User Nic Barker

53 votes

Can simply decompressing a JPEG image trigger an exploit?

answered Aug 27, 2015 at 3:18

22 votes

Accepted

How does DRM stop copying?

answered Aug 28, 2015 at 3:31

5 votes

How to protect from DoS on get method?

answered Aug 27, 2015 at 3:00

5 votes

Is there a way to steal PHP or ASP code from a web server through the HTTP(S) protocols?

answered Aug 20, 2015 at 2:24

5 votes

Accepted

Best practice to guard against an app copying private ssh keys stored under ~/.ssh?

answered Aug 26, 2015 at 2:48

3 votes

Is it possible to safely watch a specific folder with virus scan on Windows Server?

answered Aug 26, 2015 at 2:35

3 votes

What are the potential security problems running untrusted code in a Docker container as a non-root user?

answered Aug 28, 2015 at 4:01

3 votes

Forgot password and revealing whether account exists

answered Aug 30, 2015 at 0:32

3 votes

Accepted

Is encryption application credentials using certificate encryption good practice?

answered Sep 1, 2015 at 7:26

2 votes

How to spoof my IP address to JavaScript and other security concerns

answered Sep 2, 2015 at 6:04

2 votes

Does WhatsApp disclose the sender's IP address?

answered Aug 29, 2015 at 7:15

2 votes

What the most trustworthy way to demonstrate digital File Integrity?

answered Aug 28, 2015 at 4:19

2 votes

How can I defend against a data theft attack without shutting down my server/services?

answered Aug 26, 2015 at 2:59

1 vote

Feasibility of time-based database brute-force attacks on websites

answered Aug 26, 2015 at 4:24

1 vote

Is the (SSL3-based) SSTP VPN protocol vulnerable to the POODLE attack?

answered Aug 23, 2015 at 2:29

1 vote

Can a shim (a.k.a. polyfill) be installed in IE, FF, or Chrome without user knowledge, and can it read passwords entered by user on a login page?

answered Aug 23, 2015 at 2:56

1 vote

Hide Docker Containers Behind VPN

answered Aug 23, 2015 at 3:04

1 vote

Accepted

Nmap does not detect Linux Mint

answered Aug 20, 2015 at 2:44

1 vote

DMZ for outbound connections

answered Aug 28, 2015 at 4:56

1 vote

Accepted

Is it safe to use the SHA1 checksum of a password as a key for SHA-1?

answered Aug 28, 2015 at 3:47

1 vote

My IP address switched suddenly and then switched back

answered Aug 29, 2015 at 2:43

1 vote

How do API's authenticate a user?

answered Sep 5, 2015 at 4:12

0 votes

automated decryption

answered Oct 2, 2015 at 5:10

0 votes

Is it possible to get a flash src after a redirect or an element inside an embed/object/iframe tag (cross-domain)?

answered Aug 29, 2015 at 3:27

0 votes

Why is Facebook planning to drop support for SHA-1 encrypted sites, when they themselves use a SHA-1 certificate?

answered Aug 29, 2015 at 2:32

0 votes

Does an editable file owned by root pose any risk?

answered Aug 28, 2015 at 4:11

0 votes

Certificate Policies & Certificate Practice Statements - Destroying Vs. Archiving CA's Private Keys (HSMs)

answered Aug 22, 2015 at 0:51

0 votes

Sniffing traffic on a secured wifi connection

answered Aug 22, 2015 at 0:59

Stack Exchange Network

28 Answers

Can simply decompressing a JPEG image trigger an exploit?

How does DRM stop copying?

How to protect from DoS on get method?

Is there a way to steal PHP or ASP code from a web server through the HTTP(S) protocols?

Best practice to guard against an app copying private ssh keys stored under ~/.ssh?

Is it possible to safely watch a specific folder with virus scan on Windows Server?

What are the potential security problems running untrusted code in a Docker container as a non-root user?

Forgot password and revealing whether account exists

Is encryption application credentials using certificate encryption good practice?

How to spoof my IP address to JavaScript and other security concerns

Does WhatsApp disclose the sender's IP address?

What the most trustworthy way to demonstrate digital File Integrity?

How can I defend against a data theft attack without shutting down my server/services?

Feasibility of time-based database brute-force attacks on websites

Is the (SSL3-based) SSTP VPN protocol vulnerable to the POODLE attack?

Can a shim (a.k.a. polyfill) be installed in IE, FF, or Chrome without user knowledge, and can it read passwords entered by user on a login page?

Hide Docker Containers Behind VPN

Nmap does not detect Linux Mint

DMZ for outbound connections

Is it safe to use the SHA1 checksum of a password as a key for SHA-1?

My IP address switched suddenly and then switched back

How do API's authenticate a user?

automated decryption

Is it possible to get a flash src after a redirect or an element inside an embed/object/iframe tag (cross-domain)?

Why is Facebook planning to drop support for SHA-1 encrypted sites, when they themselves use a SHA-1 certificate?

Does an editable file owned by root pose any risk?

Certificate Policies & Certificate Practice Statements - Destroying Vs. Archiving CA's Private Keys (HSMs)

Sniffing traffic on a secured wifi connection