User schroeder

57

votes

1

answer

4k

views

Does a client certificate identify the owner to unrelated websites?

Dec 12 '18 at 7:11 Gilles 'SO- stop being evil' 46.3k

194

votes

4

answers

51k

views

How does Windows 10 allow Microsoft to spy on you?

windows spyware windows-10

Sep 9 '15 at 12:10 Community♦ 1

3

votes

1

answer

340

views

Does any DNS Recursive resolver accept a “DNSSEC-only” option under DNSCurve?

encryption privacy dns integrity dnssec

Apr 10 '15 at 5:11 schroeder♦ 112k

5

votes

0

answers

160

views

How to know if I'm using openSSL properly [closed]

openssl

Mar 13 '15 at 4:37 Community♦ 1

37

votes

3

answers

10k

views

How to encrypt in PHP, properly?

encryption cryptography php

Aug 11 '17 at 2:47 user2828522 1

0

votes

1

answer

436

views

Why does integrity exclude confidentiality? [closed]

integrity confidentiality

Nov 6 '14 at 9:54 Community♦ 1

130

votes

6

answers

45k

views

How secure are the FIDO U2F tokens

authentication multi-factor one-time-password fido

Apr 29 at 17:53 Community♦ 1

21

votes

3

answers

8k

views

What is the difference between “key length” and “bit strength”?

cryptography

Oct 21 '14 at 16:16 Tom Leek 164k

2

votes

1

answer

191

views

What are the risks of protecting an API with one key only (without secret)?

web-application key-management web-service rest

Oct 8 '14 at 19:25 ThoriumBR 40.9k

22

votes

1

answer

7k

views

GitHub's Bash Shell for Windows is vulnerable to Shellshock. Can it do any harm though?

windows shellshock bash

Oct 1 '14 at 14:41 Community♦ 1

1

vote

0

answers

130

views

Is the use of biometric systems in schools and other 'security-amateur' environments responsible?

biometrics

Sep 4 '14 at 22:02 Chris F Carroll 131

22

votes

2

answers

2k

views

EICAR Virus Test maliciously used to delete logs?

exploit antivirus

Jan 3 at 4:19 forest 54.3k

6

votes

1

answer

473

views

Is there a secure way to create and distribute Shamir Secrets?

encryption cryptography

Aug 12 '14 at 22:19 Tom Leek 164k

5

votes

3

answers

2k

views

What implementations are possible for dual control?

authentication password-management password-policy remote-desktop

Jul 10 '14 at 22:23 AviD♦ 69.8k

4

votes

2

answers

2k

views

Bypassing Trustwave NAC

arp-spoofing vlans network-access-control

Jul 16 '14 at 0:15 Sonny Ordell 3,364

2

votes

1

answer

466

views

Does PCI DSS 1.4 include tablets and smartphones?

mobile pci-dss pci-scope

May 28 '14 at 15:12 schroeder♦ 112k

7

votes

2

answers

1k

views

Gamification of IT security - any applications yet?

corporate-policy user-education gaming

Jul 11 '13 at 15:35 schroeder♦ 112k

5

votes

1

answer

503

views

How can I use certificates to secure my webservices? What is available to javascript?

web-application certificates web-browser javascript man-in-the-middle

Dec 19 '12 at 20:37 damiankolasa 347

10

votes

2

answers

261

views

What are the likely effects of increased government spending on “Cyber Weapons” on the software industry?

zero-day vulnerability-markets

Oct 3 '12 at 22:20 Bruce Ediger 4,462

16

votes

4

answers

11k

views

Detecting reflective DLL injection

windows malware injection antimalware metasploit

Jun 1 '16 at 21:54 Félix 11

10

votes

1

answer

6k

views

How to Perform Vulnerability Assessment for WCF services

penetration-test tools vulnerability-scanners

Aug 26 '18 at 6:28 owais mehtab 1

9

votes

3

answers

309

views

would threat modeling help in scanning code?

vulnerability-scanners threat-modeling

Feb 2 '12 at 9:36 this.josh 8,833

13

votes

1

answer

2k

views

SCADA / PLC exploit code was released in metasploit. Now what?

exploit hardware zero-day exploit-kits

Jan 20 '12 at 11:04 TristanK 423

35

votes

2

answers

35k

views

CSRF with JSON POST

http csrf json

Sep 21 '16 at 20:37 Michał Perłakowski 165

7

votes

3

answers

11k

views

how an iframe can cause xsrf?

web-application penetration-test attack-prevention source-code csrf

Jun 9 '19 at 12:46 mekb 105

135

votes

10

answers

289k

views

Where can I find good dictionaries for dictionary attacks?

authentication passwords attacks brute-force dictionary

Oct 24 at 22:28 stiabhan 184

48

votes

5

answers

7k

views

Open-source penetration-test automation

penetration-test tools vulnerability-scanners network-scanners

Jan 25 '20 at 17:00 Community♦ 1

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

27 Bookmarks

Does a client certificate identify the owner to unrelated websites?

How does Windows 10 allow Microsoft to spy on you?

Does any DNS Recursive resolver accept a “DNSSEC-only” option under DNSCurve?

How to know if I'm using openSSL properly [closed]

How to encrypt in PHP, properly?

Why does integrity exclude confidentiality? [closed]

How secure are the FIDO U2F tokens

What is the difference between “key length” and “bit strength”?

What are the risks of protecting an API with one key only (without secret)?

GitHub's Bash Shell for Windows is vulnerable to Shellshock. Can it do any harm though?

Is the use of biometric systems in schools and other 'security-amateur' environments responsible?

EICAR Virus Test maliciously used to delete logs?

Is there a secure way to create and distribute Shamir Secrets?

What implementations are possible for dual control?

Bypassing Trustwave NAC

Does PCI DSS 1.4 include tablets and smartphones?

Gamification of IT security - any applications yet?

How can I use certificates to secure my webservices? What is available to javascript?

What are the likely effects of increased government spending on “Cyber Weapons” on the software industry?

Detecting reflective DLL injection

How to Perform Vulnerability Assessment for WCF services

would threat modeling help in scanning code?

SCADA / PLC exploit code was released in metasploit. Now what?

CSRF with JSON POST

how an iframe can cause xsrf?

Where can I find good dictionaries for dictionary attacks?

Open-source penetration-test automation