User Simon Richter

30 votes

How can I ensure my dll has not been modified?

integrity library

answered Apr 21, 2015 at 17:11

14 votes

Accepted

Which signing key should I use for certifying other peoples public keys: master or subkey?

answered Jun 10, 2016 at 0:10

12 votes

Accepted

How does Keybase.io work?

public-key-infrastructure keybase

answered Sep 29, 2016 at 11:45

11 votes

Sending passwords to someone remotely

authentication

answered May 22, 2014 at 15:20

8 votes

Why do PGP master keys only have a single subkey, and tie certification with signing by default?

encryption cryptography public-key-infrastructure pgp

answered Apr 24, 2015 at 9:10

7 votes

Unix execute permission can be easily bypassed. Is it superfluous, or what's the intention behind it?

linux file-system permissions unix

answered Sep 2, 2014 at 15:46

6 votes

Why shouldn't I bring a computer to a key-signing party?

key-management pgp digital-signature

answered Jun 9, 2016 at 17:27

5 votes

Is my phone carrier monitoring my traffic?

mobile vpn phone openvpn

answered Oct 28, 2014 at 20:18

5 votes

What's the point of providing file checksums for verifying downloads?

man-in-the-middle digital-signature tampering checksum

answered Aug 24, 2020 at 9:39

4 votes

Do Linux systems need antivirus against ransomware?

linux antivirus ransomware

answered Dec 6, 2016 at 13:11

4 votes

Is PGP for user authentication a good idea?

authentication passwords web-application pgp

answered Jan 9, 2020 at 17:09

3 votes

Does replacing a bcrypt hash with an invalid hash result in no possible working password?

passwords hash bcrypt

answered Jun 13, 2018 at 6:09

3 votes

What's the point of encrypting /boot or / partition?

encryption disk-encryption boot

answered Jan 28, 2016 at 3:12

3 votes

Can my SIP conversation partner identify my location?

geolocation sip

answered Feb 1, 2021 at 16:12

2 votes

Does having no 'if' blocks in code mitigate side-channel attacks?

secure-coding side-channel

answered Jan 17 at 9:45

2 votes

Prevent a bot accessing login page with multiple IPs and massive list of username/ passwords

attack-prevention ddos incident-response bot incident-analysis

answered Aug 27, 2020 at 17:26

2 votes

How to safely save passwords for a future administrator?

passwords risk

answered Oct 24, 2020 at 11:14

2 votes

Reading physical memory frame previously owned by another process to read contents of its memory page

access-control sandbox virtual-memory

answered Jan 13, 2016 at 22:37

2 votes

What is the suggested best practice for changing a user's email address?

authentication email account-security

answered Jul 3, 2020 at 16:16

2 votes

GnuPG warning for a signed key with trust level 4

pgp gnupg

answered Oct 28, 2017 at 16:28

1 vote

Is Skype secure enough to transmit passwords?

passwords instant-messaging skype

answered Mar 23, 2011 at 18:15

1 vote

Are there any systems to mitigate the risk of losing a Signing Key?

key-management digital-signature

answered Jun 9, 2016 at 23:55

1 vote

How do i validate that a PGP Public Key the user inputs is valid?

encryption pgp gnupg

answered Nov 24, 2020 at 16:53

1 vote

Should I compile as root?

unix c compiler

answered Aug 28, 2020 at 9:58

1 vote

Accepted

Does streaming a game from a dedicated gaming VM still expose my PCs to significant privacy/security concerns from installed games?

virtualization client-side isolation gaming

answered Feb 1, 2021 at 13:32

1 vote

Wayback machine downloading a file called default.exe?

web-application malware web-browser web code-execution

answered Feb 1, 2021 at 13:39

0 votes

Where to store an important private key?

ethereum

answered Dec 14, 2020 at 14:55

-2 votes

Why can hardware assisted virtualization be a security issue?

virtualization

answered Dec 26, 2019 at 19:46

-3 votes

Redirect to login page if authorization required -- security flaw?

authorization user-interface

answered May 18 at 8:12

Stack Exchange Network

current community

your communities

more stack exchange communities

29 Answers

How can I ensure my dll has not been modified?

Which signing key should I use for certifying other peoples public keys: master or subkey?

How does Keybase.io work?

Sending passwords to someone remotely

Why do PGP master keys only have a single subkey, and tie certification with signing by default?

Unix execute permission can be easily bypassed. Is it superfluous, or what's the intention behind it?

Why shouldn't I bring a computer to a key-signing party?

Is my phone carrier monitoring my traffic?

What's the point of providing file checksums for verifying downloads?

Do Linux systems need antivirus against ransomware?

Is PGP for user authentication a good idea?

Does replacing a bcrypt hash with an invalid hash result in no possible working password?

What's the point of encrypting /boot or / partition?

Can my SIP conversation partner identify my location?

Does having no 'if' blocks in code mitigate side-channel attacks?

Prevent a bot accessing login page with multiple IPs and massive list of username/ passwords

How to safely save passwords for a future administrator?

Reading physical memory frame previously owned by another process to read contents of its memory page

What is the suggested best practice for changing a user's email address?

GnuPG warning for a signed key with trust level 4

Is Skype secure enough to transmit passwords?

Are there any systems to mitigate the risk of losing a Signing Key?

How do i validate that a PGP Public Key the user inputs is valid?

Should I compile as root?

Does streaming a game from a dedicated gaming VM still expose my PCs to significant privacy/security concerns from installed games?

Wayback machine downloading a file called default.exe?

Where to store an important private key?

Why can hardware assisted virtualization be a security issue?

Redirect to login page if authorization required -- security flaw?