User user502

82 votes

Accepted

How much can I trust Tor?

answered Dec 9, 2010 at 13:23

50 votes

Accepted

Are there security issues with embedding an HTTPS iframe on an HTTP page?

answered Nov 30, 2010 at 17:35

47 votes

What are the pros and cons of site wide SSL (https)?

answered Jan 14, 2011 at 14:58

17 votes

How reliable is a password strength checker?

answered Mar 24, 2011 at 12:58

12 votes

Detecting steganography in images

answered Feb 15, 2011 at 20:36

12 votes

Accepted

What's are the advantages of L2TP/IPSEC over plain IPSEC?

answered Jan 10, 2011 at 19:52

8 votes

What security risks does IP spoofing bring?

answered Dec 7, 2010 at 13:58

8 votes

Is Skype secure enough to transmit passwords?

answered Mar 23, 2011 at 12:41

8 votes

Which encryption algorithms will be used to replace RSA when quantum computers become common?

answered Aug 17, 2011 at 15:14

7 votes

Is this enough to tackle script / malicious code insertion in GET, POST requests?

answered Feb 11, 2011 at 14:28

6 votes

What can one do when encryption methods fail?

answered Feb 11, 2011 at 13:55

5 votes

Are MAC Address Filtering and SSID Hiding still worthwhile?

answered Jan 13, 2011 at 17:54

4 votes

What are the weaknesses of this password-generation-method? How can it be improved?

answered Dec 20, 2010 at 20:42

4 votes

Certificate chain

answered Jan 24, 2011 at 13:34

4 votes

How do you estimate the costs of a security breach?

answered Feb 9, 2011 at 14:35

4 votes

Suitable cipher for SMS encryption

answered Feb 17, 2011 at 14:11

3 votes

Practical DRM for pdfs

answered Dec 14, 2010 at 13:24

3 votes

Citations for inadvisability of globally unique password

answered Dec 3, 2010 at 19:26

3 votes

Accepted

What are the resources that an auditor would need to access in read mode?

answered Nov 29, 2010 at 13:25

3 votes

Persisting and comparing NMAP scans

answered Nov 30, 2010 at 13:59

2 votes

Is Stonesoft's "advanced evasion technique" a major problem?

answered Nov 30, 2010 at 14:13

2 votes

What happens if a pro-censor ISP has Telex key(s)?

answered Aug 2, 2011 at 19:04

1 vote

What tools exist to manage large scale firewall rulesets?

answered Feb 17, 2011 at 18:07

1 vote

Managing a team of IDS experts; how would you organize your team?

answered Nov 26, 2010 at 19:36

1 vote

How to define security requirements to ensure that developers... do not provide security by obscurity?

answered Jan 12, 2011 at 15:37

0 votes

What techniques and tools do you use to relate security events?

answered Dec 16, 2010 at 15:04

0 votes

Encryption strategies for multi users access in production systems

answered Jun 16, 2011 at 18:17

-5 votes

Malware known to use port knocking to evade detection by network scanners?

answered Dec 4, 2010 at 17:18

Stack Exchange Network

28 Answers

How much can I trust Tor?

Are there security issues with embedding an HTTPS iframe on an HTTP page?

What are the pros and cons of site wide SSL (https)?

How reliable is a password strength checker?

Detecting steganography in images

What's are the advantages of L2TP/IPSEC over plain IPSEC?

What security risks does IP spoofing bring?

Is Skype secure enough to transmit passwords?

Which encryption algorithms will be used to replace RSA when quantum computers become common?

Is this enough to tackle script / malicious code insertion in GET, POST requests?

What can one do when encryption methods fail?

Are MAC Address Filtering and SSID Hiding still worthwhile?

What are the weaknesses of this password-generation-method? How can it be improved?

Certificate chain

How do you estimate the costs of a security breach?

Suitable cipher for SMS encryption

Practical DRM for pdfs

Citations for inadvisability of globally unique password

What are the resources that an auditor would need to access in read mode?

Persisting and comparing NMAP scans

Is Stonesoft's "advanced evasion technique" a major problem?

What happens if a pro-censor ISP has Telex key(s)?

What tools exist to manage large scale firewall rulesets?

Managing a team of IDS experts; how would you organize your team?

How to define security requirements to ensure that developers... do not provide security by obscurity?

What techniques and tools do you use to relate security events?

Encryption strategies for multi users access in production systems

Malware known to use port knocking to evade detection by network scanners?