Hottest Questions Today

1

vote

3

answers

33

views

Does client side hashing reduce insider risk?

answered 2 hours ago mentallurg 3,685

36

votes

7

answers

4k

views

Does legitimate tech support use remote control software?

remote-desktop

modified 28 mins ago auspicious99 405

5

votes

2

answers

445

views

How can we eliminate passwords given the problems with biometric authentication?

authentication passwords biometrics

answered 7 hours ago symcbean 17.4k

0

votes

2

answers

55

views

Is there any digital communication medium that provided close-to-perfect security?

encryption anonymity

answered 6 hours ago symcbean 17.4k

5

votes

2

answers

694

views

What information does ssh -vvv leak?

ssh data-leakage

answered 14 hours ago Z.T. 5,593

0

votes

0

answers

23

views

Which ciphers to be used currently, in opportunistic TLS for postfix SMTP

smtp ciphers postfix

asked 9 hours ago Ashwin Reddy 1

0

votes

0

answers

40

views

Is a malicious shellcode considered a malware?

malware shellcode

asked 11 hours ago yusuf 1

0

votes

0

answers

20

views

Apple T2 chip endorsement key

macos tpm apple

asked 10 hours ago Hmmmmm 163

51

votes

10

answers

14k

views

How to protect my code from “insider” threats when hiring my first employee?

insider-threats

modified Jul 2 at 15:48 John Lally 1

0

votes

0

answers

19

views

Fuzzer with ability to run a script for each request

python fuzzing

asked 12 hours ago TheKoolhatkar 9

0

votes

0

answers

23

views

Next number in this sequence? [closed]

algorithm

asked 14 hours ago Sam 1

35

votes

6

answers

4k

views

What is the suggested best practice for changing a user's email address?

authentication email account-security

modified yesterday edwina oliver 1

1

vote

0

answers

82

views

Suspicious behavior by Google when verifying users via nodejs

javascript chrome node.js

modified 12 hours ago Kevin Burrell 11

0

votes

0

answers

16

views

unable to upgrade or fix broken install in my kali linux 2019.3 [closed]

kali-linux

modified 13 hours ago schroeder♦ 102k

0

votes

0

answers

19

views

Process hollowing and the Import Address Table

injection memory c process code-execution

modified 13 hours ago Glorfindel 1,575

0

votes

0

answers

31

views

Cross-Site Request Forgery from another origin

web-application csrf owasp

asked 19 hours ago dario 1

2

votes

1

answer

58

views

Before visiting Facebook two cookies got created(fr and sb)

cookies facebook user-tracking

answered 15 hours ago Esa Jokinen 9,932

0

votes

1

answer

51

views

Hashcat: How to increment in the middle of a mask? [closed]

hashcat

answered 14 hours ago Community♦ 1

0

votes

0

answers

39

views

Cracking SHA1 Hash + Salt Help [closed]

hash sha

modified 13 hours ago schroeder♦ 102k

0

votes

1

answer

59

views

X.509 - How Is Certificate Chain of Trust “Subject Name”-“Issuer Name” Match Comparison Made?

certificates x.509

answered 18 hours ago Crypt32 3,756

1

vote

0

answers

32

views

DVWA file upload background

javascript dvwa metasploitable

asked yesterday Ryuzaki 11

1

vote

0

answers

48

views

Steganography and hiding messages

steganography

modified yesterday pancake-house 103

0

votes

0

answers

38

views

What are various mechanisms for establishing secure channels [closed]

certificate-authority

asked yesterday user855 109

2

votes

2

answers

59

views

Password relevance in key derivation function

encryption aes rsa key-generation

answered yesterday kelalaka 2,562

0

votes

0

answers

52

views

How can it be possible to register an anonymous e-mail account when even Tutanota blocks every registration attempt when using Tor? [closed]

privacy email tor

asked yesterday Ajani 1

0

votes

0

answers

25

views

Security Benefits of Having a Content Security Policy for a Domain Loaded through iframe

content-security-policy iframe

asked yesterday Illusion 1

2

votes

2

answers

96

views

Is autologin dangerous? (Debian/Linux)

authentication authorization debian

modified yesterday LvB 6,748

1

vote

0

answers

38

views

Public key stored in server is different from what is shown in OpenSSL

certificates public-key-infrastructure openssl letsencrypt

asked yesterday simplfuzz 191

0

votes

0

answers

37

views

Is it safe to make every resource public in a Google Cloud Storage bucket?

web-application authorization google-cloud-platform

modified yesterday Mitulát báti 101

26

votes

13

answers

5k

views

Is starting an AWS instance with only ssh to port 22 significantly insecure?

ssh aws

modified Jun 30 at 15:53 Captain Man 145

0

votes

0

answers

40

views

Scanning Kali ISO with Bitdefender gives Virus [closed]

virus kali-linux

modified yesterday schroeder♦ 102k

-1

votes

0

answers

32

views

What type of attack could this be ? (Wireshark pcap) [closed]

wireshark

asked yesterday siheder 1

-2

votes

0

answers

35

views

What kind of SMB attack is this? (Wireshark pcap) [closed]

wireshark

asked yesterday siheder 1

0

votes

1

answer

34

views

What happens when attacker scan a IP that is used by multiple devices? [duplicate]

network penetration-test ip vulnerability-scanners network-scanners

answered yesterday Marcus Müller 5,511

0

votes

2

answers

124

views

What encryption did Encrochat use, and how was it broken? [closed]

encryption exploit mobile legal

answered yesterday John Deters 31.1k

2

votes

2

answers

61

views

Performance comparison between AES256 GCM vs AES 256 SHA 256

ipsec

modified yesterday Z.T. 5,593

5

votes

6

answers

3k

views

Best guidance for allowing users to connect via HTTP in case of a certificate error

http fallback

modified Jul 2 at 2:38 TheHansinator 406

1

vote

4

answers

165

views

Why can't we protect the password file so that only the system can read it?

encryption passwords linux

answered 2 days ago pjc50 2,986

1

vote

0

answers

50

views

How to implement a web login using a public/private key pair?

authentication cryptography

modified yesterday teknas 11

0

votes

1

answer

68

views

If Signal database leaks, can somebody bruteforce access into my contact's chat history?

signal

answered yesterday pancake-house 103

9

votes

7

answers

4k

views

Are URL parameters of GET and POST requests over HTTPS secure?

tls http

answered Jun 28 at 11:51 Matthew Steeples 221

0

votes

0

answers

25

views

Choosing oauth flow-type for on-prem installations

authentication oauth authorization oauth2

asked yesterday Jim-Y 141

-1

votes

0

answers

52

views

What can someone do with my phone number? [closed]

phone whatsapp

modified yesterday schroeder♦ 102k

99

votes

11

answers

42k

views

Is `sudo` almost useless?

privilege-escalation sudo

modified Jun 11 at 7:57 Rory Alsop♦ 60.8k

2

votes

1

answer

70

views

Why don't fingerprint authentication systems don't store 'hashes'?

authentication fingerprint

modified 2 days ago Glorfindel 1,575

2

votes

0

answers

65

views

How vulnerable are password managers in the real world?

passwords password-management

asked 2 days ago martinpetrov1568 21

0

votes

2

answers

57

views

How is the digital certificate sent alongside digital signatures?

certificates public-key-infrastructure digital-signature asymmetric

answered 2 days ago CBHacking 20.6k

0

votes

1

answer

86

views

How can I write a function that will log a user in an old system without knowing any username or password? [closed]

sql-injection credentials

modified 2 days ago schroeder♦ 102k

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.