Profile Activity

WoJ

Meta user

Network profile

Reputation

8,511

8.5k
5.7k
3k

2017
2018
2019
2020

Top tag

passwords

Next privilege

10,000 Rep.

Access moderator tools

Badges

Newest

Inquisitive

Next badge

0/1

Impact

16 posts edited

10 helpful flags

252 votes cast

Summary Answers Questions Tags Badges Favorites Bounties Reputation All actions

37 Questions

Views Newest Activity Votes

votes

answer

views

What is this kind of low-intensity, non-hacking attack on a web service?

network attacks

Jun 9 '16 at 10:09 Community♦ 1

votes

answers

views

Why would a password be hashed before being used to encrypt something?

encryption passwords hash

Feb 18 '18 at 16:22 Heiko Hatzfeld 99

votes

answers

11k

views

Is a standalone phone number considered Personally Identifiable Information?

privacy pii

Jul 4 '18 at 14:01 Niels van Reijmersdal 233

votes

answers

views

What are the real physical risks of casual social media publishing?

Jun 15 '18 at 17:16 Steve Sether 20.6k

votes

answers

601

views

How does Google store passwords for remote IMAP/POP services?

authentication google imap

Jun 8 '16 at 5:37 tylerl 77k

votes

answers

736

views

Is there an equivalent of an Apple cryptochip in Android devices?

encryption android brute-force password-cracking

May 28 '16 at 9:58 Community♦ 1

votes

answers

43k

views

Is it possible to crack a PIN / PUK code on a phone SIM card?

brute-force phone

Sep 22 at 20:04 guest 1

votes

answer

661

views

POC of a Java exploit using leftover JREs

java metasploit

Dec 21 '16 at 19:40 alecxe 1,179

votes

answer

335

views

What are the actions of Locky on the source files which lead to encrypting?

malware ransomware

Apr 4 '16 at 15:29 Community♦ 1

votes

answers

views

passphrases - lowercase and dictionary words

passwords passphrase

Nov 19 '15 at 5:01 Community♦ 1

votes

answer

views

Bruteforcing an iOS PIN

brute-force ios password-cracking

Oct 14 '15 at 12:59 Jay Dansand 121

votes

answer

640

views

Is a non-authenticated CSRF still a CSRF?

vulnerability csrf owasp owasp-top-ten

Apr 22 '17 at 11:50 iwaseatenbyagrue 3,540

votes

answers

149

views

Is there a standard recommending physical destruction of a machine?

physical data-recovery

Mar 16 '17 at 18:31 Ryan Kelso 1,210

votes

answers

305

views

How to crack passwords without revealing them?

passwords password-cracking software

Sep 23 '16 at 17:27 WoJ 8,511

votes

answers

695

views

Why are there questions about “media” in a PCI-DSS SAQ A?

pci-dss

Oct 21 '15 at 20:14 mostlyinformed 2,555

votes

answers

991

views

Where to check if a specific OS / service is vulnerable despite being patched, because of a vendor's decision?

known-vulnerabilities hardening threat-mitigation patching

Jul 22 '15 at 13:07 gowenfawr 61k

votes

answer

views

Should a PCI-DSS certification be renewed?

pci-dss

Sep 28 '17 at 16:25 R15 2,843

votes

answers

187

views

Where are IDS useful today?

network ids

Mar 13 '17 at 18:05 Out of Band 8,762

votes

answers

views

What is the current consensus on storage of primary credentials or long-lived cryptographic tokens?

authentication storage credentials

May 23 '16 at 14:06 WoJ 8,511

votes

answer

310

views

Is a “standalone WPS server” possible?

network wifi wireless wpa2 wps

Feb 12 '16 at 11:37 davidb 4,100

votes

answer

454

views

What is “cardholder data” in PCI-DSS SAQ A context?

pci-dss

Dec 11 '15 at 22:34 Community♦ 1

vote

answers

views

How does the Emotet trojan activates its remote copies?

virus trojan emotet

Oct 3 at 15:27 WoJ 8,511

vote

answer

100

views

How does a merger formally impact an ISO 27001 certification?

compliance iso27001

Sep 29 at 10:01 Community♦ 1

vote

answer

144

views

Formal functional relationship between risk and CVSS

risk-analysis cvss

Aug 12 at 7:02 Community♦ 1

vote

answer

397

views

What are the risks associated with a vulnerable javascript in a client context?

javascript vulnerability client-side secure-coding

May 31 '17 at 7:47 Sjoerd 24.8k

vote

answers

960

views

How are private and public keys different?

encryption asymmetric

May 27 '17 at 10:51 cornelinux 1,630

vote

answers

views

Who signs off a PCI-DSS SAQ?

pci-dss

Jan 31 '17 at 11:08 Chris 1

vote

answers

views

Is there an example where pseudo-authentication via oAuth fails? [duplicate]

authentication oauth

Sep 13 '16 at 18:03 WoJ 8,511

vote

answer

views

Does a Mailbox Export Request modify the mailbox data?

windows forensics exchange

Aug 18 '16 at 22:45 Community♦ 1

vote

answers

views

Is there a “smart cache” device which provides cache if authorized?

network http authorization caching

Oct 27 '15 at 19:17 WoJ 8,511

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

37 Questions

What is this kind of low-intensity, non-hacking attack on a web service?

Why would a password be hashed before being used to encrypt something?

Is a standalone phone number considered Personally Identifiable Information?

What are the real physical risks of casual social media publishing?

How does Google store passwords for remote IMAP/POP services?

Is there an equivalent of an Apple cryptochip in Android devices?

Is it possible to crack a PIN / PUK code on a phone SIM card?

POC of a Java exploit using leftover JREs

What are the actions of Locky on the source files which lead to encrypting?

passphrases - lowercase and dictionary words

Bruteforcing an iOS PIN

Is a non-authenticated CSRF still a CSRF?

Is there a standard recommending physical destruction of a machine?

How to crack passwords without revealing them?

Why are there questions about “media” in a PCI-DSS SAQ A?

Where to check if a specific OS / service is vulnerable despite being patched, because of a vendor's decision?

Should a PCI-DSS certification be renewed?

Where are IDS useful today?

What is the current consensus on storage of primary credentials or long-lived cryptographic tokens?

Is a “standalone WPS server” possible?

What is “cardholder data” in PCI-DSS SAQ A context?

How does the Emotet trojan activates its remote copies?

How does a merger formally impact an ISO 27001 certification?

Formal functional relationship between risk and CVSS

What are the risks associated with a vulnerable javascript in a client context?

How are private and public keys different?

Who signs off a PCI-DSS SAQ?

Is there an example where pseudo-authentication via oAuth fails? [duplicate]

Does a Mailbox Export Request modify the mailbox data?

Is there a “smart cache” device which provides cache if authorized?