User humanityANDpeace

11 votes

3 answers

4k views

Security tradeoffs of pathname-based MAC (e.g., TOMOYO, grsecurity, AppArmor, ...)

asked Dec 17, 2012 at 8:23

11 votes

3 answers

4k views

How to minimize the risk posed by Intel AMT/ME's "ring -3 exploits"?

asked Feb 2, 2015 at 8:09

10 votes

1 answer

3k views

Would using Google reCAPTCHA allow Google to cheat?

asked Mar 12, 2014 at 9:46

8 votes

3 answers

11k views

backdoors in hardware (ie. intel/amd cpu) possible? [closed]

asked Aug 8, 2013 at 6:25

8 votes

2 answers

450 views

Software can be audited, is there an equivalent for hardware?

asked Mar 29, 2015 at 13:12

7 votes

2 answers

960 views

What is disk encryption worth? Threat of proprietary Bios, SMM, optionrom, TPM etc?

asked Oct 1, 2012 at 6:59

6 votes

1 answer

1k views

DOS safe alternative to delay response to an attacker with sleep()?

asked Mar 10, 2014 at 7:29

6 votes

1 answer

2k views

Enabling virutalization, addressing the bluepill risk?

asked Apr 6, 2014 at 9:47

4 votes

3 answers

8k views

How much time / "entropy collected" should generating a RSA 2048bit keypair take?

asked Mar 16, 2014 at 14:05

4 votes

1 answer

84 views

safely changing distribution, is there a strategy to get an distro iso image untampered?

asked Sep 21, 2014 at 12:19

3 votes

3 answers

2k views

Does Java/Dalvik's Java Native Interface JNI make Android prone to better attacks?

asked Mar 10, 2016 at 13:44

2 votes

0 answers

229 views

Can linux cgroups and namespaces assist hiding malware?

asked May 3, 2016 at 5:20

1 vote

1 answer

1k views

Are there approaches/mechanism to detect hardware backdoors?

asked Oct 10, 2014 at 16:34

1 vote

0 answers

59 views

Get information about the audit state of software (for OSS)?

asked Nov 11, 2014 at 10:06

1 vote

2 answers

483 views

RAM memory data remanence and double boot, risky?

asked Apr 1, 2014 at 8:51

1 vote

2 answers

465 views

Is wiping memory at code/end good practise?

asked Apr 24, 2014 at 10:37

1 vote

2 answers

520 views

Mandatory Access Control Rulesets, how to deal with Python, Bash and other interpreters?

asked Dec 19, 2012 at 8:51

0 votes

1 answer

711 views

What are the risks due to the "challange ACK" side channel attack [CVE-2016-5696]?

asked Aug 21, 2016 at 9:33

0 votes

1 answer

93 views

Do comparative reviews of OS safety exist, which consider the code volume?

asked Jan 7, 2017 at 13:45

Stack Exchange Network

19 Questions

Security tradeoffs of pathname-based MAC (e.g., TOMOYO, grsecurity, AppArmor, ...)

How to minimize the risk posed by Intel AMT/ME's "ring -3 exploits"?

Would using Google reCAPTCHA allow Google to cheat?

backdoors in hardware (ie. intel/amd cpu) possible? [closed]

Software can be audited, is there an equivalent for hardware?

What is disk encryption worth? Threat of proprietary Bios, SMM, optionrom, TPM etc?

DOS safe alternative to delay response to an attacker with sleep()?

Enabling virutalization, addressing the bluepill risk?

How much time / "entropy collected" should generating a RSA 2048bit keypair take?

safely changing distribution, is there a strategy to get an distro iso image untampered?

Does Java/Dalvik's Java Native Interface JNI make Android prone to better attacks?

Can linux cgroups and namespaces assist hiding malware?

Are there approaches/mechanism to detect hardware backdoors?

Get information about the audit state of software (for OSS)?

RAM memory data remanence and double boot, risky?

Is wiping memory at code/end good practise?

Mandatory Access Control Rulesets, how to deal with Python, Bash and other interpreters?

What are the risks due to the "challange ACK" side channel attack [CVE-2016-5696]?

Do comparative reviews of OS safety exist, which consider the code volume?