Information Security Weekly Newsletter
Information Security Weekly Newsletter

Top new questions this week:

What was the aim of this invalid HTTP request that tells a story about goats in the request URI?

I currently run an Apache HTTP server, and have set up monitoring to receive emails whenever an error appears in the error logs. I get the usual trying to find if I'm using HTTP 1.0 and trying to see ...

http apache  
asked by Crazy Dino 57 votes
answered by squeamish ossifrage 45 votes

Why should servers be placed outside of the corporate network?

In an answer to How do you deal with massive port scans?, user tylerl said: ... And you, like a wise IT admin, run all your servers elsewhere on the internet, not inside your corp network, for a ...

asked by topher 45 votes
answered by AdHominem 30 votes

Is it dangerous to call spam phone numbers, even if you know they're spammers?

I sometimes like to check spam just to see how the messages look like, and I found someone who actually put an American phone number (1-XXX-XXX-XXXX). Most of these spammers are either trying to get ...

malware phone  
asked by TheBro21 41 votes
answered by Mark Buffalo 60 votes

Is there an encryption algorithm that is fully secure?

Is there an encryption algorithm that is completely secure and isn't based on difficult computational algorithms? If such an algorithm exists, why we don't we use it in SSL/SSH?

asked by SDasd 30 votes
answered by Trey Blalock 95 votes

Why did Poitras and Greenwald put their batteries in the fridge? says: Even in Snowden's room, the group took precautions not to be overheard. Greenwald and Poitras would remove the batteries from their mobile phones and put them in refrigerator of ...

asked by d33tah 29 votes
answered by gowenfawr 65 votes

How do you deal with massive port scans?

This morning I was looking through firewall logs and saw there were about 500 packets marked as port scan. The scanning range was from 1000-1200 5000-5200. The IP address is which seems ...

network attacks ports network-scanners  
asked by PaddyKim 25 votes
answered by tylerl 42 votes

Somebody is spoofing my email to send spam messages, and I have no idea how to block

Someone is using my Google Apps Email ID to send spam messages and I've received 2000+ undelivered and autorespond emails. I have no idea how to block this because the spammer is also using my email ...

email spoofing gmail email-spoofing  
asked by Surjith S M 14 votes
answered by Steffen Ullrich 16 votes

Greatest hits from previous weeks:

Google Chrome "Your connection to website is encrypted with obsolete cryptography"

Google Chrome is showing new information in the certificate section. Is this a big deal? If so how can I fix it on the server end? EDIT: Thanks for the answers but I'm not skilled in cryptography ...

cryptography chrome  
asked by IMcPwn 39 votes
answered by Adm Selec 29 votes

How do I clear cached credentials from my Windows Profile?

Windows seems to be saving my credentials for a variety of applications (terminal servers, etc) and I'd like to purge this data. How can I backup and purge this data?

authentication windows certificates  
asked by LamonteCristo 28 votes
answered by LamonteCristo 31 votes

Can you answer these?

Lookaside List Injection

I've been reading a lot about Use-after-free and came across this document. It talks about a "Lookaside" injection exploit. The document says to empty the dynamic memory cache, called the Lookaside ...

windows use-after-free  
asked by dylan7 3 votes

Methods for allowing restricted access to web applications

Since I'm fully aware that allowing access for anybody to open web hosting control panel (login page), can be a little bit risky, I started to think about restricting access and allowing only for my ...

asked by طالب التوحيد 2 votes

Transmitted sensitive user data

At the moment, I have set up mitmproxy and can record all HTTP/HTTPS communications between the client and server. For research purposes I am looking to find a way to detect potential leakage of ...

hash http man-in-the-middle md5  
asked by Irene Ant 1 vote

New blog post:

QoTW #53 How can I punish a hacker?

by roryalsop on Feb 5

Elmo asked: I am a small business owner. My website was recently hacked, although no damage was done; non-sensitive data was stolen and some backdoor shells were uploaded. Since then, I have deleted ...

Subscribe to more Stack Exchange newsletters

Unsubscribe from this newsletter or change your email preferences by visiting your subscriptions page on

Questions? Comments? Let us know on our feedback site. If you no longer want to receive mail from Stack Exchange, unsubscribe from all emails.

Stack Exchange, Inc. 110 William St, 28th Floor, NY NY 10038 <3