New answers tagged

3 votes
Accepted

Gzip only request body of HTTPS request security BREACH?

BREACH deals with server responses. The idea is that an attacker sends multiple requests changing one byte. In case the sent byte sequence is contained in the uncompressed response, the compression ...
user avatar
  • 8,410
0 votes

Is it acceptable for security engineers to have admin access to production servers?

I agree that Security Engineers are specially trained to look for certain anomalies and have a different thought process than a SysAdmin. When investigating, they need the freedom to be able to ...
user avatar

Top 50 recent answers are included