User ximaera

22 votes

How is HTTPS protected against MITM attacks by other countries?

answered Dec 30, 2020 at 18:46

18 votes

Accepted

Tons of vulnerabilities are found on tcp/0 port using vulnerability scanners

answered Feb 3, 2018 at 12:38

10 votes

Is IP whitelisting for webpage access secure enough?

answered Jan 18, 2018 at 23:21

9 votes

Why use HTTPS in the DP-3T Protocol?

answered Oct 29, 2020 at 10:16

7 votes

Accepted

A third party Web site wants me to validate my domain ownership using a TXT record

answered May 7, 2019 at 0:01

7 votes

Accepted

Entropy on native memorable password on macosX keychain

answered Jan 22, 2018 at 14:56

6 votes

Accepted

Are old API keys in git history a security vulnerability?

answered Jan 20, 2018 at 6:09

5 votes

Accepted

What tool(s) can be used for MitM in a controlled environment to decrypt+relay HTTPS over MTLS traffic with SNI?

answered Jan 15, 2018 at 3:16

5 votes

What is an Origin Error Attack?

answered Feb 6, 2018 at 22:53

5 votes

Is a SSL Certificate for a static IP Address a good idea

answered Aug 26, 2018 at 23:03

5 votes

Is it possible to make a laptop useless to thieves?

answered Apr 13, 2020 at 3:19

4 votes

Accepted

Using 'openssl cms verify/decrypt' to retrieve content encrypted and signed by a foreign Java library

answered May 16, 2019 at 20:55

4 votes

Accepted

Are there any known Python pickle viruses?

answered Feb 3, 2018 at 19:23

4 votes

Accepted

Healthcare company uses keyloggers for security purposes. Is this normal?

answered Mar 13, 2018 at 22:13

4 votes

Accepted

Does Windows Subsystem for Linux provide additional security (VM-like isolation) over running native Windows programs?

answered Jan 22, 2018 at 11:38

4 votes

Are mitigations for Spectre and Meltdown needed in the VMs for dynamic languages other than JavaScript?

answered Jan 14, 2018 at 3:33

3 votes

certain websites not secure now, two days ago they were

answered Jan 19, 2018 at 1:12

3 votes

Accepted

limit malicious log in attempts on wordpress site

answered Jan 25, 2018 at 14:49

3 votes

Accepted

Differentiating server and client in Mutual TLS authentication

answered Aug 28, 2018 at 17:55

3 votes

How do short lived certificates increase security?

answered Sep 23, 2018 at 22:24

3 votes

Is it possible to stop webcam surveillance by having an always running camera application?

answered May 9, 2019 at 1:01

3 votes

Accepted

Intercepting TCP traffic through MITM attack

answered Apr 12, 2020 at 17:33

3 votes

Does replacing the SIM card mitigate any threats after a serious data breach?

answered Jan 4, 2021 at 19:58

3 votes

Accepted

Is Dell SupportAssist insecure?

answered Dec 1, 2021 at 15:01

2 votes

Accepted

How long a lifetime of a DTLS session with an IoT device should be?

answered Apr 10, 2019 at 19:48

2 votes

Accepted

Which CVE Numbering Authority (CNA) should I contact for a vulnerability found in the GNU Scientific Library?

answered Dec 2, 2020 at 15:48

2 votes

Outgoing messages while under massive denial-of-service attack

answered Dec 15, 2020 at 1:09

2 votes

Most reduced types of DoS attacks

answered Sep 20, 2018 at 15:33

2 votes

Accepted

Does the ANeko app demonstrate vulnerabilities in the Android architecture?

answered Aug 19, 2018 at 23:57

2 votes

ettercap filters - drop the packet and inject packet

answered Aug 21, 2018 at 0:16

Stack Exchange Network

68 Answers

How is HTTPS protected against MITM attacks by other countries?

Tons of vulnerabilities are found on tcp/0 port using vulnerability scanners

Is IP whitelisting for webpage access secure enough?

Why use HTTPS in the DP-3T Protocol?

A third party Web site wants me to validate my domain ownership using a TXT record

Entropy on native memorable password on macosX keychain

Are old API keys in git history a security vulnerability?

What tool(s) can be used for MitM in a controlled environment to decrypt+relay HTTPS over MTLS traffic with SNI?

What is an Origin Error Attack?

Is a SSL Certificate for a static IP Address a good idea

Is it possible to make a laptop useless to thieves?

Using 'openssl cms verify/decrypt' to retrieve content encrypted and signed by a foreign Java library

Are there any known Python pickle viruses?

Healthcare company uses keyloggers for security purposes. Is this normal?

Does Windows Subsystem for Linux provide additional security (VM-like isolation) over running native Windows programs?

Are mitigations for Spectre and Meltdown needed in the VMs for dynamic languages other than JavaScript?

certain websites not secure now, two days ago they were

limit malicious log in attempts on wordpress site

Differentiating server and client in Mutual TLS authentication

How do short lived certificates increase security?

Is it possible to stop webcam surveillance by having an always running camera application?

Intercepting TCP traffic through MITM attack

Does replacing the SIM card mitigate any threats after a serious data breach?

Is Dell SupportAssist insecure?

How long a lifetime of a DTLS session with an IoT device should be?

Which CVE Numbering Authority (CNA) should I contact for a vulnerability found in the GNU Scientific Library?

Outgoing messages while under massive denial-of-service attack

Most reduced types of DoS attacks

Does the ANeko app demonstrate vulnerabilities in the Android architecture?

ettercap filters - drop the packet and inject packet