User 700 Software

6 votes

3 answers

528 views

Did the October 21, 2016 DDoS attack on Dyn's DNS service cause Bandwidth Exhausion?

asked Oct 24, 2016 at 16:51

3 votes

1 answer

2k views

In TCP, what happens when two Data packets come in with the same sequential identifier, but different data (spoofed)

asked Oct 12, 2016 at 14:30

1 vote

2 answers

181 views

Does theft of the webserver's private key allow retro-active decryption of previously logged transmission?

asked Oct 10, 2016 at 16:16

6 votes

1 answer

748 views

How does an ISP combat Bandwidth Exhaustion / Volume DDoS?

asked Aug 3, 2016 at 14:28

6 votes

3 answers

2k views

What are the limitations of Content Security Policy?

asked Jul 27, 2016 at 12:27

7 votes

1 answer

3k views

How can we serve sensitive encrypted data without storing the key? Should I use user-defined passwords for keys?

asked Jul 11, 2016 at 18:33

0 votes

2 answers

139 views

Transparent Proxy with tight whitelist, permitting GET requests still prevents data egress?

asked Jul 8, 2016 at 22:16

1 vote

1 answer

806 views

What is the strength of the key derivation function on Android device encryption?

asked Jan 13, 2014 at 20:03

10 votes

5 answers

12k views

If I use a good Master Password in Firefox, is security improved when I Remember Passwords instead of re-type? [duplicate]

asked Jan 6, 2014 at 19:28

5 votes

1 answer

8k views

Sharing login session from one website to another?

asked Jan 6, 2014 at 14:45

8 votes

1 answer

733 views

Encrypting short identifiers?

asked Apr 4, 2013 at 21:16

4 votes

2 answers

3k views

How does Java 7 update 11 fix the security vulnerability?

asked Jan 15, 2013 at 20:39

6 votes

2 answers

9k views

How should an outgoing connection white-list be created?

asked Dec 20, 2012 at 16:27

0 votes

1 answer

407 views

Please define "Carpet Bombing"

asked Oct 15, 2012 at 19:36

5 votes

5 answers

928 views

What about combining pkdf2 with scrypt? [duplicate]

asked Oct 3, 2012 at 18:46

13 votes

4 answers

2k views

Is the Raspberry Pi vulnerable to injection beyond the SD Card?

asked Aug 8, 2012 at 18:05

2 votes

1 answer

290 views

How dependable can data encryption be without re-entry of password on startup?

asked Jul 24, 2012 at 16:46

3 votes

2 answers

1k views

Risks of serving untrusted content under HTTP Content-Type: text/plain?

asked Jun 21, 2012 at 18:43

4 votes

2 answers

1k views

How does DNS Changer malware detection work?

asked Jun 7, 2012 at 17:40

10 votes

2 answers

16k views

What are the variables of AES?

asked Jun 6, 2012 at 18:52

3 votes

3 answers

5k views

Is OpenSSL secure enough?

asked Jun 4, 2012 at 15:27

2 votes

4 answers

2k views

Is there such thing as a password enforced write protected flash drive?

asked May 21, 2012 at 17:13

8 votes

1 answer

1k views

Is there repetition in the Solaris 11 hash routine? Can I add some?

asked May 17, 2012 at 18:40

5 votes

1 answer

2k views

Can the TrueCrypt hash be slowed down?

asked Apr 26, 2012 at 23:55

15 votes

2 answers

7k views

Is IP spoofing relevant to TCP? Is it relevant for TLS or SSH?

asked Mar 14, 2012 at 20:40

3 votes

4 answers

7k views

Reboot to clean state daily, on Windows

asked Mar 1, 2012 at 15:04

2 votes

3 answers

2k views

What is the recomended algorithm to create a key from a password?

asked Feb 27, 2012 at 16:58

5 votes

2 answers

3k views

Can UNIX Domain Sockets be locked by user ID?

asked Feb 21, 2012 at 13:43

2 votes

2 answers

9k views

Is this JSON encoding vulnerable to CDATA injection?

asked Jan 26, 2012 at 20:06

19 votes

1 answer

2k views

General purpose slow/unique hash routine for dup checking of private data, without storing the data itself?

asked Jan 13, 2012 at 19:59

Stack Exchange Network

46 Questions

Did the October 21, 2016 DDoS attack on Dyn's DNS service cause Bandwidth Exhausion?

In TCP, what happens when two Data packets come in with the same sequential identifier, but different data (spoofed)

Does theft of the webserver's private key allow retro-active decryption of previously logged transmission?

How does an ISP combat Bandwidth Exhaustion / Volume DDoS?

What are the limitations of Content Security Policy?

How can we serve sensitive encrypted data without storing the key? Should I use user-defined passwords for keys?

Transparent Proxy with tight whitelist, permitting GET requests still prevents data egress?

What is the strength of the key derivation function on Android device encryption?

If I use a good Master Password in Firefox, is security improved when I Remember Passwords instead of re-type? [duplicate]

Sharing login session from one website to another?

Encrypting short identifiers?

How does Java 7 update 11 fix the security vulnerability?

How should an outgoing connection white-list be created?

Please define "Carpet Bombing"

What about combining pkdf2 with scrypt? [duplicate]

Is the Raspberry Pi vulnerable to injection beyond the SD Card?

How dependable can data encryption be without re-entry of password on startup?

Risks of serving untrusted content under HTTP Content-Type: text/plain?

How does DNS Changer malware detection work?

What are the variables of AES?

Is OpenSSL secure enough?

Is there such thing as a password enforced write protected flash drive?

Is there repetition in the Solaris 11 hash routine? Can I add some?

Can the TrueCrypt hash be slowed down?

Is IP spoofing relevant to TCP? Is it relevant for TLS or SSH?

Reboot to clean state daily, on Windows

What is the recomended algorithm to create a key from a password?

Can UNIX Domain Sockets be locked by user ID?

Is this JSON encoding vulnerable to CDATA injection?

General purpose slow/unique hash routine for dup checking of private data, without storing the data itself?