User 700 Software

3 votes

2 answers

1k views

Risks of serving untrusted content under HTTP Content-Type: text/plain?

asked Jun 21, 2012 at 18:43

10 votes

5 answers

12k views

If I use a good Master Password in Firefox, is security improved when I Remember Passwords instead of re-type? [duplicate]

asked Jan 6, 2014 at 19:28

2 votes

4 answers

2k views

Is there such thing as a password enforced write protected flash drive?

asked May 21, 2012 at 17:13

10 votes

1 answer

743 views

What is it called when you give hackers a way in?

asked Dec 29, 2011 at 19:05

6 votes

3 answers

549 views

Did the October 21, 2016 DDoS attack on Dyn's DNS service cause Bandwidth Exhausion?

asked Oct 24, 2016 at 16:51

4 votes

1 answer

2k views

In TCP, what happens when two Data packets come in with the same sequential identifier, but different data (spoofed)

asked Oct 12, 2016 at 14:30

1 vote

2 answers

195 views

Does theft of the webserver's private key allow retro-active decryption of previously logged transmission?

asked Oct 10, 2016 at 16:16

7 votes

1 answer

3k views

How can we serve sensitive encrypted data without storing the key? Should I use user-defined passwords for keys?

asked Jul 11, 2016 at 18:33

6 votes

1 answer

787 views

How does an ISP combat Bandwidth Exhaustion / Volume DDoS?

asked Aug 3, 2016 at 14:28

7 votes

3 answers

2k views

What are the limitations of Content Security Policy?

asked Jul 27, 2016 at 12:27

0 votes

2 answers

153 views

Transparent Proxy with tight whitelist, permitting GET requests still prevents data egress?

asked Jul 8, 2016 at 22:16

5 votes

2 answers

3k views

Can UNIX Domain Sockets be locked by user ID?

asked Feb 21, 2012 at 13:43

13 votes

4 answers

3k views

Is the Raspberry Pi vulnerable to injection beyond the SD Card?

asked Aug 8, 2012 at 18:05

6 votes

5 answers

722 views

How secure is SSL?

asked Jul 11, 2011 at 16:03

19 votes

1 answer

2k views

General purpose slow/unique hash routine for dup checking of private data, without storing the data itself?

asked Jan 13, 2012 at 19:59

3 votes

3 answers

5k views

Is OpenSSL secure enough?

asked Jun 4, 2012 at 15:27

1 vote

1 answer

828 views

What is the strength of the key derivation function on Android device encryption?

asked Jan 13, 2014 at 20:03

5 votes

1 answer

8k views

Sharing login session from one website to another?

asked Jan 6, 2014 at 14:45

8 votes

1 answer

772 views

Encrypting short identifiers?

asked Apr 4, 2013 at 21:16

4 votes

2 answers

3k views

How does Java 7 update 11 fix the security vulnerability?

asked Jan 15, 2013 at 20:39

6 votes

2 answers

9k views

How should an outgoing connection white-list be created?

asked Dec 20, 2012 at 16:27

2 votes

2 answers

9k views

Is this JSON encoding vulnerable to CDATA injection?

asked Jan 26, 2012 at 20:06

0 votes

1 answer

419 views

Please define "Carpet Bombing"

asked Oct 15, 2012 at 19:36

5 votes

5 answers

939 views

What about combining pkdf2 with scrypt? [duplicate]

asked Oct 3, 2012 at 18:46

2 votes

1 answer

301 views

How dependable can data encryption be without re-entry of password on startup?

asked Jul 24, 2012 at 16:46

4 votes

2 answers

1k views

How does DNS Changer malware detection work?

asked Jun 7, 2012 at 17:40

10 votes

2 answers

17k views

What are the variables of AES?

asked Jun 6, 2012 at 18:52

8 votes

1 answer

1k views

Is there repetition in the Solaris 11 hash routine? Can I add some?

asked May 17, 2012 at 18:40

5 votes

1 answer

2k views

Can the TrueCrypt hash be slowed down?

asked Apr 26, 2012 at 23:55

15 votes

2 answers

7k views

Is IP spoofing relevant to TCP? Is it relevant for TLS or SSH?

asked Mar 14, 2012 at 20:40

Stack Exchange Network

46 Questions

Risks of serving untrusted content under HTTP Content-Type: text/plain?

If I use a good Master Password in Firefox, is security improved when I Remember Passwords instead of re-type? [duplicate]

Is there such thing as a password enforced write protected flash drive?

What is it called when you give hackers a way in?

Did the October 21, 2016 DDoS attack on Dyn's DNS service cause Bandwidth Exhausion?

In TCP, what happens when two Data packets come in with the same sequential identifier, but different data (spoofed)

Does theft of the webserver's private key allow retro-active decryption of previously logged transmission?

How can we serve sensitive encrypted data without storing the key? Should I use user-defined passwords for keys?

How does an ISP combat Bandwidth Exhaustion / Volume DDoS?

What are the limitations of Content Security Policy?

Transparent Proxy with tight whitelist, permitting GET requests still prevents data egress?

Can UNIX Domain Sockets be locked by user ID?

Is the Raspberry Pi vulnerable to injection beyond the SD Card?

How secure is SSL?

General purpose slow/unique hash routine for dup checking of private data, without storing the data itself?

Is OpenSSL secure enough?

What is the strength of the key derivation function on Android device encryption?

Sharing login session from one website to another?

Encrypting short identifiers?

How does Java 7 update 11 fix the security vulnerability?

How should an outgoing connection white-list be created?

Is this JSON encoding vulnerable to CDATA injection?

Please define "Carpet Bombing"

What about combining pkdf2 with scrypt? [duplicate]

How dependable can data encryption be without re-entry of password on startup?

How does DNS Changer malware detection work?

What are the variables of AES?

Is there repetition in the Solaris 11 hash routine? Can I add some?

Can the TrueCrypt hash be slowed down?

Is IP spoofing relevant to TCP? Is it relevant for TLS or SSH?