Information Security

Good Question

 Good Question
Question score of 25 or more. This badge can be awarded multiple times.
Awarded 2618 times.
How do "Confidence images" on my bank's login page improve security?
Awarded 4 hours ago
Is a safelinks.protection.outlook.com link phishing?
Awarded 10 hours ago
Does the X-Permitted-Cross-Domain-Policies header have any benefit for my website if I'm not using Adobe products?
Awarded 22 hours ago
How is storing an API secret key in plaintext (in a database) secure?
Awarded yesterday
Is it okay to sign a PGP key without an IRL meeting?
Awarded yesterday
What is the point of restricting a google API key by HTTP referer?
Awarded Sep 7 at 13:33
Relationship between RSA, Diffie-Hellman Key Exchange, PKI and X.509?
Awarded Aug 20 at 6:19
Create backup Yubikey with identical PGP keys
Awarded Jul 20 at 7:35
Simple string comparisons not secure against timing attacks [duplicate]
Awarded Jul 13 at 21:09
Is it reasonable to use KeePassXC with YubiKey?
Awarded Jul 12 at 15:48
How secure are sha256 + salt hashes for password storage [duplicate]
Awarded Jul 7 at 21:09
Password hashing on frontend or backend? [duplicate]
Awarded Jul 3 at 4:56
Why use usernames and not just email addresses to identify users?
Awarded Jun 30 at 14:26
Does rebooting a phone daily increase your phone's security?
Awarded Jun 25 at 1:10
What's a "safe" URL shortening algorithm?
Awarded Jun 20 at 19:46
Java SecureRandom doesn't block? How?
Awarded Jun 19 at 9:42
Is checking the Referer and Origin headers enough to prevent CSRF, provided that requests with neither are rejected?
Awarded Jun 15 at 11:13
GPG why is my trusted key not certified with a trusted signature?
Awarded Jun 14 at 5:45
Is it possible to provide Internet to prisoners without risks of them contacting victims or accomplices as a matter of policy?
Awarded Jun 6 at 16:40
The difference between Subject Key Identifier and sha1Fingerprint in X509 Certificates
Awarded Jun 5 at 19:52
Attack vector, attack surface, vulnerability, exploit: Where is the difference?
Awarded Jun 3 at 15:35
Does a password policy with a restriction of repeated characters increase security?
Awarded May 30 at 8:57
What chars should I not allow in passwords?
Awarded May 30 at 8:57
OpenSSH declares ssh-rsa deprecated. What do I do next?
Awarded May 20 at 22:17
Domain about to expire. Afraid that new owners will spread malware
Awarded May 4 at 16:37
What vulnerability is a math operation in an HTTP request trying to exploit?
Awarded May 4 at 13:57
How to handle emails as usernames under GDPR?
Awarded Apr 24 at 1:27
Best practices for storing 2FA recovery codes
Awarded Apr 10 at 11:06
Is RAM wiped before use in another LXC container?
Awarded Apr 5 at 14:58
Why does PGP use symmetric encryption and RSA?
Awarded Apr 3 at 19:56
How to view all SSH authorized_keys for a unix server
Awarded Mar 21 at 14:48
What is the risk and mitigation of accidentally typing a YubiKey password in an open forum?
Awarded Mar 16 at 20:55
Difference between TPM, TEE and SE
Awarded Mar 15 at 16:01
Is email scraping still a thing for spammers
Awarded Mar 9 at 12:25
How does basic HTTP Auth work?
Awarded Mar 7 at 9:55
PEM, CER, CRT, P12 - what is it all about?
Awarded Mar 3 at 7:00
Encrypt existing SSH key
Awarded Feb 18 at 0:55
Malicious code somehow hidden with whitespace?
Awarded Feb 16 at 9:16
Do I still need CSRF protection when SameSite is set to Lax?
Awarded Feb 15 at 20:37
Is it unsafe to use environmental variables for secret data?
Awarded Feb 10 at 0:09
Crashing the sha1() function in PHP?
Awarded Feb 7 at 10:20
Could logless VPNs be traced?
Awarded Feb 5 at 2:49
Detecting and removing Absolute persistence technology
Awarded Jan 26 at 21:58
What is the purpose of hiding spam links in some obscure forum posts?
Awarded Dec 29, 2022 at 22:19
How long (in letters) are encryption keys for AES? [closed]
Awarded Dec 9, 2022 at 0:09
Should a bank be able to shorten your password without your involvement?
Awarded Nov 27, 2022 at 17:22
What is the difference between JWT and encrypting some json manually with AES?
Awarded Nov 25, 2022 at 2:16
Difference between Certificate pinning and public key pinning
Awarded Nov 18, 2022 at 21:04
What is the difference between a certificate and a private key?
Awarded Nov 18, 2022 at 14:17
Is it possible to boot an encrypted server remotely and securely?
Awarded Nov 15, 2022 at 21:41
How can I publish data from a private network without adding a bidirectional link to another network
Awarded Nov 13, 2022 at 18:26
Alternatives to HTML's deprecated <keygen> for client certs?
Awarded Nov 10, 2022 at 11:15
What is the purpose of associated authenticated data in AEAD?
Awarded Oct 22, 2022 at 21:40
Why did they stop adding physical "write protect" mechanism?
Awarded Oct 19, 2022 at 13:31
What is the corrupted image vulnerability? How does it work?
Awarded Oct 19, 2022 at 3:40
What is the difference between Ghidra and Ida?
Awarded Oct 15, 2022 at 10:31
How to set up a single sign-on for multiple domains?
Awarded Oct 13, 2022 at 13:40
What steps should be taken to validate user uploaded images within an application?
Awarded Oct 13, 2022 at 13:40
Does prepending a salt to the password instead of inserting it in the middle decrease security?
Awarded Oct 13, 2022 at 13:26
Encrypting using AES 256, do I need IV? [duplicate]
Awarded Oct 10, 2022 at 17:25
1
2 3 4 5
…
44

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.