Skip to main content
Information Security

Enlightened

 Enlightened
First to answer and accepted with score of 10 or more. This badge can be awarded multiple times.
Awarded 3271 times.
Secure DNS (DoH, DoT) differences, performance, comparison
Awarded 12 hours ago
How are all public computers (libraries, etc.) not full of malware?
Awarded Dec 3 at 18:02
In AES GCM, would using different nonces that are close reveal data?
Awarded Dec 2 at 23:27
What's a good way to append a nonce to ciphertext in Python for AES GCM in Python?
Awarded Nov 29 at 10:01
How can Process Hacker view my password manager's memory without administrative rights?
Awarded Nov 24 at 7:15
Given extensive protections in modern operating systems that make buffer overflow exploits unfeasible, should I even bother studying these?
Awarded Nov 20 at 18:22
Which external vulnerabilities remain for a web server secured with mTLS?
Awarded Nov 20 at 3:21
Why do best practices recommend against adding your own pepper to passwords before hashing?
Awarded Nov 15 at 22:30
What was the concern that caused the warning in GitHub Actions documentation about setting NODE_OPTIONS?
Awarded Nov 15 at 15:21
ECDH and static key encryption
Awarded Oct 30 at 20:51
Why do they put cyrillic letters in phishing email?
Awarded Oct 30 at 20:15
Why must an attack tree be a tree?
Awarded Oct 30 at 7:08
argon2id: Do I have to protect against timing attacks on login?
Awarded Oct 29 at 14:38
what does it mean to be setuid root?
Awarded Oct 28 at 5:50
How can I block localhost access from other computers on the same local network?
Awarded Oct 24 at 4:04
Would MAC filtering protect against KRACK?
Awarded Oct 22 at 7:40
Public keys without the certificates
Awarded Oct 21 at 13:47
Should I reset my password on Internet Archive?
Awarded Oct 20 at 23:11
Could there be a legitimate reason for a SSH server to allow null authentication, to anyone?
Awarded Oct 17 at 9:36
What would be the scenario if P = NP for RSA algorithm?
Awarded Oct 16 at 1:22
What is the best way to protect from polymorphic viruses?
Awarded Oct 12 at 4:46
Is using `crypt` in PostgreSQL for password comparison secure against timing attacks?
Awarded Oct 12 at 1:05
API request signing best practices
Awarded Oct 10 at 5:07
Storing password strength information along with password
Awarded Oct 7 at 21:58
Does copying files from one drive to another also copy previously deleted data from the drive one?
Awarded Sep 26 at 22:11
Secure flag cookies are sent on a non-secure connection
Awarded Sep 26 at 11:41
How safe is the runastool.exe, any known issues?
Awarded Sep 20 at 13:08
Is it secure to block passwords that are too similar to other employees' old passwords?
Awarded Sep 10 at 14:22
How are you supposed to trust SSO popups in desktop and mobile applications?
Awarded Sep 10 at 11:25
What's the best format or way to generate a short-lived access token?
Awarded Sep 9 at 14:33
What prevents random software installation popups from mis-interpreting our consents
Awarded Sep 8 at 5:56
What prevents a browser from saving and tracking passwords entered to a site?
Awarded Aug 29 at 13:48
Does the modulus of a TLS certificate uniquely identify the client?
Awarded Aug 27 at 22:36
Is my encryption format secure?
Awarded Aug 18 at 15:31
Are Cyrillic characters a real threat?
Awarded Aug 6 at 23:40
How can a vulnerable function can be a exploited by a non-logged user if it only called in the WP admin section of a plugin?
Awarded Aug 5 at 18:36
What sensitive information can be leaked in a Vim's swap file?
Awarded Jul 25 at 20:07
Can trusted timestamping be faked by altering some bytes within the document?
Awarded Jul 22 at 16:00
ELI5: If SSL encrypts traffic, why does it expire?
Awarded Jul 22 at 11:05
What are the Netscape Cert Type attributes? Why/when are they needed?
Awarded Jul 13 at 22:31
Is it a security issue to expose PII on any publicly accessible URL?
Awarded Jul 10 at 8:37
Why does OpenID Connect ("OIDC") use a `nonce` claim instead of the `jti` registered claim
Awarded Jul 8 at 22:56
How did I obtain a wildcard SSL certificate without port 80 opened for a challenge?
Awarded Jul 8 at 13:20
Is a "single" cpu safer than multiple cores?
Awarded Jul 8 at 9:17
Should mail addresses for logins be stored hashed to minimize impact of data loss?
Awarded Jul 4 at 10:55
What is the term for when a hyperlink maliciously opens different URL from URL displayed when hovered over?
Awarded Jul 4 at 0:12
How should I report a Man-in-the-Middle attack in my workplace?
Awarded Jun 28 at 13:34
Help understanding basic user authentication with salts and hashing
Awarded Jun 27 at 11:48
Relevance of RFC2228
Awarded Jun 24 at 9:56
What are legal/ethical concerns to bear in mind, when hacking websites with open invitations?
Awarded Jun 23 at 7:16
Could a Google Chrome extension read my password?
Awarded Jun 21 at 9:26
Can OpenPGP private keys ever be secure enough to store publicly?
Awarded Jun 20 at 9:57
AD User vs SQL User for SQL Server Authentication
Awarded Jun 20 at 2:17
How safe is TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA?
Awarded Jun 13 at 19:04
How to deal with monitoring software on a personal PC used for work?
Awarded Jun 2 at 18:42
A client did an unannounced penetration test on our platform
Awarded May 27 at 8:57
How to exploit publicy known vunerable version of jquery?
Awarded May 26 at 18:41
Security risks of using ffmpeg as part of web service
Awarded May 23 at 0:07
Does Oracle's GuardedString protect sensitive data against heap or memory dumps?
Awarded May 15 at 22:57
Hash as filename to protect data
Awarded May 13 at 19:26
1
2 3 4 5
…
55