User NlightNFotis

1266 votes

22 answers

276k views

XKCD #936: Short complex password, or long dictionary passphrase?

Billy ONeal

2,688

asked Aug 10, 2011 at 21:38

1256 votes

3 answers

667k views

How does SSL/TLS work?

tls certificates public-key-infrastructure

Polynomial

132k

asked Sep 28, 2012 at 7:51

617 votes

23 answers

150k views

How does changing your password every 90 days increase security?

authentication passwords password-management

Bill the Lizard

6,721

asked Jun 22, 2011 at 13:36

366 votes

22 answers

302k views

I found that the company I work for is putting a backdoor into mobile phones

disclosure ethics backdoor

anonymousquery

2,991

asked May 17, 2012 at 16:11

282 votes

11 answers

81k views

Why shouldn't we roll our own?

cryptography custom-scheme

Polynomial

132k

asked Aug 6, 2012 at 15:18

226 votes

1 answer

90k views

How exactly does the OpenSSL TLS heartbeat (Heartbleed) exploit work?

openssl heartbleed

user43639

asked Apr 8, 2014 at 7:40

152 votes

7 answers

43k views

Can someone take down Wi-Fi signal?

wifi denial-of-service

T.Todua

2,675

asked Nov 26, 2016 at 8:13

142 votes

14 answers

67k views

What "hacking" competitions/challenges exist? [closed]

professional-education exploit conference

KilledKenny

1,662

asked May 5, 2011 at 20:37

127 votes

2 answers

98k views

How do ASLR and DEP work?

exploit aslr dep shellcode

Polynomial

132k

asked Aug 12, 2012 at 15:13

121 votes

5 answers

27k views

How much can I trust Tor?

anonymity tor

Freedom

1,245

asked Dec 9, 2010 at 12:35

107 votes

12 answers

42k views

Why is it difficult to catch "Anonymous" or "Lulzsec" (groups)?

ip-spoofing ddos anonymity

claws

2,145

asked Feb 21, 2011 at 18:45

105 votes

10 answers

10k views

Why is blog spam always written so badly?

spam

Lucas

1,019

asked Jun 13, 2013 at 17:33

97 votes

7 answers

39k views

How does hacking work?

penetration-test php unix

user7360

asked Jan 31, 2012 at 18:31

96 votes

7 answers

27k views

Why would an attacker ever want to sit on a zero-day exploit?

zero-day

jonem

959

asked Dec 3, 2018 at 0:33

94 votes

3 answers

105k views

Stack Overflows - Defeating Canaries, ASLR, DEP, NX

exploit known-vulnerabilities buffer-overflow

sudhacker

4,260

asked Sep 21, 2012 at 13:09

94 votes

4 answers

45k views

What are the career paths in the computer security field?

people-management career

nealmcb

20.6k

asked May 12, 2011 at 22:02

89 votes

9 answers

22k views

Hardening Linux Server

operating-systems configuration linux hardening

Mark Davidson

9,357

asked Dec 6, 2010 at 10:04

76 votes

19 answers

6k views

What security resources should a white-hat developer follow these days? [closed]

appsec attacks source-code professional-education

makerofthings7

50.1k

asked Nov 20, 2010 at 14:16

68 votes

21 answers

67k views

Lessons learned and misconceptions regarding encryption and cryptology

cryptography encryption .net java

makerofthings7

50.1k

asked Feb 19, 2011 at 19:25

61 votes

8 answers

4k views

What are the career paths in the (illegal) computer security field?

career people-management black-hat

rook

1

asked Sep 20, 2012 at 1:54

47 votes

5 answers

50k views

Servers for penetration testing

penetration-test remote-server

py_script

781

asked Jan 19, 2011 at 15:18

45 votes

4 answers

3k views

What cryptographic flaw was exploited by Flame, to get its code signed by Microsoft?

cryptography malware

D.W.

98.4k

asked Jun 4, 2012 at 5:02

45 votes

8 answers

6k views

What methods are available for securing SSH? [closed]

ssh hardening

Olivier Lalonde

5,039

asked Nov 11, 2010 at 22:26

43 votes

9 answers

11k views

Books about Penetration Testing

penetration-test professional-education

Tornike

593

asked Feb 5, 2011 at 15:09

35 votes

11 answers

13k views

Vulnerable OS's?

penetration-test professional-education exploit known-vulnerabilities operating-systems

tkit

3,272

asked Nov 12, 2010 at 9:38

29 votes

4 answers

11k views

What are the toughest SSH daemon settings in terms of encryption, handshake, or other cryptographic settings? [duplicate]

ssh hardening

LinuxSecurityFreak

1,562

asked Feb 4, 2018 at 20:28

25 votes

5 answers

54k views

What are the pros and cons of a VPN for privacy

privacy vpn anonymity

user7525

asked Feb 4, 2012 at 16:00

23 votes

6 answers

4k views

Is there a guide of general/common IT vulnerabilities? [closed]

known-vulnerabilities

Edgar

655

asked Nov 19, 2010 at 0:44

23 votes

7 answers

6k views

What stops a developer from accessing credit card details and other secret data from a company

audit backdoor

AKS

714

asked Oct 30, 2014 at 18:47

22 votes

2 answers

5k views

Is there a way to verify a binary against the sources?

source-code integrity binary-code

flori

381

asked Jul 5, 2013 at 12:44

Stack Exchange Network

current community

your communities

more stack exchange communities

50 Bookmarks

XKCD #936: Short complex password, or long dictionary passphrase?

How does SSL/TLS work?

How does changing your password every 90 days increase security?

I found that the company I work for is putting a backdoor into mobile phones

Why shouldn't we roll our own?

How exactly does the OpenSSL TLS heartbeat (Heartbleed) exploit work?

Can someone take down Wi-Fi signal?

What "hacking" competitions/challenges exist? [closed]

How do ASLR and DEP work?

How much can I trust Tor?

Why is it difficult to catch "Anonymous" or "Lulzsec" (groups)?

Why is blog spam always written so badly?

How does hacking work?

Why would an attacker ever want to sit on a zero-day exploit?

Stack Overflows - Defeating Canaries, ASLR, DEP, NX

What are the career paths in the computer security field?

Hardening Linux Server

What security resources should a white-hat developer follow these days? [closed]

Lessons learned and misconceptions regarding encryption and cryptology

What are the career paths in the (illegal) computer security field?

Servers for penetration testing

What cryptographic flaw was exploited by Flame, to get its code signed by Microsoft?

What methods are available for securing SSH? [closed]

Books about Penetration Testing

Vulnerable OS's?

What are the toughest SSH daemon settings in terms of encryption, handshake, or other cryptographic settings? [duplicate]

What are the pros and cons of a VPN for privacy

Is there a guide of general/common IT vulnerabilities? [closed]

What stops a developer from accessing credit card details and other secret data from a company

Is there a way to verify a binary against the sources?