Questions tagged [risk]
The risk tag has no usage guidance.
6
questions
26
votes
7
answers
32k
views
Is malware distributed with pirated software actually common?
An often-repeated piece of conventional wisdom goes like the following.
Don't download pirated software, they often contain malware.
I'm curious to know if there are any hard facts to backup this ...
- 8,834
7
votes
1
answer
2k
views
How big is the risk of hash fixed points/cycles?
It's established wisdom to hash password multiple times with a salt to increase the time it takes per brute force iteration. At the same time (unless the algorithm guarantees otherwise) there's a ...
- 3,011
3
votes
2
answers
1k
views
Will a crossdomain.xml file reduce a potential security risk?
I maintain a website were users are allowed to upload files. I'm doing already some good MIME-checks, consistency checks, virus checks, blacklist checks based on hash lists, some other custom checks ...
- 6,661
3
votes
1
answer
544
views
CVSS Score Remote or Local Scenario
I have to deal with a lot of CVSSv2 and CVSSv3 scores for many, many years. What troubles me like forever is what default attack scenario shall be defined for a vulnerability. Let's take a malicious ...
- 1,110
2
votes
2
answers
85
views
What are the risks of running Team Fundation Server on HTTP?
if TFS is installed using HTTP but only accessible from inside a LAN with Windows authentication, is it possible that a user impersonate someone else? what are other risks?
- 121
-1
votes
1
answer
224
views
Does Bloatware on a brand new PC create security risks?
Some new computers come with software I don't need or want. It is not advertised as part of the product I am purchasing. Generally this is called Bloatware.
Bloatware
1.(n) Software that comes pre-...
- 723