Uwe Plonus's user avatar
Uwe Plonus's user avatar
Uwe Plonus's user avatar
Uwe Plonus
  • Member for 11 years, 3 months
  • Last seen more than a month ago
37 votes
Accepted

Why do testers often use the single quote ( ' ) to test for SQL injection?

21 votes
Accepted

Trying to understand why signatures in root certs "are not used"?

20 votes
Accepted

What is the meaning of "something AND 1=0" command in SQL?

9 votes
Accepted

Why the symmetric key is added to the message?

9 votes

Public keys on OpenSSL vs PGP?

8 votes
Accepted

How to fix SSL algorithm for more security

8 votes
Accepted

What to do when GSM/Wifi is jammed and ethernet cables are cut?

7 votes

Best Practice: ”separate ssh-key per host and user“ vs. ”one ssh-key for all hosts“

7 votes
Accepted

Why do embedded systems store server's public certificate in ROM?

6 votes
Accepted

Why is "MIME type mismatch on image file" a security vulnerability?

6 votes

Open exploits database, with structured data (CMS name, version, etc.)

6 votes

What are the differences between dictionary attack and brute force attack?

5 votes
Accepted

Decoding SHA-512 value

5 votes

Minimum size of input text box required for XSS attacks

4 votes

How is certificate forgery with cheap CA's prevented?

4 votes

Why does OpenSSL need the private key to revoke a certificate?

3 votes

What are the security implications of using TOTP for single factor authentication?

3 votes

How likely/possible is it that the NSA have broken common encryption techniques such as SSL/TLS?

3 votes

SMTP Header Injection

3 votes
Accepted

Does a smart card do encryption or does it just provide a private certificate?

3 votes

Is it fundamentally possible to validate that an unmodified version of your client connects to your server?

2 votes

Are externally referenced libraries (CDN's) a security issue?

2 votes

How important is it to protect demo data by HTTPS enabled server?

2 votes
Accepted

Would my protocol be safe?

2 votes
Accepted

Key Exchange using RSA

2 votes

Protection of Private Keys

2 votes

Should I use SSL/TLS renegotiation?

2 votes

How to remain 100% anonymous on the internet?

1 vote

Why a self-signed digital certificate (X.509) cannot be altered?

1 vote

Import Public Private key pair to a Keystore