user avatar
user avatar
user avatar
k1DBLITZ
  • Member for 9 years, 9 months
  • Last seen this week
1255 votes
3 answers
666k views

How does SSL/TLS work?

  • 132k
293 votes
11 answers
462k views

"Diffie-Hellman Key Exchange" in plain English

165 votes
3 answers
84k views

What are rainbow tables and how are they used?

  • 72.1k
121 votes
8 answers
9k views

Is it acceptable that a skilled professional pentester deletes or modifies sensitive data in production unintentionally during a pentest?

  • 2,759
87 votes
4 answers
81k views

SSL Certificate framework 101: How does the browser actually verify the validity of a given server certificate?

69 votes
6 answers
22k views

What's the difference between using HSTS and doing a 301 redirection?

27 votes
1 answer
3k views

What questions should be asked when joining a new security team? [closed]

  • 434
26 votes
1 answer
3k views

Why does Firefox not trust this US government SSL certificate?

  • 2,143
23 votes
2 answers
49k views

Cross site scripting when the greater than and less than signs are escaped?

  • 343
18 votes
1 answer
47k views

Force a specific SSL cipher

  • 3,476
15 votes
2 answers
25k views

Why does Google prefer ECDHE-RSA-AES128-GCM-SHA256?

13 votes
3 answers
2k views

How much information about the reason for an unsuccessful login should a web application give?

12 votes
2 answers
538 views

Why do browsers allow public websites to attack intranet sites?

  • 98.4k
11 votes
5 answers
8k views

Insecure Cookies Because of Load Balancer

  • 367
9 votes
2 answers
4k views

CTF competitions/challenges that are Windows based?

  • 11.4k
8 votes
5 answers
5k views

What security requirements are a defacto standard in the Financial Industry?

8 votes
2 answers
24k views

Private key to PEM

  • 81
7 votes
2 answers
21k views

Can running a browser in Windows Compatibility Mode be a security issue?

  • 173
7 votes
2 answers
1k views

Gamification of IT security - any applications yet?

  • 187
6 votes
3 answers
2k views

Why use Keepass, etc. if all your passwords are in one place?

6 votes
2 answers
2k views

Information Transfer Between Browsers and Tabs

  • 513
5 votes
2 answers
1k views

Why are CSRF tokens used so often?

5 votes
2 answers
3k views

Retention periods for web logs

4 votes
1 answer
456 views

How much protection is really offered by TLS_FALLBACK_SCSV?

  • 6,807
3 votes
2 answers
12k views

Any network related security benefits using RODC (Read Only DC) in DMZ?

2 votes
1 answer
879 views

What is the difference between claims and capabilities in access control?

2 votes
1 answer
2k views

Using "Security Compliance Manager" to audit a Windows system

  • 1,514
1 vote
0 answers
722 views

Passing the hash with metasploit and psexec not working - why? [closed]