User bernie2436 - Information Security Stack Exchange

bernie2436

Member for 10 years, 3 months
Last seen more than 1 year ago

18 Questions

Score Activity Newest Views

20 votes

3 answers

21k views

what is the difference between a mac and a digital signiture

authentication hash digital-signature

asked Mar 6, 2013 at 16:45

19 votes

1 answer

15k views

If SSL encrypts urls, then how are https messages routed?

tls http

asked Apr 24, 2013 at 20:11

13 votes

1 answer

11k views

how does a reflection attack work?

denial-of-service

asked May 8, 2013 at 21:27

13 votes

1 answer

8k views

What is Virtual Machine Introspection?

virtualization

asked Apr 12, 2013 at 15:17

11 votes

3 answers

4k views

how can an attacker use a fake temp file to compromise a program?

software programming

asked Apr 15, 2013 at 21:38

7 votes

4 answers

27k views

how can you inject malicious code into an innocent-looking URL?

web-browser xss html

asked Apr 12, 2013 at 16:23

6 votes

2 answers

24k views

what does it mean to be setuid root?

linux unix

asked May 2, 2012 at 14:33

6 votes

3 answers

14k views

static vs dynamic vs challenge response

authentication

asked Feb 28, 2013 at 17:23

6 votes

2 answers

12k views

What's the difference between an application-level and circuit-level gateway?

network firewalls packet

asked May 8, 2013 at 23:22

5 votes

4 answers

6k views

Encryption of headers in IPsec tunnel mode

routing ipsec

asked Apr 23, 2013 at 21:33

4 votes

1 answer

4k views

what is a security association and how does it relate to ipsec?

ipsec

asked Apr 23, 2013 at 23:43

4 votes

2 answers

19k views

How do you bruteforce decrypt data if you don't know what you are looking for?

encryption brute-force

asked Aug 19, 2013 at 11:21

4 votes

2 answers

5k views

How could attackers exploit $_SERVER['HTTP_REFERER']

php

asked May 20, 2014 at 18:18

4 votes

1 answer

2k views

how does a return to system allow an attacker to evade a non-executable stack?

memory c programming

asked Feb 23, 2013 at 20:04

3 votes

2 answers

26k views

Is there a way to find out how long it takes John the Ripper to crack a particular password?

passwords password-management

asked Feb 3, 2013 at 3:46

3 votes

1 answer

11k views

how does a sip flood attack work?

denial-of-service flooding

asked Mar 13, 2013 at 21:43

1 vote

2 answers

588 views

Determining a version of SSH from penetration testing?

penetration-test ssh audit

asked Mar 15, 2015 at 14:52

1 vote

1 answer

2k views

are organizations that receive certificates considered "end entities" in a PKI?

certificates public-key-infrastructure certificate-authority

asked Apr 24, 2013 at 21:24