Enlightened - Badge - Information Security Stack Exchange

Enlightened

First to answer and accepted with score of 10 or more. This badge can be awarded multiple times.

Awarded 3165 times.

SSH ED25519 Key Extract pk (32 bytes)

Awarded yesterday

Jakuje

5,5691 gold badge20 silver badges33 bronze badges

Google Chrome weird random Cipher Suite

Awarded Sep 23 at 22:20

Steffen Ullrich

196k30 gold badges393 silver badges448 bronze badges

Is enough to remove ".." from strings to avoid directory traversal attack?

Awarded Sep 16 at 1:34

Jeff Ferland♦

38.2k9 gold badges95 silver badges173 bronze badges

Where to store secrets in .NET applications?

Awarded Sep 15 at 19:32

CBHacking

45.4k3 gold badges84 silver badges121 bronze badges

Why are rsa-sha2-512 and rsa-sha2-256 supported but not reported by ssh -Q key?

Awarded Sep 15 at 13:35

bk2204

9,19422 silver badges20 bronze badges

Preparing to change over to new GPG-key - what to do with my old ones?

Awarded Aug 21 at 19:00

Ruscal

8415 silver badges9 bronze badges

OpenPGP keyserver URLs: what are typical or meaningful use-cases?

Awarded Aug 20 at 18:52

Jens Erat

24.3k12 gold badges81 silver badges103 bronze badges

Should CVE be assigned to an application even if the vulnerability is in a vulnerable 3rd-party library?

Awarded Aug 11 at 9:42

Benoit Esnard

14.7k7 gold badges69 silver badges68 bronze badges

What's the purpose of the MASK in a WebSocket?

Awarded Aug 10 at 17:41

Philipp

49.2k8 gold badges129 silver badges160 bronze badges

Create encryption key from decryption key (password)?

Awarded Aug 9 at 19:55

mti2935

22.1k2 gold badges49 silver badges70 bronze badges

How does setting Origin to null in a redirected CORS request protect against a confused deputy attack?

Awarded Aug 4 at 8:27

Jonah Benton

3,48714 silver badges21 bronze badges

Are revoked certificates removed from CRLs after expiration? Why is this secure?

Awarded Jul 23 at 23:42

Hector

10.9k3 gold badges43 silver badges45 bronze badges

Help me understand the relationship between GPG public keys, sub-keys and expiration dates

Awarded Jul 14 at 23:18

Jens Erat

24.3k12 gold badges81 silver badges103 bronze badges

Can nmap take a list of ports to scan from a file?

Awarded Jul 4 at 1:46

h4ckNinja

3,03617 silver badges25 bronze badges

Is there a way to use DNS to block access to my domain?

Awarded Jul 2 at 9:12

Steffen Ullrich

196k30 gold badges393 silver badges448 bronze badges

Displaying on screen without being recordable by another app

Awarded Jun 29 at 12:56

CBHacking

45.4k3 gold badges84 silver badges121 bronze badges

Does rebooting a phone daily increase your phone's security?

Awarded Jun 23 at 22:17

Esa Jokinen

18.4k5 gold badges56 silver badges59 bronze badges

Can we use a public key scheme for performing cryptographic commitment

Awarded Jun 21 at 2:17

Thomas Pornin

325k60 gold badges789 silver badges958 bronze badges

Security of only allowing a few vetted commands using $SSH_ORIGINAL_COMMAND

Awarded Jun 20 at 17:11

Celada

6665 silver badges10 bronze badges

Does public key cryptography provide any security advantages, or even just a different security model, over symmetric cryptography?

Awarded Jun 17 at 21:10

Ja1024

3,3389 silver badges15 bronze badges

Export GPG key from smartcard and import yubikey

Awarded Jun 15 at 13:36

Jens Erat

24.3k12 gold badges81 silver badges103 bronze badges

Is the ACME HTTP-01 challenge secure against MITMs?

Awarded Jun 14 at 0:40

Z.T.

8,3641 gold badge24 silver badges37 bronze badges

.exe with Digital Signature, showing SHA1 but the Certificate is SHA384, is it secure?

Awarded Jun 8 at 23:27

Crypt32

6,20214 silver badges25 bronze badges

Understanding ssh-rsa not in PubkeyAcceptedAlgorithms

Awarded May 24 at 17:57

Ja1024

3,3389 silver badges15 bronze badges

GnuPG + Yubikey 4: How to manually check that all keys are where they belong (on the Yubikey only)?

Awarded May 23 at 12:35

Jens Erat

24.3k12 gold badges81 silver badges103 bronze badges

Comparison between Firefox password manager and chrome password manager

Awarded May 21 at 18:11

John Deters

34.1k3 gold badges60 silver badges113 bronze badges

Is using PGP/MIME or PGP Inline more secure?

Awarded May 16 at 12:21

Jens Erat

24.3k12 gold badges81 silver badges103 bronze badges

What vulnerability is a math operation in an HTTP request trying to exploit?

Awarded May 3 at 12:20

Benoit Esnard

14.7k7 gold badges69 silver badges68 bronze badges

Domain about to expire. Afraid that new owners will spread malware

Awarded May 3 at 10:05

Kate

7,81725 silver badges27 bronze badges

Why is a password accompanied by a username deemed 'safer'?

Awarded May 2 at 14:21

OtherDevOpsGene

1,46512 silver badges12 bronze badges

Is it possible to generate a file with a given sha256sum checksum?

Awarded Apr 28 at 12:26

mentallurg

12.2k5 gold badges36 silver badges50 bronze badges

Is a responsible disclosure for hardware-based vulnerabilities even possible?

Awarded Apr 24 at 22:08

Steffen Ullrich

196k30 gold badges393 silver badges448 bronze badges

Changing session id after login

Awarded Apr 18 at 22:40

Henry F

6261 gold badge7 silver badges14 bronze badges

Why does the result of ssh-keyscan -H contain a header line with the un-hashed server ID?

Awarded Apr 17 at 9:51

Jakuje

5,5691 gold badge20 silver badges33 bronze badges

Is the SD card write protection hard-wired or optional?

Awarded Apr 15 at 9:56

scuzzy-delta

9,3133 gold badges35 silver badges55 bronze badges

How can data from VirtualBox leak to the host and how to avoid it?

Awarded Apr 9 at 1:30

Steffen Ullrich

196k30 gold badges393 silver badges448 bronze badges

Is SNI always used in TLS connections?

Awarded Apr 5 at 4:45

automatictester

6725 silver badges13 bronze badges

Is RAM wiped before use in another LXC container?

Awarded Apr 5 at 1:41

user10489

1,9602 gold badges7 silver badges15 bronze badges

How to crack `salt + SHA256(salt + password)` hashes with JTR?

Awarded Mar 31 at 8:10

benard

1411 silver badge4 bronze badges

How do open-source projects prevent disclosing a bug while fixing it?

Awarded Mar 24 at 13:55

schroeder♦

127k55 gold badges293 silver badges332 bronze badges

Are HTTPonly cookies secure enough for implementing "remember me" functionality?

Awarded Mar 18 at 12:08

CBHacking

45.4k3 gold badges84 silver badges121 bronze badges

The reason of using XOR operation in cryptographic algorithms

Awarded Mar 15 at 14:55

grochmal

5,8574 gold badges21 silver badges31 bronze badges

SSL issue captures Facebook app send out traffic

Awarded Mar 12 at 9:55

mentallurg

12.2k5 gold badges36 silver badges50 bronze badges

Why did OpenSSH create its own key format, and not use PKCS#8?

Awarded Mar 8 at 23:28

bishop

9087 silver badges11 bronze badges

Can the secret be derived from the checksum? Should the checksum be encrypted?

Awarded Mar 7 at 20:11

schroeder♦

127k55 gold badges293 silver badges332 bronze badges

Does the attacker need to be on the same network to carry out a deauthentication attack?

Awarded Mar 6 at 21:50

Jasen

1,2068 silver badges10 bronze badges

Why do many companies reject expired SSL certificates as bugs in bug bounties?

Awarded Mar 5 at 0:26

Steffen Ullrich

196k30 gold badges393 silver badges448 bronze badges

VeraCrypt PIM feature - Is it really necessary?

Awarded Mar 4 at 10:03

Enos D'Andrea

1,0876 silver badges15 bronze badges

Understanding of HTTP GET request

Awarded Feb 22 at 17:01

Steffen Ullrich

196k30 gold badges393 silver badges448 bronze badges

Why might I want to remove the wlwmanifest.xml file in WordPress?

Awarded Feb 14 at 8:34

vidarlo

15.2k2 gold badges45 silver badges57 bronze badges

Auditing, accounting, logging, and accountability... What's the difference?

Awarded Feb 13 at 16:47

Adi

44k16 gold badges137 silver badges169 bronze badges

Crashing the sha1() function in PHP?

Awarded Feb 5 at 17:56

Mama Raikou

6343 silver badges5 bronze badges

The rationale behind allowing `sudo -u root` but disallowing `sudo -u <any other user>`

Awarded Feb 3 at 15:17

fleitner

5884 silver badges12 bronze badges

Is UUID v4 cryptographically safe for passwords?

Awarded Jan 31 at 11:33

Casey

9156 silver badges19 bronze badges

How unique should I make my SSID?

Awarded Jan 24 at 12:47

KDEx

5,0192 gold badges22 silver badges35 bronze badges

pubring.gpg and pubring.gpg~ at install - why?

Awarded Jan 21 at 12:46

Hey

1,9351 gold badge18 silver badges25 bronze badges

How to handle emails as usernames under GDPR?

Awarded Jan 21 at 11:33

Niels van Reijmersdal

3032 silver badges6 bronze badges

How many bits of entropy should a password have to be reasonably future proof (10+ years)?

Awarded Jan 10 at 20:10

bk2204

9,19422 silver badges20 bronze badges

Randomly generated secrets: encoding the random bytes in base64 vs keeping them

Awarded Jan 9 at 20:11

vidarlo

15.2k2 gold badges45 silver badges57 bronze badges

SSH: What's the difference or interplay between /etc/ssh/[host files] and ~/.ssh/[public key]

Awarded Jan 8 at 13:04

gowenfawr

72.6k17 gold badges163 silver badges199 bronze badges

2 3 4 5

…

53 Next