User Reid Rankin

8 votes

Closed source binary blobs in chipsets - privacy threat?

answered Jun 6, 2016 at 1:03

8 votes

Accepted

Do not trust all intermediate certificates

answered Jul 14, 2016 at 18:58

5 votes

Does ARP spoofing work on all LANs?

answered Aug 13, 2016 at 0:38

5 votes

If the stack grows downwards, how can a buffer overflow overwrite content above the variable?

answered Sep 3, 2016 at 12:54

5 votes

Accepted

Which of AES modes are safer and faster for transferring data over the network?

answered Jun 25, 2016 at 12:32

5 votes

Accepted

What data is not encrypted in iOS 8+ when "locked"

answered Sep 18, 2015 at 17:27

3 votes

Using a stolen certificate on a server

answered Nov 15, 2015 at 2:54

3 votes

Can a powered down cell phone be turned on remotely?

answered Feb 25, 2017 at 3:28

2 votes

Accepted

Are UEFI vulnerable to the same password bypass techniques as BIOS?

answered Jul 14, 2016 at 19:14

2 votes

TCP reset attack, number of Reset Packets

answered Nov 17, 2016 at 4:35

2 votes

Is shadow-stack using for anti-BufferOverflows only?

answered Nov 17, 2016 at 5:00

2 votes

how does mdm (mobile device management ) work in byod environment to control the camera?

answered Nov 17, 2016 at 5:09

2 votes

Accepted

JSON through <script src=, how do you get the JS object in the rogue page?

answered Sep 3, 2016 at 13:21

2 votes

Accepted

Using a password hash...as the password?

answered Nov 15, 2015 at 3:12

2 votes

What should I do when classified information stayed on a unauthorized laptop?

answered Nov 13, 2015 at 2:06

2 votes

Is "Windows" mode inherently more secure than Forms authentication for .NET web apps?

answered Jul 4, 2016 at 4:54

2 votes

Accepted

Is it possible that to sign a message with a PGP key in a way that leakes the key

answered Aug 13, 2015 at 16:13

2 votes

Decrypt iPhone DD Image

answered Sep 13, 2015 at 23:46

2 votes

Can I safely run a virus using sandboxie?

answered Jun 6, 2020 at 0:25

2 votes

Why do we need to sign the self-signed certificate?

answered Jun 6, 2020 at 1:14

1 vote

No expiry for offline primary PGP key?

answered Oct 18, 2020 at 16:07

1 vote

How do we verify a human agent in light of WCAG 2.2?

answered Oct 18, 2020 at 17:20

1 vote

RSA SecureID - is the serial of the key public?

answered Oct 18, 2020 at 17:47

1 vote

is it possible for a user to get the firebase auth token from a released app?

answered Jun 6, 2020 at 0:51

1 vote

How does the TPM provide security for the cloud?

answered Apr 13, 2020 at 17:13

1 vote

Wireguard key exchange

answered Apr 13, 2020 at 17:50

1 vote

Windows Authentication to protect API

answered Sep 13, 2015 at 23:18

1 vote

Why do I have to use multiple keys for each direction and purpose?

answered Sep 21, 2015 at 1:00

1 vote

CSRF Encrypted Token Pattern -- need for 'nonce'?

answered Nov 13, 2015 at 1:18

1 vote

Accepted

Who is the Mandatory Access Control Administrator

answered Nov 13, 2015 at 1:55

Stack Exchange Network

47 Answers

Closed source binary blobs in chipsets - privacy threat?

Do not trust all intermediate certificates

Does ARP spoofing work on all LANs?

If the stack grows downwards, how can a buffer overflow overwrite content above the variable?

Which of AES modes are safer and faster for transferring data over the network?

What data is not encrypted in iOS 8+ when "locked"

Using a stolen certificate on a server

Can a powered down cell phone be turned on remotely?

Are UEFI vulnerable to the same password bypass techniques as BIOS?

TCP reset attack, number of Reset Packets

Is shadow-stack using for anti-BufferOverflows only?

how does mdm (mobile device management ) work in byod environment to control the camera?

JSON through <script src=, how do you get the JS object in the rogue page?

Using a password hash...as the password?

What should I do when classified information stayed on a unauthorized laptop?

Is "Windows" mode inherently more secure than Forms authentication for .NET web apps?

Is it possible that to sign a message with a PGP key in a way that leakes the key

Decrypt iPhone DD Image

Can I safely run a virus using sandboxie?

Why do we need to sign the self-signed certificate?

No expiry for offline primary PGP key?

How do we verify a human agent in light of WCAG 2.2?

RSA SecureID - is the serial of the key public?

is it possible for a user to get the firebase auth token from a released app?

How does the TPM provide security for the cloud?

Wireguard key exchange

Windows Authentication to protect API

Why do I have to use multiple keys for each direction and purpose?

CSRF Encrypted Token Pattern -- need for 'nonce'?

Who is the Mandatory Access Control Administrator