User rackandboneman

18 votes

Are all USB-based attacks dependent on being able to inject keystrokes?

answered Jan 23, 2020 at 20:29

17 votes

Is password entry being recorded on camera a realistic concern?

answered Nov 8, 2018 at 22:05

6 votes

If I know the CPU architecture of a target, can I send instructions embedded in an image?

answered Oct 30, 2018 at 12:39

6 votes

Need to access old forgotten router that only supports SSLv3

answered Dec 23, 2015 at 10:35

6 votes

If we are behind a firewall, do we still need to patch/fix vulnerabilities?

answered Nov 21, 2017 at 22:53

6 votes

Is public Wi-Fi a threat nowadays?

answered Dec 5, 2017 at 10:16

4 votes

Why is TCP more secure than UDP?

answered Jul 21, 2017 at 8:53

4 votes

What is the safest way to deal with loads of incoming PDF files, some of which could potentially be malicious?

answered Feb 14, 2017 at 13:35

3 votes

Why is JavaScript "safe" to run in the browser?

answered Dec 1, 2018 at 21:25

2 votes

If my machine is infected and I run a Virtual Machine inside of it, will the VM also be compromised

answered Jan 28, 2022 at 2:05

2 votes

Is there such a thing as a "Black Box" that decrypts Internet traffic?

answered Nov 24, 2016 at 12:05

2 votes

Downloaded and (possibly) opened a .scr file. What did it do to my PC (report attached)

answered Jan 5, 2017 at 11:42

2 votes

How to protect contact forms against being misused for mass-mailing?

answered Jan 8, 2016 at 20:26

2 votes

How does an attacker get access to hashed passwords?

answered Aug 24, 2016 at 9:53

2 votes

Why isn't a client-side password complexity check considered secure?

answered Apr 27, 2017 at 20:29

1 vote

Can anti-virus/virus protection be used to spy on you?

answered Apr 25, 2017 at 11:08

1 vote

Why do most browsers store browsing history by default?

answered Jan 17, 2016 at 11:10

0 votes

DDoS: Why not block originating IP addresses?

answered Oct 26, 2016 at 11:19

0 votes

Does adding a password to BIOS prevent malware from infecting it?

answered Mar 6, 2017 at 15:17

0 votes

Is there a file system that doesn't support encryption?

answered May 17, 2017 at 6:55

0 votes

Can my employer see what I do on the internet when I use a VPN webbrowser plugin extension?

answered Nov 10, 2022 at 19:54

0 votes

Is it really Security Misconfiguration to show a version number?

answered Aug 15, 2019 at 19:38

0 votes

Is storing sensitive data in files instead of a database safe?

answered Sep 6, 2019 at 9:25

0 votes

Why do email server/clients block executable attachments?

answered Jan 15, 2020 at 15:58

0 votes

Are there unphotographable, but scannable ID cards?

answered Nov 30, 2018 at 21:18

0 votes

What considerations do I need to keep in mind when enforcing passphrases?

answered May 2, 2018 at 16:07

0 votes

What legitimate uses do browser proxies have?

answered Jul 9, 2018 at 10:10

0 votes

Why do companies not give root access to employees on their desktop machines?

answered Oct 26, 2018 at 8:44

-1 votes

How do open-source projects prevent disclosing a bug while fixing it?

answered Nov 12, 2020 at 21:26

-1 votes

Is a Windows installer that doesn't require admin rights dangerous?

answered Feb 6, 2018 at 9:46

Stack Exchange Network

32 Answers

Are all USB-based attacks dependent on being able to inject keystrokes?

Is password entry being recorded on camera a realistic concern?

If I know the CPU architecture of a target, can I send instructions embedded in an image?

Need to access old forgotten router that only supports SSLv3

If we are behind a firewall, do we still need to patch/fix vulnerabilities?

Is public Wi-Fi a threat nowadays?

Why is TCP more secure than UDP?

What is the safest way to deal with loads of incoming PDF files, some of which could potentially be malicious?

Why is JavaScript "safe" to run in the browser?

If my machine is infected and I run a Virtual Machine inside of it, will the VM also be compromised

Is there such a thing as a "Black Box" that decrypts Internet traffic?

Downloaded and (possibly) opened a .scr file. What did it do to my PC (report attached)

How to protect contact forms against being misused for mass-mailing?

How does an attacker get access to hashed passwords?

Why isn't a client-side password complexity check considered secure?

Can anti-virus/virus protection be used to spy on you?

Why do most browsers store browsing history by default?

DDoS: Why not block originating IP addresses?

Does adding a password to BIOS prevent malware from infecting it?

Is there a file system that doesn't support encryption?

Can my employer see what I do on the internet when I use a VPN webbrowser plugin extension?

Is it really Security Misconfiguration to show a version number?

Is storing sensitive data in files instead of a database safe?

Why do email server/clients block executable attachments?

Are there unphotographable, but scannable ID cards?

What considerations do I need to keep in mind when enforcing passphrases?

What legitimate uses do browser proxies have?

Why do companies not give root access to employees on their desktop machines?

How do open-source projects prevent disclosing a bug while fixing it?

Is a Windows installer that doesn't require admin rights dangerous?