Hottest Questions Today

0

votes

1

answer

41

views

Schneier is telling me to write my bank security password and keep it in my wallet? Is that right?

modified 1 hour ago bashCypher 1,570

2

votes

2

answers

48

views

Are there use cases where a mutually authenticated TLS is preferred?

tls authentication

answered 3 hours ago Ben 2,915

1

vote

1

answer

46

views

Big insurance website exposing StackTrace of Java JSON Parser

web-service api exposure

answered 3 hours ago user52472 2,293

39

votes

10

answers

11k

views

Why check your email in haveibeenpwned rather than regularly changing your password regardless of any leaks?

have-i-been-pwned

modified 4 hours ago primohacker 36

0

votes

1

answer

29

views

Obtaining plain-text passwords from a Domain Controller

passwords active-directory mimikatz

answered 2 hours ago Angelo Schilling 578

0

votes

0

answers

22

views

Block/spam an email that doesn't match a rule

email email-spoofing microsoft outlook

modified 2 hours ago EdOverflow 855

0

votes

1

answer

37

views

How to prevent replay attacks without exposing stored password security?

hash password-management attacks challenge-response

answered 7 hours ago Steffen Ullrich 115k

275

votes

9

answers

64k

views

Why is Gbt3fC79ZmMEFUFJ a weak password?

passwords

modified yesterday forest 34.4k

39

votes

2

answers

7k

views

How do universities and schools securely sync passwords between multiple services?

passwords single-sign-on

answered 16 hours ago Singleton 1

0

votes

0

answers

44

views

Collection #1: Do we know the source of the leaks?

password-management data-leakage

asked 9 hours ago fgysin 416

0

votes

1

answer

64

views

Is a temporary local hotspot on an Android device secure enough for my purposes?

wifi android hotspot

answered 6 hours ago davidgo 440

0

votes

1

answer

34

views

Does making a pdf searchable make it more vulnerable? [on hold]

vulnerability known-vulnerabilities pdf

answered 9 hours ago Major Sam 11

0

votes

1

answer

22

views

Can I adjust the X509v3 Name Constraints on my internal CA after I have issued certificates?

certificate-authority openssl

answered 9 hours ago Steffen Ullrich 115k

0

votes

0

answers

23

views

How to Secure API Calls [on hold]

api sensitive-data-exposure

modified 9 hours ago ose 1

86

votes

6

answers

17k

views

Is it safe to give my email address to a service like haveibeenpwned in light of the publication of “Collection #1”?

passwords breach have-i-been-pwned

modified yesterday Skiddie Hunter 600

0

votes

0

answers

12

views

macchanger conflicting with network-manager [on hold]

network spoofing mac-address mac-spoofing

modified 9 hours ago schroeder♦ 73.6k

71

votes

8

answers

14k

views

Is displaying remaining password retry count a security risk?

authentication password-policy account-security

modified yesterday jamesdlin 902

0

votes

1

answer

37

views

dm-crypt/LUKS: one-time password

encryption luks dm-crypt

answered 6 hours ago davidgo 440

0

votes

1

answer

35

views

hashcat specify number of characters

passwords hash password-cracking macosx hashcat

modified 4 hours ago EdOverflow 855

0

votes

0

answers

13

views

NMAP: Action section is not executing [on hold]

nmap

modified 9 hours ago Naive 101

1

vote

1

answer

56

views

Is it possible to intercept HTTPS payload with a trusted CA but send it the wrong server?

http man-in-the-middle ssl-interception

modified 16 hours ago Tobi Nary 12.1k

0

votes

1

answer

22

views

Convert ivs file to hccapx?

brute-force wpa2 aircrack-ng hashcat

modified 11 hours ago schroeder♦ 73.6k

0

votes

1

answer

33

views

What would be the best way to evaulate the database management systems? [on hold]

sql-injection databases audit account-security

answered 19 hours ago Haakon Dahl 176

1

vote

1

answer

11

views

sp initiated saml sso authentication

authentication sso saml single-sign-on identity-management

answered 14 hours ago Stefan Rasmusson 286

0

votes

1

answer

96

views

What is a “security bod”?

terminology

answered yesterday David 298

0

votes

1

answer

34

views

CSP - Unsafe-inline or unsafe-eval for specific domain is allowed or not

web-application web-browser xss content-security-policy

modified 2 hours ago EdOverflow 855

0

votes

2

answers

59

views

Is stand-alone one-time password less secure than OTP + traditional password auth?

multi-factor one-time-password

answered 23 hours ago Ángel 9,283

0

votes

0

answers

36

views

Real time chat - is it possible to see messages from it again

server isp

asked 22 hours ago Johanna 1

0

votes

0

answers

26

views

How to calculate AES Key from Hex ( UE4 )

aes

asked 20 hours ago Zillinium 101

0

votes

2

answers

73

views

How to check Google SSL certificate?

certificates http man-in-the-middle google ssl-interception

modified yesterday keithRozario 955

0

votes

1

answer

65

views

How do these attackers find my IP? [on hold]

ssh brute-force ip

answered yesterday CD Rohling 173

45

votes

6

answers

10k

views

Is the data between a keyboard and a web browser secure from local computer applications?

tls keyloggers

modified Jan 18 at 14:44 schroeder♦ 73.6k

2

votes

1

answer

47

views

DNS entry defined only in HOSTS file - will browsers mark the SSL cert as valid?

tls certificates dns

answered yesterday Crypt32 2,508

0

votes

1

answer

129

views

What can schools see on school issued Mac? [on hold]

monitoring apple

modified 18 hours ago Tobi Nary 12.1k

1

vote

1

answer

69

views

Are Password Strength/Entropy test web sites safe?

passwords

modified yesterday Tobi Nary 12.1k

-1

votes

0

answers

40

views

Why and how its happened! [on hold]

.net

asked yesterday X-Virus 1

0

votes

0

answers

32

views

What is the meaning of payload for this? [on hold]

password-cracking zip

asked yesterday Xiert 1

-2

votes

3

answers

138

views

Why do services that use 2-factor authentication still ask you to provide a password?

passwords password-management multi-factor web-service

modified yesterday they 670

-1

votes

0

answers

22

views

How to calculate WPA2 handshake offline? [on hold]

encryption wpa2 aircrack-ng

modified yesterday Kasp3r Ghost 1

1

vote

2

answers

47

views

CSRF and defence mechanisms

csrf

answered yesterday InvokeStatic 68

0

votes

0

answers

13

views

Securing internal API credentials on a public chrome extension

authentication oauth chrome web-service api

asked yesterday dsignr 101

1

vote

1

answer

67

views

What is the entropy of a call to java.lang.Math.random()?

java random entropy

answered yesterday dave_thompson_085 5,240

0

votes

0

answers

26

views

How to make --os-shell command work on UBUNTU 16.04 ( Digital Ocean )?

sql-injection mysql sqlmap

modified yesterday temporarya 1

0

votes

0

answers

11

views

What are some accredited security product testing and validation firms? [on hold]

penetration-test key-exchange validation

asked yesterday ButtonPusher 1

1

vote

2

answers

91

views

Why is it unsafe to use a password that exists online?

passwords account-security

modified 2 days ago JolonB 6

3

votes

2

answers

61

views

How does the optional “e-mail password reset” at sync.com work?

cloud-storage

answered yesterday D.H. 126

1

vote

1

answer

22

views

Active Directory Certificate authentication trust

authentication public-key-infrastructure certificate-authority smartcard

answered yesterday Crypt32 2,508

170

votes

11

answers

29k

views

Search for military installed backdoors on laptop

malware windows privacy backdoor

modified Jan 10 at 17:10 shellster 507

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.