README.md

Best of StackOverflow

My curated list of best StackOverflow questions that I have come across. Contributions are welcome!!

Site

• Security
  • General users
  • Developers
  • Sys-admins
  • Corporate
  • Career

Security

Security StackExchange newtork

General users

Questions relevant to everyone

• Attack vector for exploiting WhatsApp's retransmission “vulnerability”?

• Explain to non tech savvy person how to check that your connection to mybank.com is safe?

• Help! My home PC has been infected by a virus! What do I do now?

• How do you find out if a phone is secretly sending private data to a remote server?

• I almost searched my password, but didn't press enter. Is my password at risk, because of autocomplete or anything else?

• Landlord will be watching my data traffic, as mentioned in the lease agreement

• SSL certificate mismatch does not show warning in browser

• What is worse for password strength, a poor password policy or no password policy at all?

• Should I let my child's school have access to my kid's personal laptop?

• Police forcing me to install Jingwang spyware app, how to minimize impact?

• How can you trust that there is no backdoor in your hardware?

Developers

Questions relevant to software developers

• Food for thought: A bunch of interesting questions

  • Are security flaws acceptable if not much harm can derive from them?

  • Can't a user change his session information to impersonate others?

  • Could keystroke timing improve security on a password?

  • How do I debug an emoticon-based URL?

  • Which security measures make sense for a static web site?

  • Why aren't infinite depth wildard certificates allowed?(sic)

  • What technical reasons are there to have low maximum password lengths?

  • Why is there no certificate error while visiting google.net although it presents a certificate issued to google.com?

• References: References to help you code well

  • Simple explanation of how Dirty COW works?

  • How does SSL/TLS work?

  • Which of the TLS ciphersuites are more faste and secure in Handshaking?

  • Which protocols exist for end-to-end encrypted group chat?

• Don't(s): Learn from other people's mistakes ;)

  • Encrypting text data by replacing characters?

Sys-admins

Questions relevant system administratos

• How can two-man control be implemented efficiently?

• How are root CA revocations handled?

• Encrypting a few TB of Data

Corporate

Questions relevant to securing your organization and general security guidelines

• Feasibility and scalability of a large biometric system (e.g. Aadhaar)

• How to create a company culture that cares about information security?

• Risks of giving developers admin rights to their own PCs

• Vulnerability management solution evaluation criteria

Career

Questions related to career progress and worklife

• What are the career paths in the computer security field?

• What does working in cybersecurity look like?