User Ljm Dullaart

28 votes

Security risks of fetching user-supplied URLs

answered Apr 25, 2020 at 12:38

19 votes

Computer name naming convention for security

answered Jul 4, 2019 at 20:33

5 votes

Accepted

Are there security reasons for prohibiting universal mac address modification?

answered Jun 28, 2020 at 17:48

5 votes

What is the purpose of hiding spam links in some obscure forum posts?

answered Dec 28, 2022 at 18:04

4 votes

Reason for fake academic pdf files found on sites like Google Scholar?

answered Jul 1, 2019 at 16:05

4 votes

How can I explain our system admins that AV can't protect our enterprise machines from attacks leverage on USBninja?

answered Apr 7, 2019 at 9:20

4 votes

Is it social engineering when you know you are being social engineered?

answered Apr 17, 2019 at 8:25

4 votes

Why should password reset link be single use?

answered Feb 15, 2021 at 12:18

3 votes

How bad is it to store credentials in clear text on disk and in memory?

answered Jun 20, 2021 at 11:59

3 votes

Accepted

Getting real machine information from a virtual machine

answered Jul 31, 2020 at 9:05

3 votes

Accepted

Block HTTPS/TLS (Wo)Man in the Middle Attack

answered Aug 18, 2020 at 7:55

3 votes

Making Users Prove They Have Reviewed The Information Security Policy Documents

answered Aug 20, 2020 at 7:15

3 votes

Using an example to comprehend why “safely” erasing a drive yields better results than filling it up with meaningless data

answered Aug 21, 2020 at 9:28

3 votes

Is a company decrypting all SSL traffic through a Root CA GDPR compliant?

answered Apr 12, 2019 at 16:59

3 votes

Firewall logs with Local IP contacting local IP over the internet

answered Jul 20, 2019 at 20:46

3 votes

ISP provider does not giving permission to change my router password

answered Nov 1, 2019 at 17:38

3 votes

Accepted

How are vulnerabilities like PrintNightmare CVE-2021-34527 discovered?

answered Jul 3, 2021 at 13:06

3 votes

Is Linux really not spying on us?

answered Jul 9, 2021 at 9:17

3 votes

Are virtual credit cards in scope for PCI Compliance?

answered Sep 28, 2021 at 16:32

2 votes

GPS metadata in uploaded pictures: vulnerability or not?

answered Nov 3, 2023 at 10:16

2 votes

If I control both sides of a connection, is there any reason to support alternate cipher suites?

answered Dec 22, 2023 at 10:40

2 votes

Accepted

Another domain pointed to my server, what are the risks?

answered Nov 13, 2019 at 13:12

2 votes

Can not logout when the network is unreachable

answered Aug 7, 2019 at 10:21

2 votes

Accepted

Looking for resources for interpreting my security logs

answered Mar 3, 2019 at 11:52

2 votes

Why can't we protect the password file so that only the system can read it?

answered Jul 3, 2020 at 16:09

2 votes

Real-world use of restricted shells

answered Apr 23, 2020 at 9:28

2 votes

Does Password Harvesting Happen in Servers?

answered Feb 3, 2021 at 22:07

2 votes

Accepted

Should I be seeing network management protocols on 'user' subnets?

answered Jun 10, 2021 at 12:28

2 votes

What to do when you simply cannot trust anyone or anything anymore?

answered Jun 3, 2021 at 10:17

2 votes

How to create custom exploit https requests to test a PHP framework

answered Feb 20, 2021 at 12:41

Stack Exchange Network

110 Answers

Security risks of fetching user-supplied URLs

Computer name naming convention for security

Are there security reasons for prohibiting universal mac address modification?

What is the purpose of hiding spam links in some obscure forum posts?

Reason for fake academic pdf files found on sites like Google Scholar?

How can I explain our system admins that AV can't protect our enterprise machines from attacks leverage on USBninja?

Is it social engineering when you know you are being social engineered?

Why should password reset link be single use?

How bad is it to store credentials in clear text on disk and in memory?

Getting real machine information from a virtual machine

Block HTTPS/TLS (Wo)Man in the Middle Attack

Making Users Prove They Have Reviewed The Information Security Policy Documents

Using an example to comprehend why “safely” erasing a drive yields better results than filling it up with meaningless data

Is a company decrypting all SSL traffic through a Root CA GDPR compliant?

Firewall logs with Local IP contacting local IP over the internet

ISP provider does not giving permission to change my router password

How are vulnerabilities like PrintNightmare CVE-2021-34527 discovered?

Is Linux really not spying on us?

Are virtual credit cards in scope for PCI Compliance?

GPS metadata in uploaded pictures: vulnerability or not?

If I control both sides of a connection, is there any reason to support alternate cipher suites?

Another domain pointed to my server, what are the risks?

Can not logout when the network is unreachable

Looking for resources for interpreting my security logs

Why can't we protect the password file so that only the system can read it?

Real-world use of restricted shells

Does Password Harvesting Happen in Servers?

Should I be seeing network management protocols on 'user' subnets?

What to do when you simply cannot trust anyone or anything anymore?

How to create custom exploit https requests to test a PHP framework