User SEJPM

162 votes

2 answers

23k views

What is DROWN and how does it work?

asked Mar 1, 2016 at 13:30

85 votes

6 answers

80k views

How do large companies protect their source code?

asked Dec 27, 2015 at 20:03

54 votes

3 answers

30k views

Is Signal still more secure than WhatsApp?

asked Oct 11, 2016 at 22:10

51 votes

5 answers

6k views

Is it possible to detect security breaches as a user before they're announced?

asked Mar 3, 2016 at 14:02

29 votes

3 answers

3k views

How should disabling 2FA be handled by a service?

asked Mar 26, 2017 at 10:46

19 votes

2 answers

14k views

How does WhatsApp's new group chat protocol work and what security properties does it have?

asked Apr 6, 2016 at 11:26

16 votes

1 answer

2k views

How was the Apple Hacker caught? How can meta data be used to identify users through chained VPNs?

asked Apr 27, 2016 at 21:13

15 votes

2 answers

2k views

How do large companies protect their private (code-signing) keys?

asked Mar 7, 2016 at 12:15

12 votes

1 answer

2k views

What are the differences between "simple" UAC and two user accounts on Windows?

asked Oct 2, 2015 at 16:44

11 votes

3 answers

8k views

Is denying write access an effective way to stop ransomware?

asked Mar 3, 2016 at 10:59

11 votes

1 answer

321 views

Does today's Shadowbrokers leak affect the average Windows user?

asked Apr 14, 2017 at 21:33

7 votes

3 answers

5k views

Malware: extract private keys from smartcard?

asked Jun 30, 2015 at 18:58

5 votes

1 answer

389 views

How was iMessage broken?

asked Mar 21, 2016 at 22:02

5 votes

1 answer

625 views

Why are short-lived certificates so rare?

asked Apr 19, 2016 at 20:03

5 votes

1 answer

1k views

How does "password / keyboard-input protection" work?

asked Jul 16, 2016 at 13:29

4 votes

3 answers

401 views

Why don't CAs use governemental electronic identification mechanisms?

asked Mar 10, 2017 at 14:24

4 votes

4 answers

654 views

Can malware bridge external storage HW power-off switches?

asked May 5, 2016 at 18:59

4 votes

1 answer

216 views

Is it better to have a secure channel or secure PIN entry for Smartcards?

asked Jun 24, 2016 at 22:32

3 votes

2 answers

445 views

Is running a DNSSEC enabled DNS service as hard as running a CA?

asked Aug 7, 2015 at 12:32

3 votes

1 answer

373 views

What protects HDCP keys in software?

asked May 27, 2016 at 14:17

3 votes

2 answers

1k views

What's the difference between the same model with and without FIPS 140 certification?

asked Apr 22, 2016 at 13:36

3 votes

4 answers

964 views

How do hardware OTPs work?

asked May 4, 2016 at 11:29

3 votes

2 answers

273 views

Are there any security advantages to the "TrueCrypt-Paradigm"?

asked Apr 2, 2016 at 20:59

3 votes

1 answer

181 views

Secure online server -> Airgap transport?

asked Jul 1, 2015 at 21:43

1 vote

1 answer

94 views

TLS Certificates only for Clients

asked May 2, 2015 at 18:33

1 vote

1 answer

335 views

Attacks on encrypted computer?

asked Jun 19, 2015 at 20:13

1 vote

1 answer

3k views

Windows Certificate Store - Generating / importing personal certificates using a smartcard?

asked Jun 23, 2015 at 17:23

1 vote

1 answer

102 views

Privilege seperation when using the same login credentials?

asked Feb 28, 2016 at 18:56

1 vote

2 answers

293 views

How do hardware OTPs work - from a developer's perspective?

asked May 4, 2016 at 20:30

1 vote

1 answer

63 views

Are there any mechanisms to verify the correctness of a burned disc?

asked Apr 23, 2016 at 12:52

Stack Exchange Network

37 Questions

What is DROWN and how does it work?

How do large companies protect their source code?

Is Signal still more secure than WhatsApp?

Is it possible to detect security breaches as a user before they're announced?

How should disabling 2FA be handled by a service?

How does WhatsApp's new group chat protocol work and what security properties does it have?

How was the Apple Hacker caught? How can meta data be used to identify users through chained VPNs?

How do large companies protect their private (code-signing) keys?

What are the differences between "simple" UAC and two user accounts on Windows?

Is denying write access an effective way to stop ransomware?

Does today's Shadowbrokers leak affect the average Windows user?

Malware: extract private keys from smartcard?

How was iMessage broken?

Why are short-lived certificates so rare?

How does "password / keyboard-input protection" work?

Why don't CAs use governemental electronic identification mechanisms?

Can malware bridge external storage HW power-off switches?

Is it better to have a secure channel or secure PIN entry for Smartcards?

Is running a DNSSEC enabled DNS service as hard as running a CA?

What protects HDCP keys in software?

What's the difference between the same model with and without FIPS 140 certification?

How do hardware OTPs work?

Are there any security advantages to the "TrueCrypt-Paradigm"?

Secure online server -> Airgap transport?

TLS Certificates only for Clients

Attacks on encrypted computer?

Windows Certificate Store - Generating / importing personal certificates using a smartcard?

Privilege seperation when using the same login credentials?

How do hardware OTPs work - from a developer's perspective?

Are there any mechanisms to verify the correctness of a burned disc?