User schroeder

4 answers

194 votes

52k views

77 bookmarks

How does Windows 10 allow Microsoft to spy on you?

Aug 13 '15 at 9:26

10 answers

137 votes

307k views

124 bookmarks

Where can I find good dictionaries for dictionary attacks?

authentication passwords attacks brute-force dictionary

Dec 29 '10 at 15:24

6 answers

131 votes

46k views

52 bookmarks

How secure are the FIDO U2F tokens

authentication multi-factor one-time-password fido

Oct 22 '14 at 5:55

1 answers

58 votes

4k views

14 bookmarks

Does a client certificate identify the owner to unrelated websites?

tls certificates privacy web-browser web

Dec 10 '18 at 22:37

5 answers

48 votes

7k views

43 bookmarks

Open-source penetration-test automation

penetration-test tools vulnerability-scanners network-scanners

Nov 15 '10 at 23:31

2 answers

38 votes

37k views

15 bookmarks

CSRF with JSON POST

http csrf json

Dec 30 '11 at 9:39

3 answers

37 votes

10k views

16 bookmarks

How to encrypt in PHP, properly?

encryption cryptography php

Feb 4 '15 at 18:16

2 answers

22 votes

2k views

8 bookmarks

EICAR Virus Test maliciously used to delete logs?

exploit antivirus

Sep 3 '14 at 19:33

1 answers

22 votes

7k views

7 bookmarks

GitHub's Bash Shell for Windows is vulnerable to Shellshock. Can it do any harm though?

windows shellshock bash

Sep 25 '14 at 17:06

3 answers

21 votes

8k views

9 bookmarks

What is the difference between "key length" and "bit strength"?

cryptography

Oct 21 '14 at 15:26

4 answers

16 votes

11k views

9 bookmarks

Detecting reflective DLL injection

windows malware injection antimalware metasploit

Sep 28 '12 at 15:25

1 answers

13 votes

2k views

5 bookmarks

SCADA / PLC exploit code was released in metasploit. Now what?

exploit hardware zero-day exploit-kits

Jan 20 '12 at 2:50

1 answers

10 votes

6k views

4 bookmarks

How to Perform Vulnerability Assessment for WCF services

penetration-test tools vulnerability-scanners

May 10 '12 at 12:03

2 answers

10 votes

294 views

2 bookmarks

What are the likely effects of increased government spending on "Cyber Weapons" on the software industry?

zero-day vulnerability-markets

Oct 3 '12 at 19:44

3 answers

9 votes

346 views

1 bookmarks

would threat modeling help in scanning code?

vulnerability-scanners threat-modeling

Jan 29 '12 at 10:33

3 answers

7 votes

12k views

5 bookmarks

how an iframe can cause xsrf?

web-application penetration-test attack-prevention source-code csrf

Nov 21 '11 at 12:56

2 answers

7 votes

1k views

4 bookmarks

Gamification of IT security - any applications yet?

corporate-policy user-education gaming

Jul 10 '13 at 9:42

1 answers

6 votes

542 views

4 bookmarks

Is there a secure way to create and distribute Shamir Secrets?

encryption cryptography

Aug 12 '14 at 21:39

1 answers

5 votes

540 views

1 bookmarks

How can I use certificates to secure my webservices? What is available to javascript?

web-application certificates web-browser javascript man-in-the-middle

Dec 19 '12 at 17:57

3 answers

5 votes

2k views

3 bookmarks

What implementations are possible for dual control?

authentication password-management password-policy remote-desktop

Jul 10 '14 at 15:38

0 answers

5 votes

195 views

1 bookmarks

How to know if I'm using openSSL properly

openssl

Mar 11 '15 at 23:30

2 answers

4 votes

2k views

1 bookmarks

Bypassing Trustwave NAC

arp-spoofing vlans network-access-control

Jul 8 '14 at 1:50

1 answers

3 votes

382 views

1 bookmarks

Does any DNS Recursive resolver accept a "DNSSEC-only" option under DNSCurve?

encryption privacy dns integrity dnssec

Apr 10 '15 at 4:34

1 answers

2 votes

505 views

2 bookmarks

Does PCI DSS 1.4 include tablets and smartphones?

mobile pci-dss pci-scope

May 28 '14 at 14:50

1 answers

2 votes

222 views

2 bookmarks

What are the risks of protecting an API with one key only (without secret)?

web-application key-management web-service rest

Oct 8 '14 at 0:30

0 answers

1 votes

161 views

2 bookmarks

Is the use of biometric systems in schools and other 'security-amateur' environments responsible?

biometrics

Sep 4 '14 at 22:02

1 answers

0 votes

475 views

2 bookmarks

Why does integrity exclude confidentiality?

integrity confidentiality

Nov 4 '14 at 11:21

Stack Exchange Network

current community

your communities

more stack exchange communities

27 Bookmarks