User Scott Pack

143 votes

Accepted

Is it a bad idea for a firewall to block ICMP?

answered Oct 17, 2012 at 3:08

101 votes

Accepted

Should I change the default SSH port on linux servers?

answered Mar 9, 2013 at 13:21

95 votes

Accepted

How do you destroy an old hard drive?

answered Feb 2, 2012 at 14:59

63 votes

How can I protect my internet-connected devices from discovery by Shodan?

answered Apr 9, 2013 at 15:40

52 votes

Accepted

Difference between IDS and IPS and Firewall

answered Nov 6, 2013 at 15:17

48 votes

How can I punish a hacker?

answered May 11, 2013 at 13:47

46 votes

What is the difference between authorized_keys and known_hosts file for SSH?

answered Sep 26, 2012 at 13:00

44 votes

Accepted

Simple example auditd configuration?

answered Jul 12, 2011 at 21:10

39 votes

Accepted

Most secure way to partition linux?

answered Jul 12, 2013 at 0:21

31 votes

Why block outgoing network traffic with a firewall?

answered Nov 21, 2012 at 14:54

25 votes

Accepted

What is the danger of hosting your SSL certificate yourself?

answered Apr 11, 2012 at 13:59

19 votes

Accepted

What logs to retain for PCI-DSS?

answered Jan 26, 2012 at 16:08

19 votes

Accepted

Wireless client isolation - how does it work, and can it be bypassed?

answered Jul 4, 2012 at 14:22

18 votes

Accepted

How are spoofed packets detected?

answered Mar 5, 2013 at 16:18

16 votes

Should a site have SSL if it doesn't have a login form?

answered Jul 12, 2013 at 18:00

16 votes

Accepted

PCI DSS requirement 6.4.2 separation of duties between development/test environments

answered Mar 22, 2012 at 15:48

16 votes

What should be included in a jump bag and how often should it be reviewed?

answered Dec 8, 2010 at 19:23

15 votes

Accepted

Erasing a hard-disk, encrypting it as alternative?

answered Mar 14, 2012 at 20:19

14 votes

Accepted

Backtrack 5 in a VM - Why bridged networking over NAT?

answered Jul 6, 2012 at 16:47

14 votes

Books about Penetration Testing

answered Feb 5, 2011 at 18:08

13 votes

Accepted

Is CentOS a good choice from a security perspective?

answered May 2, 2011 at 0:46

13 votes

Do these ports mean anything?

answered Aug 21, 2011 at 14:52

13 votes

Wireless keyboard sniffing risk

answered Mar 9, 2011 at 14:41

13 votes

Accepted

Virus detection with Process Explorer

answered Sep 19, 2011 at 13:33

12 votes

Accepted

What are common/official methods of reporting spam/phishing/nasty-grams to organizations?

answered Aug 18, 2011 at 13:37

12 votes

Securing my web-server / website

answered Jun 30, 2011 at 16:05

12 votes

Fresh Graduate Going into Penetration Testing

answered Mar 6, 2013 at 15:32

12 votes

PCI-DSS - one application per server?

answered Dec 19, 2012 at 13:27

11 votes

Available Resources for Securing RHEL 6

answered Mar 9, 2012 at 18:52

10 votes

Accepted

Appropriate defense for 404s in my logs - persistent web scans from one region

answered Jul 14, 2011 at 17:50

Stack Exchange Network

99 Answers

Is it a bad idea for a firewall to block ICMP?

Should I change the default SSH port on linux servers?

How do you destroy an old hard drive?

How can I protect my internet-connected devices from discovery by Shodan?

Difference between IDS and IPS and Firewall

How can I punish a hacker?

What is the difference between authorized_keys and known_hosts file for SSH?

Simple example auditd configuration?

Most secure way to partition linux?

Why block outgoing network traffic with a firewall?

What is the danger of hosting your SSL certificate yourself?

What logs to retain for PCI-DSS?

Wireless client isolation - how does it work, and can it be bypassed?

How are spoofed packets detected?

Should a site have SSL if it doesn't have a login form?

PCI DSS requirement 6.4.2 separation of duties between development/test environments

What should be included in a jump bag and how often should it be reviewed?

Erasing a hard-disk, encrypting it as alternative?

Backtrack 5 in a VM - Why bridged networking over NAT?

Books about Penetration Testing

Is CentOS a good choice from a security perspective?

Do these ports mean anything?

Wireless keyboard sniffing risk

Virus detection with Process Explorer

What are common/official methods of reporting spam/phishing/nasty-grams to organizations?

Securing my web-server / website

Fresh Graduate Going into Penetration Testing

PCI-DSS - one application per server?

Available Resources for Securing RHEL 6

Appropriate defense for 404s in my logs - persistent web scans from one region