User Shane Andrie

111 votes

Accepted

Are there technical differences which make Linux less vulnerable to virus than Windows?

answered Aug 5, 2015 at 20:01

52 votes

Accepted

Should I log that a user changed their password?

answered May 15, 2018 at 14:15

20 votes

Accepted

What is the purpose/role of the "alias" attribute in Java keystore files?

answered Jun 27, 2017 at 14:38

15 votes

Accepted

Is external Nmap scan considered active or passive?

answered Nov 27, 2017 at 16:42

15 votes

Security BY obscurity is horrible. Is security AND obscurity good?

answered May 30, 2018 at 20:16

9 votes

Accepted

Why do we need IDS/IPS if a firewall is present?

answered Oct 13, 2014 at 20:34

8 votes

Securing web applications with only a reverse proxy

answered Jul 23, 2015 at 21:21

7 votes

Accepted

How secure is CodeIgniter 3.x?

answered Aug 26, 2015 at 16:22

7 votes

Policy mandate dilemma

answered Jan 4, 2016 at 22:11

7 votes

Is the NHS wrong about passwords?

answered Oct 6, 2016 at 20:51

6 votes

Accepted

Preventing replay attacks with JWT

answered Nov 27, 2017 at 17:21

6 votes

Why is using an SSH key more secure than using passwords?

answered Oct 10, 2014 at 20:28

5 votes

Accepted

Why do login screens hide the password input field until the username is provided?

answered Apr 19, 2018 at 16:01

5 votes

Accepted

Why is an HSM required to protect CA certificates (rather than a regular USB token)?

answered Jul 11, 2018 at 15:45

4 votes

Credit Card information Security

answered Apr 4, 2017 at 16:20

4 votes

Accepted

Removing execute permissions on `/tmp` or mounting it with `noexec` flag?

answered Aug 25, 2016 at 14:54

4 votes

Identity and Access Management (IAM/IdAM) deployment guide

answered Jul 22, 2016 at 22:37

3 votes

What are the pros and cons of using sha256 to hash a password before passing it to bcrypt?

answered Jun 22, 2015 at 22:20

3 votes

Using public/private key to validate multiple devices

answered Sep 14, 2016 at 16:55

3 votes

Accepted

What is meant by "Bulk Equipment Interference"?

answered Aug 19, 2016 at 16:36

3 votes

JWT access token and refresh token

answered Feb 2, 2018 at 17:06

3 votes

Accepted

Would a reverse-proxy authentication server be a secure setup?

answered Jun 6, 2018 at 16:20

2 votes

Token FIPS 140-2 level 3 with support for Android, iPhone and Web

answered Apr 19, 2018 at 15:07

2 votes

I'm conducting a study involving passwords, and need a method that assigns a numerical value to the complexity of a password

answered Dec 6, 2017 at 17:33

2 votes

Do password crackers / brute-force attacks put a higher priority on "picture-passwords"?

answered Aug 9, 2016 at 20:44

2 votes

Penetration testing's terms of agreement template

answered Jul 24, 2014 at 20:24

2 votes

Accepted

How to decide software flow / business process is secure enough

answered Jul 24, 2015 at 16:38

2 votes

Interviews with staff members about privacy and security policies relevant to their positions

answered Aug 25, 2015 at 14:50

2 votes

Best way to securely send passwords from an application to a user operated server

answered Aug 26, 2015 at 15:54

1 vote

Why do popular sites like Google, Dropbox, etc. have a "trust this computer" checkbox when it weakens security?

answered Aug 13, 2015 at 22:17

Stack Exchange Network

76 Answers

Are there technical differences which make Linux less vulnerable to virus than Windows?

Should I log that a user changed their password?

What is the purpose/role of the "alias" attribute in Java keystore files?

Is external Nmap scan considered active or passive?

Security BY obscurity is horrible. Is security AND obscurity good?

Why do we need IDS/IPS if a firewall is present?

Securing web applications with only a reverse proxy

How secure is CodeIgniter 3.x?

Policy mandate dilemma

Is the NHS wrong about passwords?

Preventing replay attacks with JWT

Why is using an SSH key more secure than using passwords?

Why do login screens hide the password input field until the username is provided?

Why is an HSM required to protect CA certificates (rather than a regular USB token)?

Credit Card information Security

Removing execute permissions on `/tmp` or mounting it with `noexec` flag?

Identity and Access Management (IAM/IdAM) deployment guide

What are the pros and cons of using sha256 to hash a password before passing it to bcrypt?

Using public/private key to validate multiple devices

What is meant by "Bulk Equipment Interference"?

JWT access token and refresh token

Would a reverse-proxy authentication server be a secure setup?

Token FIPS 140-2 level 3 with support for Android, iPhone and Web

I'm conducting a study involving passwords, and need a method that assigns a numerical value to the complexity of a password

Do password crackers / brute-force attacks put a higher priority on "picture-passwords"?

Penetration testing's terms of agreement template

How to decide software flow / business process is secure enough

Interviews with staff members about privacy and security policies relevant to their positions

Best way to securely send passwords from an application to a user operated server

Why do popular sites like Google, Dropbox, etc. have a "trust this computer" checkbox when it weakens security?