user avatar
user avatar
user avatar
trognanders
  • Member for 9 years, 2 months
  • Last seen more than a month ago
110 votes

Do I need to encrypt connections inside a corporate network?

22 votes

Found suspicious, obfuscated PHP file. Is this a hack attempt on my website?

22 votes

Does the saying "physical access = game over" apply to smartphones, too?

13 votes

Should I reject a CSR when the host emailed me the private key for SSL certificate request?

6 votes

Is LastPass' Formfill inherently compromised?

6 votes

What are the general security implications behind using a web app vs its equivalent desktop app?

5 votes

Does code obfuscation give any measurable security benefit?

5 votes

What if somebody sends me genuine certificate that they do not own?

4 votes

Does it make sense to consider a triggerable server software crash a DOS attack?

4 votes
Accepted

Can CDN contents be decrypted by officials in new Telegram security design?

4 votes

Getting access and logging into employee's laptop - Can IT get access without the employee's own credentials?

3 votes

If I send a plaintext e-mail using Gmail to somebody, including my PGP public key block, is that secure?

3 votes
Accepted

Somebody called a number from a pop-up on their MacOS computer and installed a program called GoToAssist. What is the best course of action now?

3 votes
Accepted

Different Diffie–Hellman key per site?

3 votes

How can I verify the certificates when connecting to an FTP server with Filezilla?

3 votes
Accepted

Telegram (or other messenger) message as second factor in 2FA

3 votes

Is HTTPS (and other asymmetric security protocols) still secure when using a VPN?

3 votes

openssl speed tells me blowfish is much quicker than md5, what am I missing?

3 votes

What to do about "SSH Protocol Version 1 Supported" warning?

3 votes
Accepted

What are the dangers of exposing weakly protected user accounts bound with a fake shell over ssh?

3 votes

Should I ever sign a project's PGP key?

3 votes

Is Thunderbolt still insecure?

2 votes

Is Apache (macOS pre-installed) a security risk when launched on a public network?

2 votes

Does my work know im on hangouts even when i dont download anything . and use a incognito window?

2 votes
Accepted

What happens if an attacker steals my sim card number?

2 votes
Accepted

open stmp port as an attack vector?

2 votes
Accepted

Network address (DNS) translation on Amazon Web Services (Ec2)

2 votes

Accidently watched content against company policy while connected to work using RDP

2 votes
Accepted

Is it safe to log into a virtual private server not owned by me?

2 votes

Is personal information secure if two VPNs are used?