user avatar
user avatar
user avatar
sethmlarson
  • Member for 6 years, 7 months
  • Last seen more than a month ago
41 votes

Why are self signed certificates not trusted and is there a way to make them trusted?

33 votes

Should I worry about remote timing attacks on string comparison?

8 votes
Accepted

Are there any risks to matching user-supplied regex against user-supplied inputs?

5 votes

Is information disclosure in a form of a server header a real vulnerability?

4 votes
Accepted

Is a very long living WSS WebSocket Secure connection really secure?

4 votes

Can someone send a text to a phone and make it appear on another person's phone text message?

4 votes

A seemingly innocent program is attempting to connect online. Should I be worried?

2 votes

Can you ever get partially decrypted data from a decryption algorithm?

2 votes

Ciphertext-only vs known-ciphertext attack

2 votes
Accepted

Force a user to HTTPS

1 vote

What can an iOS app tell about you?

1 vote

Can SSL using Blowfish cipher be considered strong enough?

1 vote

What effect on internet crime did the more recent developments in encryption have?

1 vote
Accepted

TLSv1 HandShake but SSLv2 client hello

1 vote

Are partially typed passwords a potential security risk?

1 vote

How can I ensure safety when literal passwords are required

0 votes

Cross-language primitives against string comparison timing attacks?

0 votes

Using a hash to encrypt data

0 votes

How dangerous are worm:win32/Goldrv!rfn and worm:win32/vbjk?

0 votes

Is it ok to have self-signed certificates in source control?

0 votes

With openssl des3, what are the passphrase parameters?

0 votes

Best encryption mechanism for message storage/exchange in client/server application