- Malicious QR Code and MitigationMalicious QR Code and Mitigation
- Why is it difficult to catch "Anonymous" or "Lulzsec" (groups)?Why is it difficult to catch "Anonymous" or "Lulzsec" (groups)?
- What should I do when my boss asks me to fabricate audit log data?What should I do when my boss asks me to fabricate audit log data?
- Are powerline ethernet adapters inherently secure?Are powerline ethernet adapters inherently secure?
- What else can be sniffed?What else can be sniffed?
- Keyboards immune to signal monitoring?Keyboards immune to signal monitoring?
- Securing an area both physically and technicallySecuring an area both physically and technically
- Why are hash functions one way? If I know the algorithm, why can't I calculate the input from it?Why are hash functions one way? If I know the algorithm, why can't I calculate the input from it?
- MySQL OLD_PASSWORD cryptanalysis?MySQL OLD_PASSWORD cryptanalysis?
- What's the mathematical model behind the security claims of symmetric ciphers and digest algorithms?What's the mathematical model behind the security claims of symmetric ciphers and digest algorithms?
- How do you destroy an old hard drive?How do you destroy an old hard drive?
- Best method of retiring hard drivesBest method of retiring hard drives
- What would one need to do in order to hijack a satellite?What would one need to do in order to hijack a satellite?
- Utility company does not hash passwords in the databaseUtility company does not hash passwords in the database
- When storing private identifying information in a web application, what is "industry standard" best practices?When storing private identifying information in a web application, what is "industry standard" best practices?
- What is the difference between $200 and $1,000+ Firewalls?What is the difference between $200 and $1,000+ Firewalls?
- How secure are virtual machines really? False sense of security?How secure are virtual machines really? False sense of security?
- Patching Mechanism and security holesPatching Mechanism and security holes
- Certifiable standards for server security, besides PCI-DSS?Certifiable standards for server security, besides PCI-DSS?
- Is this set-up PCI-Compliant?Is this set-up PCI-Compliant?
- Do any security experts recommend bcrypt for password storage?Do any security experts recommend bcrypt for password storage?
- XKCD #936: Short complex password, or long dictionary passphrase?XKCD #936: Short complex password, or long dictionary passphrase?
- Are there state-of-the-art techniques or theory specifically for attacking passphrases over passwords?Are there state-of-the-art techniques or theory specifically for attacking passphrases over passwords?
- Are there lists of most common words or ngrams used in passwords and passphrases?Are there lists of most common words or ngrams used in passwords and passphrases?
- Who is responsible for the strength of user's passwords?Who is responsible for the strength of user's passwords?
- Should I have a maximum password length?Should I have a maximum password length?
- Should passwords be truly random?Should passwords be truly random?
- How can I avoid my password being harvested by key loggers from internet cafes?How can I avoid my password being harvested by key loggers from internet cafes?
- Security of passwords remembered by WindowsSecurity of passwords remembered by Windows
- Why do we even use passwords / passphrases next to biometrics?Why do we even use passwords / passphrases next to biometrics?
- Why do law-abiding citizens need strong security?Why do law-abiding citizens need strong security?
- Why does one need a high level of privacy/anonymity for legal activities?Why does one need a high level of privacy/anonymity for legal activities?
- Sony Attacks, what would you do?Sony Attacks, what would you do?
- Data categorization: Critical or notData categorization: Critical or not
- Is it possible to have a key for encryption, that cannot be used for decryption?Is it possible to have a key for encryption, that cannot be used for decryption?
- Asymmetric vs Symmetric EncryptionAsymmetric vs Symmetric Encryption
- What are private key cryptography and public key cryptography, and where are they useful?What are private key cryptography and public key cryptography, and where are they useful?
- What's the mathematical model behind the security claims of symmetric ciphers and digest algorithms?What's the mathematical model behind the security claims of symmetric ciphers and digest algorithms?
- Carrying out a professional IT audit procedureCarrying out a professional IT audit procedure
- What is an appropriate auditing standard for a law firm?What is an appropriate auditing standard for a law firm?
- How does changing your password every 90 days increase security?How does changing your password every 90 days increase security?
- Lessons learned and misconceptions regarding encryption and cryptologyLessons learned and misconceptions regarding encryption and cryptology
- What to transfer? Password or its hash?What to transfer? Password or its hash?
- What are rainbow tables and how are they used?What are rainbow tables and how are they used?
- Can DES-based hashed password be recovered if salt is known?Can DES-based hashed password be recovered if salt is known?
- Are passwords in memory?Are passwords in memory?
- NoScript: How to determine which sites/scripts to whitelist?NoScript: How to determine which sites/scripts to whitelist?
- How feasible is it for a CA to be hacked? Which default trusted root certificates should I remove?How feasible is it for a CA to be hacked? Which default trusted root certificates should I remove?
- IPTables default security rules for a gateway/router?IPTables default security rules for a gateway/router?
- Security risk of PING?Security risk of PING?
- How to write an email regarding IT Security that will be read, and not ignored by the end user?How to write an email regarding IT Security that will be read, and not ignored by the end user?
- What are good ways toeducate about IT security in a company?What are good ways toeducate about IT security in a company?
- What policies maximize employee buy-in to security?What policies maximize employee buy-in to security?
- When a sysadmin leaves what extra precautions need to be taken?When a sysadmin leaves what extra precautions need to be taken?
- I just discovered major security flaws in my web store?I just discovered major security flaws in my web store?
- What is considered the simplest (or lightest) secure development lifecycle?What is considered the simplest (or lightest) secure development lifecycle?
- How do you compare risks from your websites, physical perimeter, staff etcHow do you compare risks from your websites, physical perimeter, staff etc
- What security resources should a white-hat developer follow these days?What security resources should a white-hat developer follow these days?
- What are the most important security checks for new web applications?What are the most important security checks for new web applications?
- What is the difference between a penetration test and a vulnerability assessment?What is the difference between a penetration test and a vulnerability assessment?
- What tools are available to assess the security of a web application?What tools are available to assess the security of a web application?
- Is there a typical step-by-step A-Z process for testing a Web site for possible exploits?Is there a typical step-by-step A-Z process for testing a Web site for possible exploits?
- Books about Penetration TestingBooks about Penetration Testing
- Can I detect web app attacks by viewing my Apache log file?Can I detect web app attacks by viewing my Apache log file?
- Is it enough to only wipe a flash drive once?Is it enough to only wipe a flash drive once?
- What are the good use cases for disk encryption?What are the good use cases for disk encryption?
- How to protect data on a thumb driveHow to protect data on a thumb drive
- How can I reliably erase all information on a hard drive?How can I reliably erase all information on a hard drive?
- Does an established ssl connection mean a line is really secureDoes an established ssl connection mean a line is really secure
- SSL TLS renegotiation vulnerability - current situation in clientsSSL TLS renegotiation vulnerability - current situation in clients
- What's the difference between SSL, TLS, and HTTPS?What's the difference between SSL, TLS, and HTTPS?
- Forward secrecy with HTTPS and AESForward secrecy with HTTPS and AES
- Locking down web-based admin areas with personal SSL certificatesLocking down web-based admin areas with personal SSL certificates
- Why is it difficult to catch "Anonymous" or "Lulzsec" (groups)?Why is it difficult to catch "Anonymous" or "Lulzsec" (groups)?
- What key metrics should a CIO rely on to gauge the extent of IT risk exposure?What key metrics should a CIO rely on to gauge the extent of IT risk exposure?
- How would you reason with and work with the security paranoiac on your team?How would you reason with and work with the security paranoiac on your team?
- Can you provide loss values on security breaches?Can you provide loss values on security breaches?
- What are a few good lists of threats to use to kick-off conversations with others about what worries them?What are a few good lists of threats to use to kick-off conversations with others about what worries them?
- What does defense in depth entail for a web app?What does defense in depth entail for a web app?
- Best practices for securing an iPhoneBest practices for securing an iPhone
- Hardening Linux ServerHardening Linux Server
- Best practices for securing an android deviceBest practices for securing an android device
- Apache Server HardeningApache Server Hardening
- IIS and SQLServer HardeningIIS and SQLServer Hardening
- What methods are available for securing SSH?What methods are available for securing SSH?
- How do I apply a security baseline to Windows 2008 R2?How do I apply a security baseline to Windows 2008 R2?
- Does PCI compliance really reduce risk and increase security?Does PCI compliance really reduce risk and increase security?
- Recommended policy on password complexityRecommended policy on password complexity
- Why do sites implement locking after 3 failed password attempts?Why do sites implement locking after 3 failed password attempts?
- How to securely hash passwords?How to securely hash passwords?
- Looking for example of well-known app using unsalted hashesLooking for example of well-known app using unsalted hashes
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
