Polynomial's user avatar
Polynomial's user avatar
Polynomial's user avatar
Polynomial
  • Member for 12 years, 5 months
  • Last seen more than a week ago
1288 votes
3 answers
687k views

How does SSL/TLS work?

286 votes
11 answers
89k views

Why shouldn't we roll our own?

165 votes
10 answers
25k views

How do you explain the necessity of "nuke it from orbit" to management and users?

127 votes
2 answers
103k views

How do ASLR and DEP work?

90 votes
2 answers
81k views

Are prepared statements 100% safe against SQL injection?

47 votes
5 answers
59k views

What's an easy way to perform a man-in-the-middle attack on SSL?

41 votes
4 answers
13k views

What alternatives are there to the existing Certificate Authority system for SSL?

38 votes
1 answer
6k views

How does a new SMS message overwrite a previous one?

35 votes
3 answers
2k views

How can you judge the physical security of a padlock?

33 votes
1 answer
13k views

How does OCSP stapling work?

33 votes
4 answers
2k views

What attacks, if any, are possible against Security Support Provider Interface (SSPI)?

30 votes
7 answers
2k views

Protecting critical state infrastructure from the aftermath of a nuclear blast

29 votes
5 answers
16k views

OS with encrypted RAM?

27 votes
3 answers
12k views

How does non-ephemeral Diffie-Hellman key exchange become compromised in SSL when the RSA private key is leaked?

22 votes
4 answers
10k views

What is the potential impact of these SSL certificate validation vulnerabilities?

20 votes
2 answers
1k views

What statistics can be used to identify pseudorandom data?

20 votes
2 answers
17k views

Bypassing the BIOS password

18 votes
2 answers
13k views

Is AES-GCM recommended for SSL?

17 votes
4 answers
3k views

How do you prevent physical backups from being stolen?

16 votes
3 answers
5k views

Content hashes to help protect resources being fetched from a CDN

14 votes
3 answers
12k views

What should I know about SPDY before enabling it?

14 votes
4 answers
45k views

How can SMS spoofing be detected?

13 votes
2 answers
12k views

How would I go about rebuilding the IAT of a packed executable?

12 votes
5 answers
4k views

Encrypting IP addresses in a MySQL database

11 votes
4 answers
1k views

OWASP Top 10 style security guide for implementation in hardware devices

10 votes
1 answer
9k views

What attacks does a W^X policy prevent against?

10 votes
3 answers
5k views

How can I report PCI-DSS violations?

10 votes
6 answers
2k views

Is behavioural analysis (e.g. keystroke dynamics) a reliable security mechanism for MFA?

10 votes
2 answers
2k views

How are CVE identifiers assigned and managed?

10 votes
3 answers
374 views

Are there any Common Weakness Entries (CWEs) applicable for hardware security weaknesses?