User schroeder

194

votes

4

answers

51k

views

How does Windows 10 allow Microsoft to spy on you?

Sep 9 '15 at 12:10 Community♦ 1

135

votes

10

answers

287k

views

Where can I find good dictionaries for dictionary attacks?

authentication passwords attacks brute-force dictionary

Oct 24 at 22:28 stiabhan 184

130

votes

6

answers

45k

views

How secure are the FIDO U2F tokens

authentication multi-factor one-time-password fido

Apr 29 at 17:53 Community♦ 1

57

votes

1

answer

4k

views

Does a client certificate identify the owner to unrelated websites?

tls certificates privacy web-browser web

Dec 12 '18 at 7:11 Gilles 'SO- stop being evil' 45.6k

48

votes

5

answers

7k

views

Open-source penetration-test automation

penetration-test tools vulnerability-scanners network-scanners

Jan 25 '20 at 17:00 Community♦ 1

37

votes

3

answers

10k

views

How to encrypt in PHP, properly?

encryption cryptography php

Aug 11 '17 at 2:47 user2828522 1

35

votes

2

answers

35k

views

CSRF with JSON POST

http csrf json

Sep 21 '16 at 20:37 Michał Perłakowski 165

22

votes

2

answers

2k

views

EICAR Virus Test maliciously used to delete logs?

exploit antivirus

Jan 3 at 4:19 forest 53.2k

21

votes

1

answer

7k

views

GitHub's Bash Shell for Windows is vulnerable to Shellshock. Can it do any harm though?

windows shellshock bash

Oct 1 '14 at 14:41 Community♦ 1

21

votes

3

answers

8k

views

What is the difference between “key length” and “bit strength”?

cryptography

Oct 21 '14 at 16:16 Tom Leek 163k

16

votes

4

answers

11k

views

Detecting reflective DLL injection

windows malware injection antimalware metasploit

Jun 1 '16 at 21:54 Félix 11

13

votes

1

answer

2k

views

SCADA / PLC exploit code was released in metasploit. Now what?

exploit hardware zero-day exploit-kits

Jan 20 '12 at 11:04 TristanK 423

10

votes

1

answer

6k

views

How to Perform Vulnerability Assessment for WCF services

penetration-test tools vulnerability-scanners

Aug 26 '18 at 6:28 owais mehtab 1

10

votes

2

answers

261

views

What are the likely effects of increased government spending on “Cyber Weapons” on the software industry?

zero-day vulnerability-markets

Oct 3 '12 at 22:20 Bruce Ediger 4,452

9

votes

3

answers

307

views

would threat modeling help in scanning code?

vulnerability-scanners threat-modeling

Feb 2 '12 at 9:36 this.josh 8,833

7

votes

3

answers

11k

views

how an iframe can cause xsrf?

web-application penetration-test attack-prevention source-code csrf

Jun 9 '19 at 12:46 mekb 105

7

votes

2

answers

1k

views

Gamification of IT security - any applications yet?

corporate-policy user-education gaming

Jul 11 '13 at 15:35 schroeder♦ 111k

6

votes

1

answer

472

views

Is there a secure way to create and distribute Shamir Secrets?

encryption cryptography

Aug 12 '14 at 22:19 Tom Leek 163k

5

votes

1

answer

503

views

How can I use certificates to secure my webservices? What is available to javascript?

web-application certificates web-browser javascript man-in-the-middle

Dec 19 '12 at 20:37 damiankolasa 347

5

votes

3

answers

2k

views

What implementations are possible for dual control?

authentication password-management password-policy remote-desktop

Jul 10 '14 at 22:23 AviD♦ 69.5k

5

votes

0

answers

159

views

How to know if I'm using openSSL properly [closed]

openssl

Mar 13 '15 at 4:37 Community♦ 1

4

votes

2

answers

2k

views

Bypassing Trustwave NAC

arp-spoofing vlans network-access-control

Jul 16 '14 at 0:15 Sonny Ordell 3,334

3

votes

1

answer

338

views

Does any DNS Recursive resolver accept a “DNSSEC-only” option under DNSCurve?

encryption privacy dns integrity dnssec

Apr 10 '15 at 5:11 schroeder♦ 111k

2

votes

1

answer

464

views

Does PCI DSS 1.4 include tablets and smartphones?

mobile pci-dss pci-scope

May 28 '14 at 15:12 schroeder♦ 111k

2

votes

1

answer

191

views

What are the risks of protecting an API with one key only (without secret)?

web-application key-management web-service rest

Oct 8 '14 at 19:25 ThoriumBR 40.2k

1

vote

0

answers

130

views

Is the use of biometric systems in schools and other 'security-amateur' environments responsible?

biometrics

Sep 4 '14 at 22:02 Chris F Carroll 131

0

votes

1

answer

436

views

Why does integrity exclude confidentiality? [closed]

integrity confidentiality

Nov 6 '14 at 9:54 Community♦ 1

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

27 Bookmarks

How does Windows 10 allow Microsoft to spy on you?

Where can I find good dictionaries for dictionary attacks?

How secure are the FIDO U2F tokens

Does a client certificate identify the owner to unrelated websites?

Open-source penetration-test automation

How to encrypt in PHP, properly?

CSRF with JSON POST

EICAR Virus Test maliciously used to delete logs?

GitHub's Bash Shell for Windows is vulnerable to Shellshock. Can it do any harm though?

What is the difference between “key length” and “bit strength”?

Detecting reflective DLL injection

SCADA / PLC exploit code was released in metasploit. Now what?

How to Perform Vulnerability Assessment for WCF services

What are the likely effects of increased government spending on “Cyber Weapons” on the software industry?

would threat modeling help in scanning code?

how an iframe can cause xsrf?

Gamification of IT security - any applications yet?

Is there a secure way to create and distribute Shamir Secrets?

How can I use certificates to secure my webservices? What is available to javascript?

What implementations are possible for dual control?

How to know if I'm using openSSL properly [closed]

Bypassing Trustwave NAC

Does any DNS Recursive resolver accept a “DNSSEC-only” option under DNSCurve?

Does PCI DSS 1.4 include tablets and smartphones?

What are the risks of protecting an API with one key only (without secret)?

Is the use of biometric systems in schools and other 'security-amateur' environments responsible?

Why does integrity exclude confidentiality? [closed]