Eloy Roldán Paredes's user avatar
Eloy Roldán Paredes's user avatar
Eloy Roldán Paredes's user avatar
Eloy Roldán Paredes
  • Member for 6 years, 11 months
  • Last seen more than 1 year ago
39 votes
10 answers
6k views

Why is it important to apply security best practices when the risk they protect against is very low?

21 votes
3 answers
427 views

What precautions should I take when creating users that will be used by applications and not by people?

14 votes
1 answer
5k views

May HSTS block access to your site when you renew your SSL certificate?

9 votes
3 answers
3k views

Are future TLS versions going to prevent traffic inspection?

6 votes
1 answer
2k views

Is the native sandbox of Chrome and Firefox enough or would SELinux improve its security?

5 votes
1 answer
560 views

How to implement a password change policy when user's centralized password is in a lot of places?

3 votes
1 answer
177 views

How to block BYOD users from installing malicious versions of a common app?

3 votes
1 answer
443 views

Can in a VPN LAN-to-LAN one site be completely isolated from the other?

3 votes
4 answers
7k views

Can CVE-2015-4852 be exploited against WebLogic servers after a load balancer?

3 votes
1 answer
158 views

Is there any risk in adding exceptions in the antivirus software for paths that are only writable by Administrator?

3 votes
1 answer
161 views

What are the new risks of using hyperconvergent systems?

3 votes
3 answers
1k views

What is the risk of allowing users to change Windows 10 wallpaper?

3 votes
1 answer
291 views

Where should we maintain external (subcontractors) usernames and passwords?

3 votes
5 answers
2k views

May be justified to use generic and shared user accounts in order to segregate and reduce risk?

3 votes
1 answer
2k views

What security controls should be in the API Gateway and what in the webservices?

2 votes
3 answers
192 views

May I have into account security concerns when considering to send emails massively (>100,000)?

2 votes
1 answer
186 views

What security requirements should implement a L2L VPN in order to protect one end from the other?

2 votes
1 answer
152 views

What is the procedure to implement security zones in a production network without impacting negatively in the communications?

2 votes
1 answer
994 views

What are the risks of allowing the storage of persistent cookies on your system?

2 votes
2 answers
569 views

Why not to use the same subordinate issuer CA for generating certificates that will be used for different things?

1 vote
1 answer
131 views

When automatic login may be acceptable from the point of view of security?

1 vote
2 answers
142 views

Is it possible to protect the emails and calendar in an Exchange server against own Exchange administrators?

1 vote
1 answer
160 views

How can I authenticate securely to an internal website from an iPad without an strong password?

1 vote
0 answers
96 views

How to know and disallow corporative Google Apps users to access third party apps with their corporative Google Apps accounts?

1 vote
2 answers
203 views

Is it reasonable to make mandatory inside an organization (in the internal network) that all traffic were encrypted?

1 vote
1 answer
253 views

Linux authenticating against Active Directory, is one keytab for all Linux machines enough?

1 vote
4 answers
157 views

Is there a criteria for allowing or disallowing the execution of bash scripts as root with sudo?

1 vote
1 answer
942 views

Does putting in quarentine attachments with two dots increase security in Outlook 2010?

1 vote
3 answers
275 views

Is it secure to send a password recovery link for company application to an employee's personal email address?

0 votes
1 answer
232 views

Should all local users with the same username have the same UID in all the machines of an organization?