User 700 Software

107

votes

5

answers

25k

views

What kinds of encryption are _not_ breakable via Quantum Computers?

Jul 8 '19 at 3:58 forest 54.2k

62

votes

5

answers

101k

views

What can an attacker do with Bluetooth and how should it be mitigated?

windows linux macos threat-mitigation bluetooth

Jul 1 '16 at 13:49 Community♦ 1

60

votes

2

answers

17k

views

How can ISPs handle DDoS attacks?

attacks ddos denial-of-service isp cdn

Sep 13 '18 at 5:00 R1W 1,465

32

votes

5

answers

4k

views

Is it possible to increase the cost of BCrypt or PBKDF2 when its already calculated and without the original password?

passwords hash password-management bcrypt pbkdf2

Apr 8 '13 at 1:14 Community♦ 1

28

votes

3

answers

9k

views

Is it practical to pre-blacklist certain GeoIP regions?

firewalls webserver apache ip geolocation

Nov 28 '18 at 1:52 Rogue 289

28

votes

5

answers

23k

views

Recover the prior contents of RAM from a turned-off PC?

hardware data-leakage memory

Jan 6 '17 at 16:14 Yaroslav Nikitenko 105

26

votes

1

answer

7k

views

What's the security issue with base64 encoding/decoding?

php vulnerability

Jan 27 '17 at 21:22 Community♦ 1

24

votes

3

answers

19k

views

Is there a way to mitigate BEAST without disabling AES completely?

tls attack-prevention apache beast

Nov 25 '12 at 23:36 Thomas Pornin 310k

22

votes

6

answers

72k

views

Better techniques than url parameter encryption

encryption web-application access-control

Jun 24 '19 at 12:20 Community♦ 1

20

votes

6

answers

3k

views

Correct terminology when describing password security to layman

passwords password-cracking terminology

Jun 7 '16 at 2:19 Luis Casillas 9,491

20

votes

7

answers

1k

views

How to deal with a person who gets easily fooled by internet and mail scams?

windows malware virus antivirus

Jul 17 '14 at 15:33 Ángel 16.6k

18

votes

2

answers

21k

views

How secure is hardware Full disk encryption (FDE) for SSD's

encryption ssd

Jan 3 '18 at 12:15 UTF-8 2,170

18

votes

2

answers

5k

views

If you have to write an information security guide for non technical users, what would you cover?

user-education

Feb 19 '12 at 19:45 D.W. 95.6k

17

votes

5

answers

7k

views

Is Google Analytics HIPAA compliant? How can I find out?

hipaa compliance

Apr 4 '18 at 16:31 wlo 11

16

votes

7

answers

2k

views

Online Government Elections System - Is it possible?

cryptography webserver government electronic-voting

Jan 18 at 11:57 kelalaka 4,347

15

votes

4

answers

4k

views

How to deal with this denial of service attack on an Apache server?

ddos denial-of-service flooding

Jan 30 '17 at 12:05 Community♦ 1

14

votes

1

answer

914

views

Are there any known exploits that come from easter eggs?

malware exploit

Dec 3 '16 at 7:00 John Deters 31.6k

13

votes

4

answers

43k

views

Can most mail from *.ru be considered spam?

email spam

Nov 4 at 15:44 schroeder♦ 112k

13

votes

2

answers

24k

views

How was my Yahoo email account used to send spams

spam

Jan 14 '18 at 1:49 kobay 1

13

votes

6

answers

5k

views

Is accessing bank account on the internet really secure?

tls

May 17 '19 at 21:32 Muhammed Hussen 1

12

votes

2

answers

3k

views

How are mobile telephony networks like LTE and HSPA encrypted?

encryption network mobile protocols

Mar 23 '13 at 9:30 zenware 53

12

votes

5

answers

859

views

How should I tell an organisation that they are vulnerable when I wasn't given permission to check?

authentication passwords wifi legal authorization

Nov 23 '17 at 7:20 baldPrussian 2,698

11

votes

2

answers

2k

views

Why does OWASP suggest using POST over PUT for file uploads?

file-upload owasp

Jan 18 '17 at 21:51 Community♦ 1

10

votes

4

answers

7k

views

How to harden an iPhone/Android app so it's tough to reverse-engineer it?

appsec mobile attack-prevention reverse-engineering

Jun 18 '16 at 15:43 Community♦ 1

10

votes

4

answers

511

views

If I try to log into the wrong host with FTP do they now have my credentials?

ftp

Mar 4 '12 at 6:05 Aki 760

10

votes

3

answers

4k

views

How can I report PCI-DSS violations?

passwords known-vulnerabilities pci-dss

Apr 15 '13 at 19:04 Community♦ 1

9

votes

1

answer

15k

views

Where and how do operating systems save passwords for user accounts?

operating-systems

Sep 23 '11 at 21:04 Community♦ 1

9

votes

7

answers

7k

views

GPU powered Password cracking machine - buy metal or cloud?

cloud-computing

May 6 '15 at 14:37 sampablokuper 1,931

9

votes

2

answers

3k

views

How do I forensically determine whether a mobile phone has been infected with a spy suite?

forensics phone sms

Jan 13 '19 at 17:52 e-sushi 1,296

9

votes

2

answers

5k

views

Is it a security risk to maintain an application developed for a version of .NET prior to 4.0?

.net

Dec 5 '14 at 15:36 Colin Pickard 1,790

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

128 Bookmarks

What kinds of encryption are _not_ breakable via Quantum Computers?

What can an attacker do with Bluetooth and how should it be mitigated?

How can ISPs handle DDoS attacks?

Is it possible to increase the cost of BCrypt or PBKDF2 when its already calculated and without the original password?

Is it practical to pre-blacklist certain GeoIP regions?

Recover the prior contents of RAM from a turned-off PC?

What's the security issue with base64 encoding/decoding?

Is there a way to mitigate BEAST without disabling AES completely?

Better techniques than url parameter encryption

Correct terminology when describing password security to layman

How to deal with a person who gets easily fooled by internet and mail scams?

How secure is hardware Full disk encryption (FDE) for SSD's

If you have to write an information security guide for non technical users, what would you cover?

Is Google Analytics HIPAA compliant? How can I find out?

Online Government Elections System - Is it possible?

How to deal with this denial of service attack on an Apache server?

Are there any known exploits that come from easter eggs?

Can most mail from *.ru be considered spam?

How was my Yahoo email account used to send spams

Is accessing bank account on the internet really secure?

How are mobile telephony networks like LTE and HSPA encrypted?

How should I tell an organisation that they are vulnerable when I wasn't given permission to check?

Why does OWASP suggest using POST over PUT for file uploads?

How to harden an iPhone/Android app so it's tough to reverse-engineer it?

If I try to log into the wrong host with FTP do they now have my credentials?

How can I report PCI-DSS violations?

Where and how do operating systems save passwords for user accounts?

GPU powered Password cracking machine - buy metal or cloud?

How do I forensically determine whether a mobile phone has been infected with a spy suite?

Is it a security risk to maintain an application developed for a version of .NET prior to 4.0?