User Ali

23 votes

Is TLS 1.0 more secure than TLS 1.2?

answered May 1, 2015 at 14:54

19 votes

Accepted

How many qubits are needed to factor 2048-bit RSA keys on a quantum computer?

answered May 2, 2015 at 14:47

18 votes

Accepted

Is testing for SQL injection vulnerabilities still relevant in modern web applications?

answered May 1, 2015 at 14:40

9 votes

New Gmail login system—going against conventional wisdom?

answered May 8, 2015 at 17:34

9 votes

Is Apache vulnerable to CVE-2015-1781?

answered May 4, 2015 at 9:43

8 votes

Someone Copied Our Site Code (Including Analytics) and Put Adult Content on It

answered Apr 30, 2015 at 7:59

7 votes

WiFi security using IEEE 802.1X - how secure is it?

answered May 7, 2015 at 11:49

6 votes

How is the session ID sent securely?

answered May 1, 2015 at 12:46

5 votes

Accepted

Does nmap help to know if firewall is turned on?

answered May 17, 2015 at 8:22

4 votes

How secure is VirtualBox for privacy/anonymity?

answered May 7, 2015 at 8:53

4 votes

How does SSL/TLS PKI work?

answered May 13, 2015 at 13:09

3 votes

Accepted

Would AES encryption of a small number of blocks be less secure than encrypting a large, fixed-size padded buffer?

answered May 14, 2015 at 5:49

3 votes

Accepted

Is it possible to obtain the login credentials submitted by users?

answered May 2, 2015 at 16:10

3 votes

How can I explain "zero knowledge proof" to an end user?

answered Apr 29, 2015 at 10:28

2 votes

Accepted

Difference between Oracle Label Security and Oracle Virtual Private Database?

answered May 1, 2015 at 10:34

2 votes

Accepted

Sniffing my networks traffic illegal?

answered May 6, 2015 at 9:07

2 votes

What attacks, if any, are possible against Security Support Provider Interface (SSPI)?

answered Apr 29, 2015 at 12:22

2 votes

If the public key can't be used for decrypting something encrypted by the private key, then how do digital signatures work?

answered May 2, 2015 at 3:41

1 vote

What is the impact of removing TLS_RSA_WITH_RC4_128_SHA from my server's cipher suite?

answered May 2, 2015 at 4:23

1 vote

Is the security of this .net application flawed?

answered May 3, 2015 at 19:34

1 vote

Can the IPS technology in a UTM prevent a DDoS attack?

answered Apr 29, 2015 at 11:09

1 vote

Where does the GSM A5 key come from? Why isn't DH used?

answered May 1, 2015 at 17:31

1 vote

Bell-LaPadula model and composite services

answered May 1, 2015 at 18:35

1 vote

Exploiting a desktop application

answered May 1, 2015 at 19:02

1 vote

How does SSL/TLS PKI work?

answered May 16, 2015 at 5:26

1 vote

Is there any possibility that a trusted CA can perform a man in middle attack?

answered May 8, 2015 at 4:59

0 votes

How to protect data at rest in a php application?

answered May 20, 2015 at 21:37

0 votes

Bitlocker without TPM with both a startup USB and password?

answered May 9, 2015 at 10:22

0 votes

Favicon Redirection Possible Security Flaw

answered May 7, 2015 at 13:48

0 votes

How can my bank issue a new credit card with the same pin number?

answered May 7, 2015 at 14:16

Stack Exchange Network

31 Answers

Is TLS 1.0 more secure than TLS 1.2?

How many qubits are needed to factor 2048-bit RSA keys on a quantum computer?

Is testing for SQL injection vulnerabilities still relevant in modern web applications?

New Gmail login system—going against conventional wisdom?

Is Apache vulnerable to CVE-2015-1781?

Someone Copied Our Site Code (Including Analytics) and Put Adult Content on It

WiFi security using IEEE 802.1X - how secure is it?

How is the session ID sent securely?

Does nmap help to know if firewall is turned on?

How secure is VirtualBox for privacy/anonymity?

How does SSL/TLS PKI work?

Would AES encryption of a small number of blocks be less secure than encrypting a large, fixed-size padded buffer?

Is it possible to obtain the login credentials submitted by users?

How can I explain "zero knowledge proof" to an end user?

Difference between Oracle Label Security and Oracle Virtual Private Database?

Sniffing my networks traffic illegal?

What attacks, if any, are possible against Security Support Provider Interface (SSPI)?

If the public key can't be used for decrypting something encrypted by the private key, then how do digital signatures work?

What is the impact of removing TLS_RSA_WITH_RC4_128_SHA from my server's cipher suite?

Is the security of this .net application flawed?

Can the IPS technology in a UTM prevent a DDoS attack?

Where does the GSM A5 key come from? Why isn't DH used?

Bell-LaPadula model and composite services

Exploiting a desktop application

How does SSL/TLS PKI work?

Is there any possibility that a trusted CA can perform a man in middle attack?

How to protect data at rest in a php application?

Bitlocker without TPM with both a startup USB and password?

Favicon Redirection Possible Security Flaw

How can my bank issue a new credit card with the same pin number?