Skip to main content
Information Security

Good Answer

 Good Answer
Answer score of 25 or more. This badge can be awarded multiple times.
Awarded 4697 times.
Why did TLS 1.3 drop AES-CBC?
Awarded 2 days ago
Why might an operating system require a restart after N failed login attempts?
Awarded Dec 9 at 13:21
How are all public computers (libraries, etc.) not full of malware?
Awarded Dec 1 at 22:32
Why is TCP more secure than UDP?
Awarded Nov 27 at 20:51
Is this idea for a password manager secure? If so, why doesn't anybody use it?
Awarded Nov 26 at 10:10
Given extensive protections in modern operating systems that make buffer overflow exploits unfeasible, should I even bother studying these?
Awarded Nov 25 at 20:26
Why don't we use HTML password inputfields for usernames and 2FA codes in the front-end of web applications?
Awarded Nov 15 at 19:25
OpenSSL, x509: what's the significance of CN (Common Name)?
Awarded Nov 8 at 19:11
Why do best practices recommend against adding your own pepper to passwords before hashing?
Awarded Nov 4 at 9:12
What do the dots and pluses mean when OpenSSL generates keys?
Awarded Oct 29 at 6:40
How can I block localhost access from other computers on the same local network?
Awarded Oct 23 at 21:36
When might it *not* be a good idea to reset your password immediately?
Awarded Oct 21 at 14:21
Is it a mistake to use a password that has previously been used (by anyone ever)?
Awarded Oct 21 at 2:11
Should I reset my password on Internet Archive?
Awarded Oct 18 at 20:10
Could there be a legitimate reason for a SSH server to allow null authentication, to anyone?
Awarded Oct 18 at 9:58
Is forcing users to change passwords useful?
Awarded Oct 12 at 17:21
Is LetsEncrypt activity Public?
Awarded Oct 7 at 13:40
Is it possible to detect 100% of SQLi with a simple regex?
Awarded Oct 6 at 15:07
Why should one use globs over regex when doing filename pattern matching?
Awarded Oct 6 at 11:57
Is this link a scam ? gbr01.safelinks.protection.outlook.com/?
Awarded Oct 3 at 0:34
Determining Entropy in PHP
Awarded Sep 18 at 13:53
How are you supposed to trust SSO popups in desktop and mobile applications?
Awarded Sep 18 at 8:22
Determining Entropy in PHP
Awarded Sep 17 at 22:03
Why are some Cloudflare challenges CPU intensive?
Awarded Sep 13 at 14:09
Is it safe to include an API key in a request's URL?
Awarded Sep 11 at 13:20
Why is passing the session id as url parameter insecure?
Awarded Sep 11 at 12:57
Is it secure to block passwords that are too similar to other employees' old passwords?
Awarded Sep 11 at 10:18
What prevents random software installation popups from mis-interpreting our consents
Awarded Sep 10 at 17:45
Is loss of availability automatically a security incident?
Awarded Sep 6 at 11:56
Whats the safest way to store a password in database?
Awarded Sep 3 at 10:48
What prevents a browser from saving and tracking passwords entered to a site?
Awarded Aug 29 at 17:09
understanding the "Offering RSA public key" step during SSH connection initialization
Awarded Aug 28 at 20:27
How can you trust a forensic scientist to have maintained the chain of custody?
Awarded Aug 28 at 18:27
My school wants me to download an SSL certificate to connect to WiFi. Can I just avoid doing anything private while on the WiFi?
Awarded Aug 28 at 14:33
How can you trust a forensic scientist to have maintained the chain of custody?
Awarded Aug 27 at 13:18
What prevents applications from misusing private keys?
Awarded Aug 22 at 6:39
Is my encryption format secure?
Awarded Aug 19 at 19:12
Storing KeePass database in cloud. How safe?
Awarded Aug 19 at 0:18
can a CPU once removed retain information that poses a security concern?
Awarded Aug 16 at 19:33
What is the purpose of the "Password minimum age" setting?
Awarded Aug 8 at 12:33
Difference between TPM, TEE and SE
Awarded Aug 6 at 10:36
What techniques are there for preventing radio-signal replay attacks?
Awarded Aug 5 at 11:12
Isn't manual port forwarding actually less safe than UPnP?
Awarded Aug 2 at 6:12
Why is much harder to encrypt emails, compared to web pages?
Awarded Jul 29 at 22:37
Securing Transactional Email: User Input Escaping for a email subject
Awarded Jul 26 at 17:26
Does Event Viewer have any sensitive information like password, or such info?
Awarded Jul 25 at 14:51
How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
Awarded Jul 23 at 18:32
Can trusted timestamping be faked by altering some bytes within the document?
Awarded Jul 23 at 9:17
ELI5: If SSL encrypts traffic, why does it expire?
Awarded Jul 22 at 21:52
How to receive large files guaranteeing authenticity, integrity and sending time
Awarded Jul 20 at 20:32
How to receive large files guaranteeing authenticity, integrity and sending time
Awarded Jul 20 at 1:42
Is a "single" cpu safer than multiple cores?
Awarded Jul 9 at 21:46
Should mail addresses for logins be stored hashed to minimize impact of data loss?
Awarded Jul 4 at 9:05
HTTP: how likely are you to be compromised by using it just once?
Awarded Jun 25 at 15:48
Why is SHA-256 not good for passwords?
Awarded Jun 23 at 7:05
What is the difference between a Hash Function and a Cryptographic Hash Function?
Awarded Jun 22 at 13:50
Could a Google Chrome extension read my password?
Awarded Jun 22 at 7:57
Does the recommendation to use password managers also apply to corporate environments?
Awarded Jun 18 at 16:26
JWT: Choosing between HMAC and RSA
Awarded Jun 18 at 11:49
SQL injection is 17 years old. Why is it still around?
Awarded Jun 18 at 8:40
1
2 3 4 5
…
79