Profile Activity

WoJ

Meta user

Network profile

Reputation

8,451

8.5k
5.6k
2.8k

2016
2017
2018
2019

Top tag

passwords

Next privilege

10,000 Rep.

Access moderator tools

Badges

Newest

Nice Answer

Next badge

0/1

Impact

15 posts edited

10 helpful flags

248 votes cast

Summary Answers Questions Tags Badges Favorites Bounties Reputation All actions

37 Questions

Views Newest Activity Votes

votes

answer

views

What is this kind of low-intensity, non-hacking attack on a web service?

network attacks

Jun 9 '16 at 10:09 Community♦ 1

votes

answers

views

Why would a password be hashed before being used to encrypt something?

encryption passwords hash

Feb 18 '18 at 16:22 Heiko Hatzfeld 99

votes

answers

10k

views

Is a standalone phone number considered Personally Identifiable Information?

privacy pii

Jul 4 '18 at 14:01 Niels van Reijmersdal 233

votes

answers

views

What are the real physical risks of casual social media publishing?

Jun 15 '18 at 17:16 Steve Sether 20.3k

votes

answers

586

views

How does Google store passwords for remote IMAP/POP services?

authentication google imap

Jun 8 '16 at 5:37 tylerl 76.8k

votes

answers

729

views

Is there an equivalent of an Apple cryptochip in Android devices?

encryption android brute-force password-cracking

May 28 '16 at 9:58 Community♦ 1

votes

answers

43k

views

Is it possible to crack a PIN / PUK code on a phone SIM card?

brute-force phone

Sep 22 at 20:04 guest 1

votes

answer

659

views

POC of a Java exploit using leftover JREs

java metasploit

Dec 21 '16 at 19:40 alecxe 1,147

votes

answer

334

views

What are the actions of Locky on the source files which lead to encrypting?

malware ransomware

Apr 4 '16 at 15:29 Community♦ 1

votes

answers

views

passphrases - lowercase and dictionary words

passwords passphrase

Nov 19 '15 at 5:01 Community♦ 1

votes

answer

views

Bruteforcing an iOS PIN

brute-force ios password-cracking

Oct 14 '15 at 12:59 Jay Dansand 121

votes

answer

597

views

Is a non-authenticated CSRF still a CSRF?

vulnerability csrf owasp owasp-top-ten

Apr 22 '17 at 11:50 iwaseatenbyagrue 3,530

votes

answers

148

views

Is there a standard recommending physical destruction of a machine?

physical data-recovery

Mar 16 '17 at 18:31 Ryan Kelso 1,210

votes

answers

302

views

How to crack passwords without revealing them?

passwords password-cracking software

Sep 23 '16 at 17:27 WoJ 8,451

votes

answers

685

views

Why are there questions about “media” in a PCI-DSS SAQ A?

pci-dss

Oct 21 '15 at 20:14 mostlyinformed 2,545

votes

answers

971

views

Where to check if a specific OS / service is vulnerable despite being patched, because of a vendor's decision?

known-vulnerabilities hardening threat-mitigation patching

Jul 22 '15 at 13:07 gowenfawr 59.9k

votes

answer

views

Should a PCI-DSS certification be renewed?

pci-dss

Sep 28 '17 at 16:25 R15 2,843

votes

answers

186

views

Where are IDS useful today?

network ids

Mar 13 '17 at 18:05 Out of Band 8,732

votes

answers

views

What is the current consensus on storage of primary credentials or long-lived cryptographic tokens?

authentication storage credentials

May 23 '16 at 14:06 WoJ 8,451

votes

answer

308

views

Is a “standalone WPS server” possible?

network wifi wireless wpa2 wps

Feb 12 '16 at 11:37 davidb 4,090

votes

answer

448

views

What is “cardholder data” in PCI-DSS SAQ A context?

pci-dss

Dec 11 '15 at 22:34 Community♦ 1

vote

answer

views

How does a merger formally impact an ISO 27001 certification?

compliance iso27001

Sep 29 at 10:01 Community♦ 1

vote

answer

143

views

Formal functional relationship between risk and CVSS

risk-analysis cvss

Aug 12 at 7:02 Community♦ 1

vote

answer

391

views

What are the risks associated with a vulnerable javascript in a client context?

javascript vulnerability client-side secure-coding

May 31 '17 at 7:47 Sjoerd 24.4k

vote

answers

952

views

How are private and public keys different?

encryption asymmetric

May 27 '17 at 10:51 cornelinux 1,630

vote

answers

views

Who signs off a PCI-DSS SAQ?

pci-dss

Jan 31 '17 at 11:08 Chris 1

vote

answers

views

Is there an example where pseudo-authentication via oAuth fails? [duplicate]

authentication oauth

Sep 13 '16 at 18:03 WoJ 8,451

vote

answer

views

Does a Mailbox Export Request modify the mailbox data?

windows forensics exchange

Aug 18 '16 at 22:45 Community♦ 1

vote

answers

views

Is there a “smart cache” device which provides cache if authorized?

network http authorization caching

Oct 27 '15 at 19:17 WoJ 8,451

vote

answers

279

views

Are there standards for software disk image acquisition in forensics?

forensics

Apr 11 '15 at 11:49 WoJ 8,451

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

37 Questions

What is this kind of low-intensity, non-hacking attack on a web service?

Why would a password be hashed before being used to encrypt something?

Is a standalone phone number considered Personally Identifiable Information?

What are the real physical risks of casual social media publishing?

How does Google store passwords for remote IMAP/POP services?

Is there an equivalent of an Apple cryptochip in Android devices?

Is it possible to crack a PIN / PUK code on a phone SIM card?

POC of a Java exploit using leftover JREs

What are the actions of Locky on the source files which lead to encrypting?

passphrases - lowercase and dictionary words

Bruteforcing an iOS PIN

Is a non-authenticated CSRF still a CSRF?

Is there a standard recommending physical destruction of a machine?

How to crack passwords without revealing them?

Why are there questions about “media” in a PCI-DSS SAQ A?

Where to check if a specific OS / service is vulnerable despite being patched, because of a vendor's decision?

Should a PCI-DSS certification be renewed?

Where are IDS useful today?

What is the current consensus on storage of primary credentials or long-lived cryptographic tokens?

Is a “standalone WPS server” possible?

What is “cardholder data” in PCI-DSS SAQ A context?

How does a merger formally impact an ISO 27001 certification?

Formal functional relationship between risk and CVSS

What are the risks associated with a vulnerable javascript in a client context?

How are private and public keys different?

Who signs off a PCI-DSS SAQ?

Is there an example where pseudo-authentication via oAuth fails? [duplicate]

Does a Mailbox Export Request modify the mailbox data?

Is there a “smart cache” device which provides cache if authorized?

Are there standards for software disk image acquisition in forensics?