user avatar
user avatar
user avatar
HopelessN00b
  • Member for 9 years, 11 months
  • Last seen more than 3 years ago
97 votes
Accepted

Isn't OS X's Single-User Mode a bad idea?

56 votes

Is it okay for our IT support contractor to remote in without authorization?

17 votes

Comply with data protection requirements without giving away too much?

13 votes

How to securely ask for passwords of customer as consultancy firm?

10 votes

Can my IT department read my Google Hangouts chats while at work?

8 votes
Accepted

What happened to US-CERT Weekly Vulnerability Bulletins?

8 votes

Would an encryption scheme that generates an extra key to be securely stored offsite be a safe backdoor?

7 votes

Strong password vs. restriction on number of attempts

7 votes

Ipsec Native VPN on Windows 8 or 10

6 votes
Accepted

can you update a one-time pad, over one-time pad encryption (compressed)?

6 votes
Accepted

If I accept a certificate in order to use my company’s Wi-Fi, am I vulnerable to MITM attacks?

6 votes

How does Internet Explorer know what text files I have viewed?

5 votes

Is there any way for my ISP or LAN admin to learn my Gmail address as a result of me logging into Gmail's web interface through via their network?

4 votes

What is going on with the FBI's mysterious 'Firefox exploit'?

3 votes
Accepted

Useless 2FA in case of inside attacker

3 votes

How to be PCI compliant with Shopkeep (and others)?

3 votes
Accepted

Periodic password change needed when using 2-step verification?

3 votes
Accepted

Online shops SSL certificates and VISA/MasterCard

3 votes
Accepted

Is it possible to hack my encrypted session and hijack the session by electromagnetic waves?

2 votes

Encryption: Files that can't be encrypted/cryptolocker family doesn't encrypt?

2 votes

Is there any good (or less bad) way to handle a web portal or website with awful security?

2 votes

Purely as a technical matter, is it possible to make otherwise-strong encryption implemetations that contain governmental backdoors?

2 votes
Accepted

Is exposing the default plesk page dangerous?

2 votes

How can I extract the certificate from this pcap file?

2 votes
Accepted

Suspicious SMS about activated phone service

2 votes
Accepted

Is Tomcat session ID generation FIPS compliant?

1 vote
Accepted

I'm called several times per day by the same number but I hear nothing. What security implications can it have?

1 vote

Is KBA trustworthy?

1 vote

Why would an attacker try to guess random email usernames on a small domain?

1 vote

Why aren't hardware R/W switches used to defend hard drives?