Skip to main content
Naftuli Kay's user avatar
Naftuli Kay's user avatar
Naftuli Kay's user avatar
Naftuli Kay
  • Member for 13 years, 1 month
  • Last seen more than a month ago
62 votes
12 answers
9k views

Is there ever a good reason _not_ to use TLS/SSL?

57 votes
3 answers
273k views

What is the real function and use of a DMZ on a network?

57 votes
4 answers
28k views

Does Heartbleed mean new certificates for every SSL server?

53 votes
2 answers
23k views

How are zero days found?

32 votes
1 answer
6k views

What are the odds of an RSA private key collision?

24 votes
7 answers
8k views

Are humans a strong or weak RNG? [duplicate]

18 votes
2 answers
21k views

DH parameters recommended size?

17 votes
3 answers
3k views

Securing Docker and LXC

13 votes
1 answer
14k views

XTS vs AES-CBC with ESSIV for file-based filesystem encryption

12 votes
3 answers
9k views

Do cell-phones exist with open source baseband processors?

12 votes
2 answers
5k views

Does WPA2 Enterprise mitigate evil twin attacks?

11 votes
2 answers
10k views

What trust level should I give keys I need for encryption?

11 votes
3 answers
18k views

Is a self-signed SSL certificate much better than nothing? [duplicate]

11 votes
2 answers
6k views

How does Android filesystem encryption work?

11 votes
1 answer
1k views

Master offline key, shared encryption/decryption key, unique signing keys?

10 votes
2 answers
10k views

What comprises the AIS-31 standard for TRNGs?

9 votes
2 answers
1k views

Multiple encryption subkeys on hardware smart cards

9 votes
2 answers
11k views

Ordering of the PATH environment variable

9 votes
2 answers
2k views

Hardware devices for protecting against BadUSB?

9 votes
4 answers
10k views

Is it possible to USB whitelist in Linux?

9 votes
1 answer
2k views

Are networks using EAP-TLS affected by Heartbleed?

9 votes
1 answer
20k views

Why is a CA certificate required for EAP-TLS clients?

8 votes
5 answers
12k views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

8 votes
1 answer
3k views

How are PGP/GPG private keys stored?

8 votes
1 answer
4k views

How do OTP USB sticks work?

8 votes
3 answers
18k views

Storing SSH private keys on an Android device

7 votes
1 answer
6k views

Are strong WPA2 passwords "good enough" for WiFi security?

7 votes
3 answers
2k views

CVEs aggregated by programming language?

7 votes
2 answers
594 views

Can BTRFS provide authentication on an encrypted disk?

6 votes
1 answer
7k views

What does a signed Linux kernel image get me?