Favorite Question - Badge - Information Security Stack Exchange

Favorite Question

Question saved by 25 users. This badge can be awarded multiple times.

Awarded 519 times.

Should I use CSRF protection for GET requests?

Awarded Sep 8 at 12:27

jtpereyda

1,5503 gold badges17 silver badges27 bronze badges

What security scheme is used by PDF password encryption, and why is it so weak?

Awarded Aug 7 at 23:35

March Ho

1,7051 gold badge14 silver badges15 bronze badges

Why isn't open WiFi encrypted?

Awarded Aug 7 at 22:21

Nathan Long

2,7244 gold badges24 silver badges28 bronze badges

Migrating GPG master keys as subkeys to new master key

Awarded Jun 8 at 15:28

lz.

6011 gold badge6 silver badges5 bronze badges

Are random URLs a safe way to protect profile photos?

Awarded May 14 at 8:50

owenfi

9331 gold badge7 silver badges8 bronze badges

Extract pre-master keys from an OpenSSL application

Awarded Feb 19 at 13:35

Lekensteyn

6,0686 gold badges39 silver badges62 bronze badges

Are phone calls on a GSM network encrypted?

Awarded Feb 15 at 17:13

Ram Rachum

2,0282 gold badges21 silver badges20 bronze badges

Diffie-Hellman and its TLS/SSL usage

Awarded Jan 7 at 18:27

David Halter

5891 gold badge5 silver badges6 bronze badges

Why would I ever use AES-256-CBC if AES-256-GCM is more secure?

Awarded Dec 16, 2022 at 5:25

The Quantum Physicist

1,0391 gold badge8 silver badges10 bronze badges

Possible to use both private key and password authentication for ssh login?

Awarded Nov 7, 2022 at 2:51

chrisdotcode

7331 gold badge6 silver badges6 bronze badges

Is Signal still more secure than WhatsApp?

Awarded Oct 16, 2022 at 18:03

SEJPM

9,7206 gold badges38 silver badges69 bronze badges

Docker as a sandbox for untrusted code

Awarded Aug 20, 2022 at 15:32

Hartger

6111 gold badge6 silver badges7 bronze badges

What is the specific reason to prefer bcrypt or PBKDF2 over SHA256-crypt in password hashes?

Awarded Jul 25, 2022 at 20:03

ilkkachu

2,1552 gold badges12 silver badges16 bronze badges

SSL with GET and POST

Awarded Jul 7, 2022 at 17:42

TomJ

7531 gold badge6 silver badges5 bronze badges

How do antiviruses scan for thousands of malware signatures in a short time?

Awarded Jul 3, 2022 at 9:40

Koorosh Pasokhi

1,1071 gold badge9 silver badges11 bronze badges

What is the difference between a Hash Function and a Cryptographic Hash Function?

Awarded Jun 30, 2022 at 12:10

Mr.Eddart

1,0031 gold badge8 silver badges6 bronze badges

Why should I offer HTTP in addition to HTTPS?

Awarded Jun 21, 2022 at 11:27

lofidevops

3,6107 gold badges25 silver badges32 bronze badges

Store encrypted user data in database

Awarded Apr 18, 2022 at 12:16

Code

4031 gold badge5 silver badges6 bronze badges

How does CORS prevent XSS?

Awarded Apr 7, 2022 at 21:26

Gigi

1,3101 gold badge11 silver badges13 bronze badges

Can wiped SSD data be recovered?

Awarded Mar 25, 2022 at 0:31

cutrightjm

1,7444 gold badges18 silver badges31 bronze badges

Awarded Mar 15, 2022 at 20:10

binaryanomaly

1,2813 gold badges13 silver badges21 bronze badges

Why is JavaScript "safe" to run in the browser?

Awarded Mar 8, 2022 at 23:51

PBeezy

1,7512 gold badges11 silver badges11 bronze badges

Are password-protected ZIP files secure?

Awarded Feb 15, 2022 at 12:06

trejder

3,6195 gold badges25 silver badges36 bronze badges

Differences between using Tor browser and VPN

Awarded Feb 6, 2022 at 20:33

Thomas

3,8614 gold badges23 silver badges27 bronze badges

What are the differences between TPM and HSM?

Awarded Feb 1, 2022 at 13:40

Ali

2,7541 gold badge15 silver badges23 bronze badges

How to verify the checksum of a downloaded file (pgp, sha, etc.)?

Awarded Dec 15, 2021 at 19:22

ThankYouSRT

1,3253 gold badges12 silver badges15 bronze badges

How can ISPs handle DDoS attacks?

Awarded Nov 14, 2021 at 13:33

R1W

1,6273 gold badges16 silver badges31 bronze badges

How do I safely inspect a potentially malicious website?

Awarded Oct 30, 2021 at 23:03

Mirsad

10.1k8 gold badges34 silver badges54 bronze badges

Port Knocking is it a good idea?

Awarded Oct 12, 2021 at 22:27

Mark Davidson

9,4576 gold badges47 silver badges61 bronze badges

Length of passwords that are rainbow table safe

Awarded Oct 8, 2021 at 3:17

rubo77

2,39010 gold badges28 silver badges49 bronze badges

Can I safely preview a short link?

Awarded Oct 6, 2021 at 9:28

stackprotector

1,6533 gold badges7 silver badges19 bronze badges

Why add username to salt before hashing a password?

Awarded Sep 22, 2021 at 21:56

JustinLovinger

7901 gold badge6 silver badges8 bronze badges

Generic error message for wrong password or username - is this really helpful?

Awarded Sep 19, 2021 at 17:42

Mirco

9131 gold badge8 silver badges8 bronze badges

Is refreshing an expired JWT token a good strategy?

Awarded Sep 15, 2021 at 3:16

Guillaume Vincent

9831 gold badge7 silver badges9 bronze badges

Can RAM retain data after removal?

Awarded Sep 12, 2021 at 12:27

MattP

7831 gold badge6 silver badges7 bronze badges

Is it bad that my ed25519 key is so short compared to a RSA key?

Awarded Sep 8, 2021 at 13:25

Alex

1,3972 gold badges10 silver badges9 bronze badges

Is Plaid, a service which collects user’s banking login information, safe to use?

Awarded Aug 5, 2021 at 7:18

gfrung4

2,6393 gold badges9 silver badges8 bronze badges

Why is SMS used as a way of verifying a user's mobile, when it is not even encrypted in transit?

Awarded Jul 21, 2021 at 16:10

Mohammed Rady

1,2091 gold badge6 silver badges13 bronze badges

Is it possible make brute-force attacks ineffective by giving false positive answers to failed log-in attempts?

Awarded Jun 12, 2021 at 14:26

Tweakimp

8911 gold badge7 silver badges8 bronze badges

Is CORS helping in anyway against Cross-Site Forgery?

Awarded May 27, 2021 at 6:42

Dan Dinu

7691 gold badge6 silver badges5 bronze badges

Can someone explain what exactly is accomplished by generation of DH parameters?

Awarded May 14, 2021 at 6:30

Steven Lu

9773 gold badges12 silver badges13 bronze badges

Is using 'dot' and 'at' in email addresses in public text still useful?

Awarded Apr 29, 2021 at 16:52

n611x007

2,2853 gold badges17 silver badges17 bronze badges

SSH Key: Ed25519 vs RSA

Awarded Apr 11, 2021 at 9:30

Ben Richard

3,4865 gold badges18 silver badges18 bronze badges

Why is Math.random() not designed to be cryptographically secure?

Awarded Mar 7, 2021 at 5:57

forest

66.4k20 gold badges211 silver badges269 bronze badges

How does Shutterstock keep getting my latest debit card number?

Awarded Feb 23, 2021 at 18:04

M -

1,9175 gold badges10 silver badges13 bronze badges

Invalid users trying to log in to my server

Awarded Feb 22, 2021 at 7:33

mk_89

6511 gold badge6 silver badges5 bronze badges

How to determine if a browser is using an SSL or TLS connection?

Awarded Feb 22, 2021 at 7:33

zhtway

1,1631 gold badge8 silver badges9 bronze badges

What is the difference between authenticity and non-repudiation?

Awarded Jan 13, 2021 at 1:31

Max

6721 gold badge6 silver badges8 bronze badges

Exploiting MD5 vulnerability in this PHP form?

Awarded Dec 21, 2020 at 12:13

Tom

9001 gold badge8 silver badges14 bronze badges

Why not allow spaces in a password?

Awarded Nov 23, 2020 at 21:04

David Cary

2,7304 gold badges20 silver badges20 bronze badges

How Does A Random Salt Work? [duplicate]

Awarded Oct 31, 2020 at 18:42

Kevin DiTraglia

7711 gold badge6 silver badges8 bronze badges

What layer is TLS?

Awarded Oct 10, 2020 at 1:40

Andrew Spott

9821 gold badge7 silver badges8 bronze badges

Why do people still use/recommend MD5 if it has been proven weak since 1996?

Awarded Sep 29, 2020 at 20:03

Marek Sebera

2,2233 gold badges21 silver badges27 bronze badges

What are requirements for HMAC secret key?

Awarded Sep 20, 2020 at 5:02

ivstas

8031 gold badge7 silver badges6 bronze badges

What are the toughest SSH daemon settings in terms of encryption, handshake, or other cryptographic settings? [duplicate]

Awarded Aug 13, 2020 at 20:50

Vlastimil Burián

1,6772 gold badges21 silver badges38 bronze badges

Why block outgoing network traffic with a firewall?

Awarded Aug 13, 2020 at 2:28

Alex McCloy

8331 gold badge7 silver badges5 bronze badges

How do very big companies manage their most important passwords / keys?

Awarded Jul 30, 2020 at 16:15

Basj

9632 gold badges9 silver badges16 bronze badges

Do I need CSRF token if I'm using Bearer JWT?

Awarded Jul 28, 2020 at 13:18

Igor Pomogai

1,3632 gold badges9 silver badges7 bronze badges

What's the difference between HMAC-SHA256(key, data) and SHA256(key + data)

Awarded Jul 26, 2020 at 11:26

phillips1012

8111 gold badge7 silver badges3 bronze badges

Best practices for securing an android device

Awarded Jul 15, 2020 at 8:50

Chris Dale

16.2k10 gold badges59 silver badges97 bronze badges

2 3 4 5

…

9 Next