Eloy Roldán Paredes's user avatar
Eloy Roldán Paredes's user avatar
Eloy Roldán Paredes's user avatar
Eloy Roldán Paredes
  • Member for 8 years, 3 months
  • Last seen more than 2 years ago
39 votes
10 answers
6k views

Why is it important to apply security best practices when the risk they protect against is very low?

21 votes
3 answers
441 views

What precautions should I take when creating users that will be used by applications and not by people?

14 votes
1 answer
6k views

May HSTS block access to your site when you renew your SSL certificate?

9 votes
3 answers
3k views

Are future TLS versions going to prevent traffic inspection?

6 votes
1 answer
2k views

Is the native sandbox of Chrome and Firefox enough or would SELinux improve its security?

5 votes
1 answer
588 views

How to implement a password change policy when user's centralized password is in a lot of places?

3 votes
1 answer
199 views

How to block BYOD users from installing malicious versions of a common app?

3 votes
1 answer
551 views

Can in a VPN LAN-to-LAN one site be completely isolated from the other?

3 votes
4 answers
7k views

Can CVE-2015-4852 be exploited against WebLogic servers after a load balancer?

3 votes
1 answer
193 views

Is there any risk in adding exceptions in the antivirus software for paths that are only writable by Administrator?

3 votes
1 answer
180 views

What are the new risks of using hyperconvergent systems?

3 votes
3 answers
2k views

What is the risk of allowing users to change Windows 10 wallpaper?

3 votes
1 answer
305 views

Where should we maintain external (subcontractors) usernames and passwords?

3 votes
5 answers
2k views

May be justified to use generic and shared user accounts in order to segregate and reduce risk?

3 votes
1 answer
2k views

What security controls should be in the API Gateway and what in the webservices?

2 votes
3 answers
206 views

May I have into account security concerns when considering to send emails massively (>100,000)?

2 votes
1 answer
227 views

What security requirements should implement a L2L VPN in order to protect one end from the other?

2 votes
1 answer
179 views

What is the procedure to implement security zones in a production network without impacting negatively in the communications?

2 votes
1 answer
1k views

What are the risks of allowing the storage of persistent cookies on your system?

2 votes
2 answers
613 views

Why not to use the same subordinate issuer CA for generating certificates that will be used for different things?

1 vote
1 answer
150 views

When automatic login may be acceptable from the point of view of security?

1 vote
2 answers
166 views

Is it possible to protect the emails and calendar in an Exchange server against own Exchange administrators?

1 vote
1 answer
176 views

How can I authenticate securely to an internal website from an iPad without an strong password?

1 vote
0 answers
111 views

How to know and disallow corporative Google Apps users to access third party apps with their corporative Google Apps accounts?

1 vote
2 answers
224 views

Is it reasonable to make mandatory inside an organization (in the internal network) that all traffic were encrypted?

1 vote
1 answer
317 views

Linux authenticating against Active Directory, is one keytab for all Linux machines enough?

1 vote
4 answers
205 views

Is there a criteria for allowing or disallowing the execution of bash scripts as root with sudo?

1 vote
1 answer
971 views

Does putting in quarentine attachments with two dots increase security in Outlook 2010?

1 vote
3 answers
365 views

Is it secure to send a password recovery link for company application to an employee's personal email address?

0 votes
1 answer
317 views

Should all local users with the same username have the same UID in all the machines of an organization?