User Ben

118 votes

Accepted

Can I sign a single character message with the RSA private key?

answered Oct 20, 2015 at 14:23

74 votes

Why is it important to apply security best practices when the risk they protect against is very low?

answered Dec 11, 2015 at 12:00

59 votes

Can my workplace view my Tor traffic?

answered Aug 12, 2014 at 9:28

11 votes

Why is application crash considered insecure?

answered Apr 2, 2013 at 15:22

10 votes

Does Google collect and store data about activity done in Incognito mode?

answered Nov 9, 2020 at 17:49

9 votes

DPAPI equivalent on linux?

answered Jan 24, 2014 at 12:15

8 votes

Accepted

Does critical SubjectAltName IP:x.x.x.x on an SSL client certificate limit where the certificate can be used from?

answered Jan 14, 2014 at 10:53

8 votes

Accepted

How to trace virtual phone number?

answered Mar 17, 2014 at 10:21

8 votes

Corporate computers have own corporation's cert as trusted CA; should I consider all traffic compromised?

answered Dec 2, 2015 at 11:14

7 votes

Fake email messages via List-Unsubscribe header

answered Jan 20, 2014 at 16:30

6 votes

Accepted

Hardware USB Key to Reset Any Windows Password

answered Jan 27, 2014 at 21:32

4 votes

How to prevent user from recovering my iPhone data?

answered Jan 27, 2014 at 19:24

4 votes

Accepted

Should generating gpg keys ever result in an identical key to an older key?

answered Mar 19, 2014 at 18:03

4 votes

How do you explain to experts that a database server should not reside in the DMZ?

answered Nov 27, 2014 at 14:30

4 votes

How to achieve seamless SSO without having the user to login again (SAML 2.0 & ADFS using OpenSSO)

answered Jan 16, 2014 at 16:24

4 votes

How to implement client side encryption for CalDav & CardDav content?

answered Jan 20, 2014 at 16:15

4 votes

Erasing encryption (LUKS) keys before suspend-to-RAM?

answered Jan 21, 2014 at 10:52

4 votes

Is obfuscation worth it

answered Dec 2, 2015 at 14:51

3 votes

How does DCOM authentication compare to RPC based authentication/auth?

answered Jan 16, 2014 at 14:03

3 votes

Why does OAuth2 demand client credentials in an authorization header?

answered Jan 16, 2014 at 16:17

3 votes

Employee Snooping

answered Mar 14, 2014 at 10:52

2 votes

Keeping TrueCrypt keyfiles in plain sight

answered Jan 28, 2014 at 16:06

2 votes

Accepted

What are the implications of storing sensitive data in bookmarklets?

answered Jan 30, 2014 at 15:45

2 votes

How is it on some removable media, when enabling/disabling password protection the changes happen immediately?

answered Jan 31, 2014 at 10:33

2 votes

Contact person by phone, when their phone might have malware

answered Feb 3, 2014 at 13:54

2 votes

Accepted

How to store passphrase in this situation?

answered Jan 15, 2014 at 12:34

2 votes

Is HTTPS + FacebookID + Secret Header token sufficient for a user login?

answered Jan 8, 2014 at 17:19

2 votes

How to minimise risk to sensitive data in temp files in shared hosting environment before encryption?

answered Jan 21, 2014 at 16:23

2 votes

Nested encryption for multiple users

answered Jan 21, 2014 at 17:50

1 vote

What are the major security concerns for smartphones?

answered Jan 24, 2014 at 14:34

Stack Exchange Network

41 Answers

Can I sign a single character message with the RSA private key?

Why is it important to apply security best practices when the risk they protect against is very low?

Can my workplace view my Tor traffic?

Why is application crash considered insecure?

Does Google collect and store data about activity done in Incognito mode?

DPAPI equivalent on linux?

Does critical SubjectAltName IP:x.x.x.x on an SSL client certificate limit where the certificate can be used from?

How to trace virtual phone number?

Corporate computers have own corporation's cert as trusted CA; should I consider all traffic compromised?

Fake email messages via List-Unsubscribe header

Hardware USB Key to Reset Any Windows Password

How to prevent user from recovering my iPhone data?

Should generating gpg keys ever result in an identical key to an older key?

How do you explain to experts that a database server should not reside in the DMZ?

How to achieve seamless SSO without having the user to login again (SAML 2.0 & ADFS using OpenSSO)

How to implement client side encryption for CalDav & CardDav content?

Erasing encryption (LUKS) keys before suspend-to-RAM?

Is obfuscation worth it

How does DCOM authentication compare to RPC based authentication/auth?

Why does OAuth2 demand client credentials in an authorization header?

Employee Snooping

Keeping TrueCrypt keyfiles in plain sight

What are the implications of storing sensitive data in bookmarklets?

How is it on some removable media, when enabling/disabling password protection the changes happen immediately?

Contact person by phone, when their phone might have malware

How to store passphrase in this situation?

Is HTTPS + FacebookID + Secret Header token sufficient for a user login?

How to minimise risk to sensitive data in temp files in shared hosting environment before encryption?

Nested encryption for multiple users

What are the major security concerns for smartphones?