User YetAnotherRandomUser

533

votes

11

answers

86k

views

Is my developer's home-brew password security right or wrong, and why?

Jul 9 at 9:53 MC Emperor 103

295

votes

20

answers

49k

views

How can someone go off-web, and anonymise themselves after a life online?

anonymity

Jan 1 '20 at 12:42 forest 53.2k

274

votes

11

answers

438k

views

“Diffie-Hellman Key Exchange” in plain English

cryptography key-exchange diffie-hellman asymmetric

Jun 8 at 5:11 Tobi Nary 14.1k

247

votes

5

answers

21k

views

Is the save button delay in a Firefox download dialog a security feature? What does it protect?

web-browser drive-by-download

Mar 23 '16 at 15:15 Community♦ 1

222

votes

13

answers

26k

views

Is there any reason to not show users incorrectly entered passwords after a successful login?

authentication passwords

Sep 19 '16 at 2:38 Community♦ 1

205

votes

10

answers

28k

views

What should you do if you catch encryption ransomware mid-operation?

encryption malware virus ransomware data-recovery

Dec 6 '17 at 8:22 Community♦ 1

202

votes

22

answers

27k

views

How can I explain to non-techie friends that “cryptography is good”?

cryptography data-leakage

Nov 10 '17 at 23:31 Community♦ 1

194

votes

4

answers

51k

views

How does Windows 10 allow Microsoft to spy on you?

windows spyware windows-10

Sep 9 '15 at 12:10 Community♦ 1

187

votes

11

answers

33k

views

Search for military installed backdoors on laptop

malware windows privacy backdoor

Jul 29 '19 at 7:30 DanRan 101

180

votes

6

answers

27k

views

How do I deal with a compromised server?

system-compromise

Dec 10 at 20:52 Artem S. Tashkinov 920

169

votes

10

answers

41k

views

Should I be concerned if the “FBI” has logged onto my Ubuntu VPS?

linux ssh spoofing system-compromise

Nov 2 '18 at 20:41 lol what is this 1,531

163

votes

10

answers

22k

views

How do you explain the necessity of “nuke it from orbit” to management and users?

malware antivirus risk-management user-education system-compromise

Apr 29 '16 at 22:13 user1717828 2,362

131

votes

5

answers

26k

views

Is momentary physical access dangerous?

physical

Nov 12 '19 at 7:05 user1306322 926

120

votes

7

answers

40k

views

My ISP uses deep packet inspection; what can they observe?

privacy vpn internet isp

Jun 1 at 16:35 usrbs 1

114

votes

10

answers

19k

views

Alternatives to anti-virus for keeping oneself safe

malware virus antivirus

Jul 3 at 6:48 Overmind 8,364

111

votes

6

answers

20k

views

Roles to play when tailgaiting into a residential building

Nov 19 '18 at 16:03 Anders 61.5k

101

votes

11

answers

170k

views

How dangerous is it to reveal your date of birth, and why?

identity-theft persec

Dec 6 at 7:53 OldCurmudgeon 155

98

votes

10

answers

10k

views

How to create a company culture that cares about information security?

risk-management risk-analysis business-risk

Dec 27 '16 at 11:32 Community♦ 1

91

votes

5

answers

22k

views

How do services with high uptime apply patches without rebooting?

updates patching

Oct 29 '18 at 17:05 Harper - Reinstate Monica 3,073

90

votes

15

answers

15k

views

How to deal with low-probability high-impact risks?

risk-management risk-analysis

Jul 29 '18 at 4:43 Sayan 2,023

85

votes

8

answers

15k

views

What attacks are made possible by public release of my web history?

web-browser url

Dec 17 '18 at 10:27 user11153 894

80

votes

19

answers

16k

views

Good analogy needed: Sec issues due to different coders implementing the same features in different ways for the same app

sql-injection programming user-education

Jun 11 '18 at 14:40 Community♦ 1

78

votes

4

answers

8k

views

Charging someone else's cell phone in my car

phone

Apr 26 '16 at 1:46 Community♦ 1

73

votes

8

answers

18k

views

How can Twitter and GitHub be sure that they haven't been hacked?

passwords system-compromise

May 8 '18 at 11:28 MahNas92 111

64

votes

3

answers

5k

views

Why aren't IMSI catchers rendered ineffective by standard MITM defenses?

public-key-infrastructure man-in-the-middle mobile

Mar 16 '16 at 4:49 AndreKR 457

64

votes

2

answers

8k

views

Are EU cookie consent forms safe? [closed]

web-browser cookies html

Sep 4 '18 at 22:11 Neslihan Tuzun 1

61

votes

4

answers

55k

views

Is there a reason to use TrueCrypt over VeraCrypt?

disk-encryption truecrypt veracrypt

Jan 23 '17 at 18:45 techraf 8,873

59

votes

1

answer

17k

views

How does my browser inherently trust a CA?

certificates certificate-authority

May 9 '17 at 2:31 Arminius 41k

51

votes

3

answers

10k

views

Can USB drive infect my PC with malware if I don't allow any autorun.inf to run?

windows malware usb-drive

Nov 26 '15 at 14:16 Jorge Luque 614

51

votes

5

answers

13k

views

Are there any reasonable TrueCrypt forks?

disk-encryption truecrypt luks

Jun 16 '14 at 16:52 Community♦ 1

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

60 Bookmarks

Is my developer's home-brew password security right or wrong, and why?

How can someone go off-web, and anonymise themselves after a life online?

“Diffie-Hellman Key Exchange” in plain English

Is the save button delay in a Firefox download dialog a security feature? What does it protect?

Is there any reason to not show users incorrectly entered passwords after a successful login?

What should you do if you catch encryption ransomware mid-operation?

How can I explain to non-techie friends that “cryptography is good”?

How does Windows 10 allow Microsoft to spy on you?

Search for military installed backdoors on laptop

How do I deal with a compromised server?

Should I be concerned if the “FBI” has logged onto my Ubuntu VPS?

How do you explain the necessity of “nuke it from orbit” to management and users?

Is momentary physical access dangerous?

My ISP uses deep packet inspection; what can they observe?

Alternatives to anti-virus for keeping oneself safe

Roles to play when tailgaiting into a residential building

How dangerous is it to reveal your date of birth, and why?

How to create a company culture that cares about information security?

How do services with high uptime apply patches without rebooting?

How to deal with low-probability high-impact risks?

What attacks are made possible by public release of my web history?

Good analogy needed: Sec issues due to different coders implementing the same features in different ways for the same app

Charging someone else's cell phone in my car

How can Twitter and GitHub be sure that they haven't been hacked?

Why aren't IMSI catchers rendered ineffective by standard MITM defenses?

Are EU cookie consent forms safe? [closed]

Is there a reason to use TrueCrypt over VeraCrypt?

How does my browser inherently trust a CA?

Can USB drive infect my PC with malware if I don't allow any autorun.inf to run?

Are there any reasonable TrueCrypt forks?