Shane Andrie's user avatar
Shane Andrie's user avatar
Shane Andrie's user avatar
Shane Andrie
  • Member for 9 years, 7 months
  • Last seen more than 5 years ago
111 votes
Accepted

Are there technical differences which make Linux less vulnerable to virus than Windows?

52 votes
Accepted

Should I log that a user changed their password?

20 votes
Accepted

What is the purpose/role of the "alias" attribute in Java keystore files?

15 votes
Accepted

Is external Nmap scan considered active or passive?

15 votes

Security BY obscurity is horrible. Is security AND obscurity good?

9 votes
Accepted

Why do we need IDS/IPS if a firewall is present?

8 votes

Securing web applications with only a reverse proxy

7 votes
Accepted

How secure is CodeIgniter 3.x?

7 votes

Policy mandate dilemma

7 votes

Is the NHS wrong about passwords?

6 votes
Accepted

Preventing replay attacks with JWT

6 votes

Why is using an SSH key more secure than using passwords?

5 votes
Accepted

Why do login screens hide the password input field until the username is provided?

5 votes
Accepted

Why is an HSM required to protect CA certificates (rather than a regular USB token)?

4 votes

Credit Card information Security

4 votes
Accepted

Removing execute permissions on `/tmp` or mounting it with `noexec` flag?

4 votes

Identity and Access Management (IAM/IdAM) deployment guide

3 votes

What are the pros and cons of using sha256 to hash a password before passing it to bcrypt?

3 votes

Using public/private key to validate multiple devices

3 votes
Accepted

What is meant by "Bulk Equipment Interference"?

3 votes

JWT access token and refresh token

3 votes
Accepted

Would a reverse-proxy authentication server be a secure setup?

2 votes

Token FIPS 140-2 level 3 with support for Android, iPhone and Web

2 votes

I'm conducting a study involving passwords, and need a method that assigns a numerical value to the complexity of a password

2 votes

Are SIEM and NIDS/HIDS complementary?

2 votes

Do password crackers / brute-force attacks put a higher priority on "picture-passwords"?

2 votes

Penetration testing's terms of agreement template

2 votes
Accepted

How to decide software flow / business process is secure enough

2 votes

Is this authentication and encryption solution secure?

2 votes

Interviews with staff members about privacy and security policies relevant to their positions