user avatar
user avatar
user avatar
Steve
  • Member for 11 years, 7 months
  • Last seen more than a month ago
68 votes
Accepted

What is the difference between an X.509 "client certificate" and a normal SSL certificate?

37 votes

XSS cookie stealing without redirecting to another page

34 votes
Accepted

Why does Windows not always force me to confirm my password when changing it?

33 votes
Accepted

Role Based Authorization vs. Claim Based Authorization

30 votes

Why is it difficult to catch "Anonymous" or "Lulzsec" (groups)?

20 votes
Accepted

Is my JWT refresh plan secure?

18 votes

Does Windows really still use unsalted MD4 for password storage?

18 votes

How to inject executable, malicious code into PDF, JPEG, MP3, etc.?

17 votes
Accepted

Is it possible to have a key for encryption, that cannot be used for decryption?

17 votes

How does the Windows "Secure Desktop" mode work?

17 votes
Accepted

Claims based vs Permission based authorization

13 votes
Accepted

What are the biggest unsolved problems in IT Security?

12 votes
Accepted

Are there any reasons for Kerberos being based on symmetric cryptography?

11 votes

Two passwords provide better security than two-factor authentication?

11 votes
Accepted

How does external authentication work?

10 votes

Should I bother teaching buffer overflows any more?

10 votes

Windows hardening

10 votes

Is BASIC-Auth secure if done over HTTPS?

10 votes

How does XSS work?

10 votes
Accepted

Secure Internet Polling

10 votes
Accepted

Why not use same certificate for webserver TLS and Signing in SAML?

9 votes
Accepted

What is the difference between claims, attributes, and roles?

9 votes
Accepted

Is it possible to catch a virus on my LAN without clicking on anything?

9 votes

Any good free SSL proxy on windows?

9 votes
Accepted

Keyboards immune to signal monitoring?

8 votes

How is PowerShell's RemoteSigned execution policy different from AllSigned?

8 votes

What is your way to create good passwords that can actually be remembered?

8 votes

Is it insecure to have an SSH server on a workstation?

8 votes

Is changing image's extension prone to error for browsers?

8 votes

Difference between authentication and identification [Crypto and Security perspective]

1
2 3 4 5
11