Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up

Here's how it works:

Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Top Questions

active 2 featured hot week month

1

vote

0

answers

12

views

Rotor-Machine entropy and brute-force attack time

encryption cryptography

modified 7 mins ago bananas 6

3

votes

2

answers

26

views

Question About XSS — How does hackers make the users to access such url?

answered 6 mins ago tim 21.4k

0

votes

0

answers

21

views

Malware makes fake USB device

malware windows virus usb-drive zero-day

modified 1 hour ago Mike Zadeh 1

0

votes

1

answer

11

views

Is my personal data at risk with global digital giant's services?

password-management password-policy facebook gmail credentials

answered 21 secs ago Serge Ballesta 14.6k

1

vote

1

answer

17

views

Why would TLSv1.0 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA still be used?

encryption tls ciphers tls-downgrade

answered 2 hours ago Steffen Ullrich 106k

23

votes

6

answers

5k

views

Why do apps with phone verification send the user a message, rather than have the user send one to them? [on hold]

mobile multi-factor

modified 20 hours ago Kat 113

19

votes

4

answers

5k

views

Does DNS allow third parties to register subdomains?

dns dns-spoofing

answered 7 hours ago cde 311

-1

votes

1

answer

31

views

OpenSSL On Linux and MacOSX have different outputs

linux openssl macosx

answered 3 hours ago user10216038 31

3

votes

1

answer

28

views

Howto restore factory default state of a USB pen drive?

usb-drive deletion flash-memory

answered 53 mins ago forest 22.3k

1

vote

1

answer

43

views

Can anyone using my wifi see what I'm browsing?

wifi tor

answered 6 hours ago game0ver 363

0

votes

2

answers

55

views

Protecting a web app from unwanted vulnerability scanners

vulnerability-scanners

modified 11 hours ago hft 1,025

0

votes

2

answers

50

views

Risk of infecting the host OS if the guest OS is out of date

operating-systems virtualization updates risk

modified 11 hours ago Community♦ 1

1

vote

1

answer

67

views

Slow Hashing Without a Salt?

hash brute-force salt protocols custom-scheme

modified 13 hours ago Conor Mancone 7,924

1

vote

2

answers

83

views

Can an ISP limit what security software (firewall) that will work?

firewalls antivirus isp

modified 5 hours ago user2617804 114

285

votes

25

answers

40k

views

Should I let my child's school have access to my kid's personal laptop?

privacy corporate-policy windows-permissions

answered Sep 5 at 11:24 Tom 4,181

0

votes

1

answer

44

views

What is the best way to know current attack for a server machine? [on hold]

linux audit

modified 14 hours ago Peter Harmann 5,538

0

votes

0

answers

62

views

How many unique MD5 hash values are there really? [on hold]

hash

modified 11 hours ago Thunderwood 4

1

vote

1

answer

45

views

How to calculate our application security debt?

banks risk-management risk-analysis

answered 14 hours ago user52472 2,022

0

votes

0

answers

24

views

Confused over unlink() macro for malloc

linux exploit c shellcode heap-overflow

modified 11 hours ago hft 1,025

0

votes

0

answers

11

views

Setup own infrastructure for a ChipTAN generator

multi-factor smartcard tools

asked 10 hours ago Jonas Stein 170

2

votes

3

answers

107

views

What is probability of a user picking a published password?

passwords statistics

modified 17 hours ago Conor Mancone 7,924

0

votes

0

answers

34

views

Do security breach victims have any meaningful recourse?

pii

asked 14 hours ago gatorback 183

5

votes

3

answers

82

views

Doesn't persisting previous passwords pose a vulnerability?

password-management password-policy data-leakage

answered 20 hours ago Tom K. 4,759

0

votes

0

answers

52

views

Mobile call encryption

encryption mobile phone

modified 16 hours ago Anders 45.2k

33

votes

10

answers

11k

views

Can someone get my home address if I click on a link to a IP logger?

privacy ip geolocation

modified 2 days ago Peter Mortensen 662

1

vote

1

answer

25

views

Mobile application authentication using UUID

authentication mobile java random guid

modified 14 hours ago xorist 721

61

votes

9

answers

10k

views

How important is local time for security?

time ntp

modified Sep 15 at 9:49 schroeder♦ 64.8k

0

votes

0

answers

17

views

What oauth grant type should I use after social sign in

authentication oauth authorization oauth2

modified 16 hours ago Gaurav 101

0

votes

0

answers

16

views

How to prevent Oracle TNS protocol sending data in plaintext?

server audit oracle sensitive-data-exposure

asked 15 hours ago Anderson 109

0

votes

0

answers

34

views

THC-Hydra Issue-Giving false positive passwords

penetration-test hydra

modified 16 hours ago schroeder♦ 64.8k

0

votes

1

answer

34

views

Using AES encryption to generate MAC (and provide authentication/integrity)

encryption authentication hash aes digital-signature

modified 18 hours ago AndrolGenhald 7,015

4

votes

3

answers

143

views

+100

Most reduced types of DoS attacks

ddos denial-of-service

modified 2 hours ago xorist 721

1

vote

1

answer

50

views

VPN vs SSH tunnelling for hotel wifi

vpn ssh tunneling

answered yesterday forest 22.3k

0

votes

1

answer

33

views

Looking to combine a AAS in cyber security with a 06 (low voltage electrical) [on hold]

professional-education

modified 16 hours ago schroeder♦ 64.8k

-2

votes

1

answer

23

views

How do proxy firewalls work on circuit and application layer? [on hold]

firewalls proxy

modified 16 hours ago schroeder♦ 64.8k

0

votes

0

answers

18

views

GDB cannot access memory of the c library routine

c debugging format-string

asked 21 hours ago ahmed elbarky 1

-3

votes

1

answer

48

views

Is it possible to decrypt Bcrypt encryption? [on hold]

bcrypt

answered 23 hours ago SeeYouInDisneyland 134

66

votes

5

answers

10k

views

Advised to block all traffic to/from specific IP addresses

modified Sep 11 at 19:10 schroeder♦ 64.8k

0

votes

0

answers

35

views

Removing data from a solid state drive?

deletion ssd

modified 22 hours ago Anders 45.2k

0

votes

1

answer

98

views

Google certificate gcp.gvt2.com untrusted / expired?

google certificate-revocation

modified yesterday Manly Electronics 1

0

votes

1

answer

49

views

security leak in working with hardware write blockers?

malware forensics

modified yesterday Henry WH Hack v2.1.2 758

5

votes

3

answers

240

views

Should I delete SMS messages containing one-time passwords?

authentication multi-factor sms

modified yesterday Sayan 1,156

29

votes

4

answers

3k

views

How should I verify a caller is from the bank or company they claim? [on hold]

authentication phone banks

modified Sep 14 at 12:02 bertieb 181

0

votes

0

answers

11

views

Postgres on Ubuntu Server 16.04 - automatically backups [migrated]

databases ubuntu postgresql

modified 20 hours ago ScienceLover 37

1

vote

3

answers

42

views

Is there a way to overwrite a file being used by a service without service management permissions?

privilege-escalation windows-permissions

answered 22 hours ago CBHacking 8,234

1

vote

2

answers

37

views

Can a file that has been opened and read still contain a virus?

virus

modified yesterday McMatty 1,826

0

votes

0

answers

26

views

Injected shellcode corrupted after leave instruction

buffer-overflow c assembly

asked yesterday Nikel 1

0

votes

1

answer

26

views

Block external http calls

network linux unix

modified yesterday Jesse Aldridge 101

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.

Information Security Stack Exchange works best with JavaScript enabled