Skip to main content
d33tah's user avatar
d33tah's user avatar
d33tah's user avatar
d33tah
  • Member for 11 years, 7 months
  • Last seen more than a week ago
125 votes
8 answers
27k views

Why is storing passwords in version control a bad idea?

70 votes
7 answers
24k views

What is the possible impact of dirtyc0w a.k.a. "Dirty COW" bug?

58 votes
7 answers
8k views

Are there security advantages gained from forcing a website to be available from just one tab at a time?

40 votes
5 answers
8k views

Why do some websites enforce lack of SSL?

33 votes
6 answers
7k views

Why did Poitras and Greenwald put their batteries in the fridge?

28 votes
4 answers
8k views

What security mechanisms are used in BGP and why do they fail?

26 votes
2 answers
13k views

How exploitable is the recent UseRoaming SSH vulnerability?

24 votes
4 answers
32k views

Why is it even possible to forge sender header in e-mail? [duplicate]

21 votes
4 answers
16k views

Processor microcode manipulation to change opcodes?

18 votes
2 answers
6k views

Are there any risks associated with SSH agent forwarding?

16 votes
3 answers
2k views

What are the security implications of "Row Hammer" attack?

12 votes
1 answer
456 views

A filesystem with chunks hidden all over the internet?

11 votes
1 answer
303 views

Does running random "docker pull" essentially mean I'm giving someone root access?

11 votes
1 answer
4k views

Does 7-Zip really run multiple rounds of SHA-256 when key stretching?

9 votes
2 answers
1k views

Is IP spoofing still a threat in the Internet?

7 votes
2 answers
5k views

Certificate Transparency logs: why are so many operated by same entities and how do they differ?

7 votes
1 answer
852 views

Automatically determining whether particular product version is vulnerable?

7 votes
3 answers
689 views

An OS that does not trust its RAM?

7 votes
2 answers
5k views

Erasing encryption (LUKS) keys before suspend-to-RAM?

5 votes
1 answer
1k views

Can a malicious user do any harm using /dev/kvm?

5 votes
3 answers
7k views

MySQL SQL injection without stacked queries - what is actually possible without affecting the FS?

5 votes
1 answer
1k views

How does LetsEncrypt.org's ACME work?

5 votes
2 answers
18k views

How to verify which for domains (if any) is this certificate valid for?

4 votes
2 answers
138 views

Converting sound to keystrokes: can I actually try it out?

4 votes
1 answer
1k views

How are WPA2 passwords encoded?

4 votes
1 answer
167 views

Why does majority of the publicly routable IPs seem to have no rDNS assigned?

4 votes
0 answers
165 views

What is known about the latest vulnerability related to Linux Page Table Isolation patches? [duplicate]

4 votes
2 answers
954 views

Plausibly deniable SSH - does it make sense?

4 votes
1 answer
294 views

How does OTR's authentication using "Question and answer" protect against MiTM?

3 votes
3 answers
418 views

How can NSA see everything without us noticing that? [closed]