User Steve Dispensa

24 votes

Accepted

Storing credit cards for automatic payments?

answered Sep 8, 2011 at 19:34

18 votes

Accepted

Randomizing MAC addresses on bootup

answered Sep 6, 2011 at 3:29

17 votes

Accepted

Accessing a site (which is) under a DDoS

answered Aug 28, 2011 at 17:44

12 votes

What are the risks of a Certificate Authority hack for 'the average user'?

answered Sep 4, 2011 at 13:41

12 votes

Malware - are removal tools acceptable or is bare metal re-install the only safe option?

answered Aug 22, 2011 at 15:24

11 votes

How to disclose a security vulnerability in an ethical fashion?

answered Aug 25, 2011 at 1:30

10 votes

Using RFID-only on door lock to house?

answered Sep 1, 2011 at 17:18

9 votes

How to securely hash passwords?

answered Aug 19, 2011 at 2:06

9 votes

SSL, SSH, OPENVPN, etc which one?

answered Aug 20, 2011 at 4:04

9 votes

Accepted

Are there any statistics about webservers and browsers TLS support?

answered Sep 20, 2011 at 16:51

9 votes

Does SSL/TLS (https) hide the urls being accessed

answered Sep 30, 2011 at 1:34

7 votes

I just send username and password over https. Is this ok?

answered Sep 12, 2011 at 5:49

7 votes

Applying file deltas to an encrypted file

answered Aug 27, 2011 at 21:42

7 votes

How Reliably do mail systems transmit Encrypted PDFs

answered Sep 2, 2011 at 15:05

6 votes

Accepted

What encryption (if any) is used on electronic credit cards?

answered Aug 28, 2011 at 17:39

5 votes

Accepted

Can wildcard certificates hide/obscure the hostname in a TLS connection?

answered Sep 30, 2011 at 1:36

5 votes

Is a "SAS 70 Type II" audited host SEC compliant?

answered Sep 20, 2011 at 16:53

5 votes

What can I do about TLS 1.0 javascript injection vulnerability on my server?

answered Sep 22, 2011 at 14:08

5 votes

Accepted

In what ways do some banks inadequately advise their customers on online security?

answered Aug 28, 2011 at 14:08

5 votes

Embedded System Communications Security

answered Aug 28, 2011 at 17:34

5 votes

Does the SSL encryption strength or validation level of a website really matter?

answered Aug 30, 2011 at 17:27

4 votes

Mobile phone security eavesdropping based on data transfer

answered Sep 1, 2011 at 17:20

4 votes

How feasible is it for a CA to be hacked? Which default trusted root certificates should I remove?

answered Sep 4, 2011 at 16:56

4 votes

Safe way to authenticate (multi-factor authentication?) while being monitored?

answered Aug 15, 2011 at 4:22

4 votes

Trustworthiness of kernel.org post attack

answered Sep 2, 2011 at 15:07

4 votes

I had SSL certificate on my site but still it has been hacked...how to prevent this from happening?

answered Sep 4, 2011 at 1:31

4 votes

I see two different sets of certificates for Google websites when I am at work and when I am at home

answered Sep 7, 2011 at 3:21

4 votes

Literature about IT security from a hardware standpoint

answered Sep 8, 2011 at 19:39

4 votes

Reverse shell connections

answered Sep 7, 2011 at 20:06

4 votes

How should I compile program for fuzz testing?

answered Sep 9, 2011 at 1:59

Stack Exchange Network

55 Answers

Storing credit cards for automatic payments?

Randomizing MAC addresses on bootup

Accessing a site (which is) under a DDoS

What are the risks of a Certificate Authority hack for 'the average user'?

Malware - are removal tools acceptable or is bare metal re-install the only safe option?

How to disclose a security vulnerability in an ethical fashion?

Using RFID-only on door lock to house?

How to securely hash passwords?

SSL, SSH, OPENVPN, etc which one?

Are there any statistics about webservers and browsers TLS support?

Does SSL/TLS (https) hide the urls being accessed

I just send username and password over https. Is this ok?

Applying file deltas to an encrypted file

How Reliably do mail systems transmit Encrypted PDFs

What encryption (if any) is used on electronic credit cards?

Can wildcard certificates hide/obscure the hostname in a TLS connection?

Is a "SAS 70 Type II" audited host SEC compliant?

What can I do about TLS 1.0 javascript injection vulnerability on my server?

In what ways do some banks inadequately advise their customers on online security?

Embedded System Communications Security

Does the SSL encryption strength or validation level of a website really matter?

Mobile phone security eavesdropping based on data transfer

How feasible is it for a CA to be hacked? Which default trusted root certificates should I remove?

Safe way to authenticate (multi-factor authentication?) while being monitored?

Trustworthiness of kernel.org post attack

I had SSL certificate on my site but still it has been hacked...how to prevent this from happening?

I see two different sets of certificates for Google websites when I am at work and when I am at home

Literature about IT security from a hardware standpoint

Reverse shell connections

How should I compile program for fuzz testing?