Hottest Questions Today

0

votes

2

answers

27

views

Is that a good idea? - Firefox/Chrome in-content encryption

encryption gnupg

answered 36 mins ago Josef 4,298

0

votes

1

answer

24

views

Is there a way to exploit jquery 1.12.4 vulnerability?

answered 51 mins ago Sjoerd 20.4k

1

vote

0

answers

18

views

Are there any reliable and updated sources or feeds for password dumps? [on hold]

passwords account-security have-i-been-pwned

asked 2 hours ago Alessandro 27

0

votes

0

answers

13

views

What is the difference between psk_ke and psk_dhe_ke as defined in RFC8446 4.2.9

tls

asked 4 hours ago Philippe 125

1

vote

0

answers

28

views

Is there any sense in encrypting a file for one's own later use?

encryption file-encryption asymmetric

asked 6 hours ago Perron Aeed 6

3

votes

2

answers

139

views

Reporting vulnerability to New York Times

disclosure

answered 10 hours ago user10216038 1,350

0

votes

1

answer

39

views

Two Factor Authentication Secret Storage

authentication webserver multi-factor storage

modified 8 hours ago Future Security 1,036

-1

votes

1

answer

35

views

Is it possible to trace a fraud who swindled money through email tracked IP addresses

tracking

answered 12 hours ago Polynomial 101k

1

vote

1

answer

23

views

Verifying Host Sterility After Running Malware Tests on Virtual Machine

antivirus virtualization antimalware scan

answered 10 hours ago Peteris 6,256

54

votes

8

answers

15k

views

How are passwords stolen from companies if they only store hashes?

passwords

modified 2 days ago Future Security 1,036

0

votes

0

answers

26

views

Dealing with OpenSSH CVE-2019-6109, CVE-2019-6110 & CVE-2019-6111 on CentOS 6

vulnerability pci-dss known-vulnerabilities cve

asked 13 hours ago flickerfly 101

2

votes

1

answer

86

views

How to properly disclose a security vulnerability anonymously?

disclosure

modified 18 hours ago Alex Probert 309

0

votes

2

answers

128

views

How to verify a private key has not been compromised?

cryptography system-compromise code-signing

answered 17 hours ago ThoriumBR 23.6k

0

votes

0

answers

33

views

OpenID Connect: Is storing access token in browser sercure?

csrf access-control authorization oauth2 openid-connect

asked 17 hours ago user1364591 6

1

vote

1

answer

28

views

Is it safe to enable - Trust Access to the VBA object model - Microsoft Office

trust office vbscript

modified 4 hours ago simbo1905 388

-3

votes

1

answer

59

views

How to differ between hash file in terms of bits [on hold]

hash

modified 19 hours ago Dildar Ahmed 1

-1

votes

0

answers

23

views

Management Deployment tools for Macs and Windows to push apps updates [on hold]

tools

asked 18 hours ago Yholland 1

0

votes

2

answers

81

views

Basic things that need to be explained to employees about a security policy and at what point in their employment

corporate-policy user-education

modified 21 hours ago John Deters 28.8k

1

vote

0

answers

39

views

Is there a way to exploit file_get_contents that has a prepended website?

web-application php web directory-traversal

modified 1 hour ago Raymond Nijland 101

-1

votes

0

answers

59

views

Deobfuscation Malicious Javascript Codes

xss javascript obfuscation

modified 22 hours ago Goron 30

0

votes

0

answers

46

views

Does load balancing multiple WAN connections improve anonymity?

vpn anonymity internet

modified 20 hours ago Alex Probert 309

0

votes

1

answer

67

views

Subdomain api.domain.com - more vunerable to attacks?

api domain

answered yesterday Sjoerd 20.4k

0

votes

0

answers

38

views

Endgame AV malware criteria [on hold]

antivirus

modified 23 hours ago schroeder♦ 77.6k

12

votes

3

answers

3k

views

Hashing password to increase entropy

passwords hash entropy

modified 2 days ago ThoriumBR 23.6k

0

votes

2

answers

73

views

netcat reverseshell hanging after connection

netcat

modified 21 hours ago schroeder♦ 77.6k

-1

votes

0

answers

28

views

separator unmatched [on hold]

wpa2 hashcat wordlist

modified 23 hours ago schroeder♦ 77.6k

34

votes

3

answers

5k

views

Is it insecure to send a password in a `curl` command?

macosx curl

modified Mar 18 at 21:49 Muhammad 743

0

votes

0

answers

31

views

What are the risks of exposing the Docker for Windows daemon on localhost?

tcp docker risk

modified yesterday Ortomala Lokni 101

-3

votes

0

answers

66

views

Enterprise Password Management [on hold]

password-management cloud-computing

modified 22 hours ago Xander 33.1k

2

votes

1

answer

161

views

Does the use of pepper for passwords violate Kerckhoffs's principle?

passwords pepper

modified yesterday Future Security 1,036

0

votes

0

answers

37

views

Different results in “forgot email” [on hold]

web-application sql-injection

modified yesterday schroeder♦ 77.6k

-2

votes

0

answers

48

views

Please help me on this thing [on hold]

web-browser android web

asked yesterday Jay Sen 1

58

votes

6

answers

7k

views

+50

Should we release the security issues we found in our product as CVE or we can just update those on weekly release notes?

vulnerability known-vulnerabilities cve

modified Mar 16 at 12:48 Filopn 517

0

votes

0

answers

20

views

John the Ripper: OpenMP mode vs using the “--fork=N” option?

passwords password-cracking john-the-ripper

asked yesterday Shuzheng 413

51

votes

2

answers

12k

views

Is this Paypal Github SDK reference really a dangerous site?

web-browser credit-card account-security

modified 2 days ago mootmoot 2,069

0

votes

0

answers

26

views

Bypassing ASLR using information leaks

exploit-development aslr

modified yesterday localacct 1

0

votes

0

answers

26

views

nvd json database without vendor and product info

cve

modified yesterday schroeder♦ 77.6k

-2

votes

1

answer

68

views

How can i check my phone for being tracked and other spyware [on hold]

phone spyware

answered yesterday Fulgus 1

0

votes

0

answers

29

views

Webroot marks valid file as [Trojan.Dropper.Gen] [on hold]

antivirus md5 trojan

modified yesterday smitra 101

46

votes

8

answers

9k

views

Replacing Windows 7 security updates with anti-virus?

antivirus windows-10 updates microsoft windows-7

answered Mar 14 at 17:58 Joel Coehoorn 1,377

102

votes

6

answers

23k

views

School performs periodic password audits. Is my password compromised?

password-management

modified Mar 11 at 13:05 schroeder♦ 77.6k

45

votes

8

answers

10k

views

Force user to remove USB token

multi-factor usb bitlocker

answered Mar 15 at 13:17 Bojidar Stanchev 1

0

votes

0

answers

37

views

CSRF and XSS protection via Header & Cookie-based JWT (tokens)?

xss csrf

modified yesterday Dexter 225

-1

votes

0

answers

31

views

*push-apple.com.akadns.net Pushing Malware to IOS & Mac?

malware apple

modified yesterday Tyler 131

1

vote

1

answer

83

views

Trying to understand Content-Security-Policy: Why do some sites (e.g Google) use a “nonce”, but also allow all inline scripts and use of eval()?

content-security-policy

modified yesterday mcgyver5 5,711

0

votes

0

answers

49

views

If only getting and storing BIN part of credit card number, should I comply with any PCI (or other) specification?

pci-scope

modified yesterday Ran Wasserman 4

0

votes

1

answer

47

views

What CA signed my certificate?

certificates

answered yesterday Steffen Ullrich 119k

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.