User YetAnotherRandomUser

530

votes

11

answers

84k

views

Is my developer's home-brew password security right or wrong, and why?

Jul 9 at 9:53 MC Emperor 103

294

votes

20

answers

49k

views

How can someone go off-web, and anonymise themselves after a life online?

anonymity

Jan 1 at 12:42 forest 51.4k

271

votes

11

answers

429k

views

“Diffie-Hellman Key Exchange” in plain English

cryptography key-exchange diffie-hellman asymmetric

Jun 8 at 5:11 Tobi Nary 14k

247

votes

5

answers

21k

views

Is the save button delay in a Firefox download dialog a security feature? What does it protect?

web-browser drive-by-download

Mar 23 '16 at 15:15 Community♦ 1

222

votes

13

answers

26k

views

Is there any reason to not show users incorrectly entered passwords after a successful login?

authentication passwords

Sep 19 '16 at 2:38 Community♦ 1

204

votes

10

answers

26k

views

What should you do if you catch encryption ransomware mid-operation?

encryption malware virus ransomware data-recovery

Dec 6 '17 at 8:22 Community♦ 1

200

votes

22

answers

27k

views

How can I explain to non-techie friends that “cryptography is good”?

cryptography data-leakage

Nov 10 '17 at 23:31 Community♦ 1

194

votes

4

answers

50k

views

How does Windows 10 allow Microsoft to spy on you?

windows spyware windows-10

Sep 9 '15 at 12:10 Community♦ 1

187

votes

11

answers

33k

views

Search for military installed backdoors on laptop

malware windows privacy backdoor

Jul 29 '19 at 7:30 DanRan 101

169

votes

10

answers

41k

views

Should I be concerned if the “FBI” has logged onto my Ubuntu VPS?

linux ssh spoofing system-compromise

Nov 2 '18 at 20:41 lol what is this 1,531

167

votes

5

answers

25k

views

How do I deal with a compromised server?

system-compromise

Aug 21 '19 at 13:02 Kardi Teknomo 101

162

votes

10

answers

21k

views

How do you explain the necessity of “nuke it from orbit” to management and users?

malware antivirus risk-management user-education system-compromise

Apr 29 '16 at 22:13 user1717828 2,332

131

votes

5

answers

26k

views

Is momentary physical access dangerous?

physical

Nov 12 at 7:05 user1306322 926

119

votes

7

answers

38k

views

My ISP uses deep packet inspection; what can they observe?

privacy vpn internet isp

Jun 1 at 16:35 usrbs 1

113

votes

10

answers

19k

views

Alternatives to anti-virus for keeping oneself safe

malware virus antivirus

Jul 3 at 6:48 Overmind 8,229

110

votes

6

answers

20k

views

Roles to play when tailgaiting into a residential building

Nov 19 '18 at 16:03 Anders 59k

100

votes

11

answers

156k

views

How dangerous is it to reveal your date of birth, and why?

identity-theft persec

Oct 7 '16 at 22:08 Matthew Peters 3,531

97

votes

10

answers

10k

views

How to create a company culture that cares about information security?

risk-management risk-analysis business-risk

Dec 27 '16 at 11:32 Community♦ 1

91

votes

5

answers

22k

views

How do services with high uptime apply patches without rebooting?

updates patching

Oct 29 '18 at 17:05 Harper - Reinstate Monica 3,073

89

votes

15

answers

15k

views

How to deal with low-probability high-impact risks?

risk-management risk-analysis

Jul 29 '18 at 4:43 Sayan 2,013

85

votes

8

answers

15k

views

What attacks are made possible by public release of my web history?

web-browser url

Dec 17 '18 at 10:27 user11153 894

80

votes

19

answers

16k

views

Good analogy needed: Sec issues due to different coders implementing the same features in different ways for the same app

sql-injection programming user-education

Jun 11 '18 at 14:40 Community♦ 1

78

votes

4

answers

8k

views

Charging someone else's cell phone in my car

phone

Apr 26 '16 at 1:46 Community♦ 1

73

votes

8

answers

18k

views

How can Twitter and GitHub be sure that they haven't been hacked?

passwords system-compromise

May 8 '18 at 11:28 MahNas92 111

64

votes

2

answers

8k

views

Are EU cookie consent forms safe? [closed]

web-browser cookies html

Sep 4 '18 at 22:11 Neslihan Tuzun 1

63

votes

3

answers

5k

views

Why aren't IMSI catchers rendered ineffective by standard MITM defenses?

public-key-infrastructure man-in-the-middle mobile

Mar 16 '16 at 4:49 AndreKR 457

60

votes

4

answers

53k

views

Is there a reason to use TrueCrypt over VeraCrypt?

disk-encryption truecrypt veracrypt

Jan 23 '17 at 18:45 techraf 8,743

59

votes

1

answer

16k

views

How does my browser inherently trust a CA?

certificates certificate-authority

May 9 '17 at 2:31 Arminius 40.2k

51

votes

5

answers

12k

views

Are there any reasonable TrueCrypt forks?

disk-encryption truecrypt luks

Jun 16 '14 at 16:52 Community♦ 1

50

votes

3

answers

10k

views

Can USB drive infect my PC with malware if I don't allow any autorun.inf to run?

windows malware usb-drive

Nov 26 '15 at 14:16 Jorge Luque 605

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

60 Bookmarks

Is my developer's home-brew password security right or wrong, and why?

How can someone go off-web, and anonymise themselves after a life online?

“Diffie-Hellman Key Exchange” in plain English

Is the save button delay in a Firefox download dialog a security feature? What does it protect?

Is there any reason to not show users incorrectly entered passwords after a successful login?

What should you do if you catch encryption ransomware mid-operation?

How can I explain to non-techie friends that “cryptography is good”?

How does Windows 10 allow Microsoft to spy on you?

Search for military installed backdoors on laptop

Should I be concerned if the “FBI” has logged onto my Ubuntu VPS?

How do I deal with a compromised server?

How do you explain the necessity of “nuke it from orbit” to management and users?

Is momentary physical access dangerous?

My ISP uses deep packet inspection; what can they observe?

Alternatives to anti-virus for keeping oneself safe

Roles to play when tailgaiting into a residential building

How dangerous is it to reveal your date of birth, and why?

How to create a company culture that cares about information security?

How do services with high uptime apply patches without rebooting?

How to deal with low-probability high-impact risks?

What attacks are made possible by public release of my web history?

Good analogy needed: Sec issues due to different coders implementing the same features in different ways for the same app

Charging someone else's cell phone in my car

How can Twitter and GitHub be sure that they haven't been hacked?

Are EU cookie consent forms safe? [closed]

Why aren't IMSI catchers rendered ineffective by standard MITM defenses?

Is there a reason to use TrueCrypt over VeraCrypt?

How does my browser inherently trust a CA?

Are there any reasonable TrueCrypt forks?

Can USB drive infect my PC with malware if I don't allow any autorun.inf to run?