornin 82.8k

5

10

votes

4

answers

2

kviews

What risk does Carrier IQ pose, exactly?

mobile android rootkits

mar 7 '12 at 23:58 D.W. 44.9k

10

votes

5

answers

1

kviews

Do mobile OS's provide crypto-quality randomness?

cryptography mobile random

feb 18 '11 at 11:19 Graham Lee 8,601

4

9

votes

3

answers

458

views

Best way to triage crashes found via fuzzing, on Linux?

fuzzing

jan 7 at 18:43 ce4 103

7

9

votes

2

answers

381

views

Security quiz for developers

appsec web-application certification people-management

aug 9 at 13:54 Epoch Win 482

1

8

votes

2

answers

503

views

Why do some Java APIs bypass standard SecurityManager checks?

appsec access-control java permissions

sep 1 at 21:58 Hendrik Brummermann♦ 15.7k

3

8

votes

4

answers

942

views

Passwords - any statistics on user behavior?

passwords password-management password-policy

apr 17 '12 at 18:37 D.W. 44.9k

1

7

votes

4

answers

663

views

Generate cryptographically strong pseudorandom numbers in Javascript?

cryptography web-application javascript random key-generation

apr 17 at 11:37 CodesInChaos 3,867

3

7

votes

2

answers

302

views

Security risks with JSONP?

web-application ajax json

mar 29 at 21:20 makerofthings7 12.6k

1

7

votes

5

answers

242

views

What should students learn about security in an introductory programming course?

professional-education

nov 21 at 6:10 T. Webster 435

6

votes

2

answers

172

views

Safe YAML parser?

appsec attack-prevention web-service injection

jan 31 at 15:44 Dan Tao 151

2

6

votes

3

answers

319

views

How should I compile program for fuzz testing?

fuzzing

nov 24 at 18:56 Rook 21.2k

1

6

votes

2

answers

283

views

Does anyone use XML Encryption?

encryption web-service xml

oct 15 at 8:29 David Wachtfogel 2,911

6

votes

2

answers

190

views

Is HTTP compression safe?

cryptography ssl

sep 20 at 4:52 D.W. 44.9k

2

6

votes

8

answers

432

views

Should I block visitors who seem to be probing my site?

network threat-mitigation

aug 15 at 20:17 Luc 3,396

2

6

votes

4

answers

1

kviews

What do I need to configure, to make sure my software uses /dev/urandom?

linux virtualization random configuration

may 1 '12 at 10:49 Gilles 10.1k

1

6

votes

1

answer

242

views

How many iterations of fuzzing is enough?

appsec automated-testing fuzzing

aug 10 '11 at 10:16 AviD♦ 20.4k

1

6

votes

2

answers

392

views

Outsourcing security evaluation

code-review people-management vendor-selection

aug 9 '11 at 18:32 Bell 558

5

votes

3

answers

347

views

Does any tablet support remote attestation?

mobile hardware trusted-computing remote-attestation

feb 22 at 19:29 user21097 1

5

votes

3

answers

269

views

Does NAT break source port randomization?

network dns dns-spoofing

feb 1 at 14:32 schul 11

D.W.

52 Questions