Robert David Graham's user avatar
Robert David Graham's user avatar
Robert David Graham's user avatar
Robert David Graham
  • Member for 12 years, 7 months
  • Last seen more than 4 years ago
54 votes

At what point does "hacking" become illegal? (US)

36 votes

Sharing wifi at a business - Bad Policy?

28 votes

Why do law-abiding citizens need strong security?

15 votes

What does "key with length of x bits" mean?

12 votes

Is this much distrust really necessary?

11 votes

What should be used as a salt?

10 votes

Where can I learn cryptography/cryptanalysis the hard way, without going to school ? Any good book?

9 votes
Accepted

How long to brute-force WPA password?

8 votes

How should I determine if an application transmits my credentials securely?

7 votes

I just discovered major security flaws in my web store?

7 votes

How is "anonymous" getting ahold of all these plain-text passwords

7 votes

Do we really need an antivirus? if yes, what for? And how do they activate and enter in a PC?

7 votes

How quickly can these password schemes really be beaten?

7 votes
Accepted

Detecting malware-infected USB drives

6 votes

Programming language for network security

6 votes

How to write an email regarding IT Security that will be read, and not ignored by the end user?

6 votes
Accepted

Is there a web application firewall equivalent of virustotal?

6 votes

Is it enough to only wipe a flash drive once?

5 votes

Is the following authentication scheme secure?

5 votes

What is the risk of giving USB drives as promotional items by a healthcare provider

5 votes
Accepted

How can an IPS\IDS detect SQLi \ XSS (or other application layer) attacks?

5 votes

What is the corrupted image vulnerability? How does it work?

5 votes

What is the purpose of EICAR?

4 votes

What would you define as an "advanced" hacker attempt?

4 votes

Benefits of identifying clients based upon the "X-Forwarded-For" or similar HTTP header in addition to Client IP

4 votes

Security fields: AppSec vs. InfoSec vs. NetSec, etc

4 votes

Can you tell if an attack is successful by looking at IPS logs?

4 votes

Security of SHA256 and Bitcoins

3 votes

SIPR, NIPR and Centrix Military systems

3 votes

Is it necessary to encrypt an ASP.NET view state hidden field when using SSL certificate?