Hottest Questions Today

0

votes

1

answer

13

views

Command injection — filtering bypass

answered 2 hours ago Ángel 12.8k

0

votes

0

answers

18

views

Why don't the nacl public key primitives for signatures and authenticated encryption use the same keys?

nacl

asked 5 hours ago Kevin Burke 142

0

votes

0

answers

23

views

canary token triggers without being opened

windows privacy

asked 6 hours ago user155600 1

0

votes

0

answers

20

views

Network Trojan detected

network

asked 6 hours ago user219789 1

-1

votes

0

answers

34

views

How to determine encryption type? [on hold]

encryption reverse-engineering

asked 7 hours ago Pd Unique 1

0

votes

1

answer

43

views

Authentication without sending password over network

authentication cryptography

answered 8 hours ago Steffen Ullrich 132k

1

vote

5

answers

146

views

Can I use a cryptographic hash function to prove my authorship of an anonymous article?

authentication cryptography hash digital-signature

modified 2 hours ago mti2935 2,542

1

vote

0

answers

28

views

Is there a security benefit to testing HTTP header presence with Javascript?

http javascript client-side header

modified 1 hour ago Jeff Ferland♦ 35k

0

votes

0

answers

15

views

XSSI, CSRF attackin REST API's POST method

xss csrf xssi

asked 6 hours ago Tudvari 108

2

votes

1

answer

53

views

Cookie without secure flag but with httponly

cookies

answered 9 hours ago Anders 52.7k

27

votes

1

answer

7k

views

How do social media apps notify you when someone else takes a screenshot of your profile?

modified 13 hours ago MechMK1 10.6k

0

votes

0

answers

14

views

IP micro mobility support [on hold]

mobile ip cellular

asked 6 hours ago Sachin Yadav 101

4

votes

2

answers

1k

views

Putty store cleartext credentials in the Windows Registry; isn't that a very insecure approach?

passwords ssh putty

modified 13 hours ago schroeder♦ 87.8k

0

votes

3

answers

51

views

Self-signed vs. authority issued certificate for internal web services

tls web-application http web-service

answered 9 hours ago TTT 8,515

1

vote

1

answer

43

views

Double Submit Cookie: Can the attacker set the cookie as a separate header?

csrf token

modified 9 hours ago zerohedge 108

1

vote

1

answer

34

views

Having problems with performing a JWT “none” algorithm attack

attacks cookies jwt

modified 11 hours ago Anders 52.7k

0

votes

0

answers

14

views

'msfvenom' is not recognized as an internal or external command, operable program or batch file [on hold]

msfvenom

asked 8 hours ago mudasar 1

1

vote

1

answer

53

views

In a content security policy header: Should the url's be quoted or not, and is there any security implication to this decision?

web-browser content-security-policy

modified 31 mins ago user230910 375

0

votes

0

answers

24

views

What are the most prominent attacks on web browsers and browser users one should know? [on hold]

web-browser api web

modified 10 hours ago rshah 111

72

votes

9

answers

14k

views

Is it safe to pay bills over satellite internet?

internet satellite

modified Oct 10 at 23:17 Simon Wainwright 1

72

votes

5

answers

11k

views

Does code obfuscation give any measurable security benefit?

obfuscation

answered 2 days ago R.. 5,484

0

votes

0

answers

20

views

What to start with: Application Security Engineer Learning Path [on hold]

appsec

asked 11 hours ago Sergey Arustamyan 1

3

votes

0

answers

53

views

PBKDF2 doesn't seem to have a standardised implementation?

cryptography hash pbkdf2 rfc

modified 15 hours ago Ryan Sheasby 16

2

votes

0

answers

24

views

How to securely run Puppeteer / Chromium in a Docker container?

linux sandbox docker chromium

asked 12 hours ago Torque 111

0

votes

0

answers

29

views

Check TLS 1.2 compatibility on services and applications

tls windows-server

asked 14 hours ago tgc8008 1

75

votes

8

answers

14k

views

If we should encrypt the message rather than the method of transfer, why do we care about wifi security? Is this just security theatre?

wifi security-theater

answered Oct 11 at 14:09 bain 202

0

votes

1

answer

75

views

Should I complie software after making all the variable and function names “1-2 character”? [duplicate]

reverse-engineering obfuscation obscurity

modified 18 hours ago Marcel 1,750

0

votes

0

answers

11

views

Can I use Keycloak as a key store like Hashicorp Vault for an example? [on hold]

encryption hash hashicorp-vault

modified 11 hours ago schroeder♦ 87.8k

2

votes

0

answers

51

views

What is the rationale behind two staged credential input these days? [duplicate]

authentication

modified 18 hours ago schroeder♦ 87.8k

13

votes

1

answer

1k

views

Protecting yourself against OSINT?

answered yesterday Izy- 329

2

votes

1

answer

85

views

Remotely exploit Linux kernel with CVE-2017-18017?

linux exploit known-vulnerabilities

answered 23 hours ago user259412 2,379

0

votes

1

answer

35

views

What are the alternatives for a bearer token mechanism?

authentication

answered 21 hours ago Lie Ryan 27.1k

0

votes

1

answer

75

views

ssh session hijacking [on hold]

ssh

answered yesterday llmora 316

-1

votes

0

answers

32

views

Active Directory LDAPS not working

tls active-directory ldap

asked yesterday Hmmmmm 126

1

vote

0

answers

33

views

How unwise is it to exclude WSL from Windows Defender?

windows antivirus

asked yesterday AleksandrH 106

1

vote

0

answers

32

views

Is SmartCard-HSM 4K good enough for WebTrust level Certificate Authority ROOT KEY storage?

certificate-authority

asked yesterday Glushiator 6

6

votes

1

answer

107

views

How do RF remote clones manage to clone rolling codes?

encryption

answered 18 hours ago defalt 948

1

vote

0

answers

26

views

How to grant to an openldap user only a specific privilege?

ubuntu ldap

modified yesterday user259412 2,379

2

votes

3

answers

70

views

Doesn't Authentication logically imply Non-repudiation?

authentication non-repudiation

answered yesterday Mike Ounsworth 41.3k

1

vote

1

answer

102

views

What kind of attack?

wireshark packet

modified yesterday 213 QHuyNguyen 6

1

vote

1

answer

57

views

Does a searchable public database exist of (hostname; ip) mappings?

dns attack-vector web-crawler virtualhost

answered yesterday Jeroen 5,315

0

votes

1

answer

55

views

Recover corrupted password protected Zip

encryption file-encryption data-recovery zip recovery

answered yesterday LSerni 18.5k

2

votes

1

answer

121

views

What does this Bruce Schneier fact mean?

cryptography

modified yesterday schroeder♦ 87.8k

25

votes

2

answers

4k

views

If you revoke a certificate authority's certificate, do all of the certificates it issued become invalid as well?

public-key-infrastructure x.509

modified Oct 10 at 16:57 Michael 1,227

1

vote

1

answer

79

views

Does Facebook Scans The Photos Which i have uploaded

account-security facebook

answered yesterday ThoriumBR 28.2k

0

votes

2

answers

39

views

multiple call of gcry_md_write function

sha256

answered yesterday Steffen Ullrich 132k

0

votes

0

answers

51

views

HTTP Basic Authentication vs. obscure filename [duplicate]

obscurity theory http-basic-auth

modified yesterday Alastair McCormack 141

0

votes

2

answers

94

views

Is this Bash code vulnerable to code injection?

linux exploit vulnerability injection bash

modified 19 hours ago Raimonds Liepiņš 722

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.