Information Security

Necromancer

 Necromancer
Answer a question more than 60 days later with score of 5 or more. This badge can be awarded multiple times.
Awarded 1432 times.
Which elliptic curve should I use?
Awarded Nov 22 at 17:10
Is it a bad idea for a firewall to block ICMP?
Awarded Nov 21 at 17:18
How to securely store and use session IDs
Awarded Nov 18 at 18:10
Trying to understand what this PHP malware does
Awarded Nov 17 at 17:49
What is the Digests section in cryptsetup
Awarded Nov 17 at 12:27
What are the differences between TPM and HSM?
Awarded Nov 9 at 10:56
How do I produce a CA signed public key?
Awarded Oct 13 at 21:41
Never use stored session in sqlmap
Awarded Oct 12 at 19:56
What's a practical example of encryption "in use" or "in process"?
Awarded Oct 4 at 18:18
Is there any reason to include the remote ip when using reCaptcha?
Awarded Oct 2 at 0:50
OpenSSH declares ssh-rsa deprecated. What do I do next?
Awarded Oct 1 at 14:12
How To Protect Tomcat 7 Against Slowloris Attack
Awarded Sep 20 at 21:31
Are there faux/fake malicious websites to test web reputation services similar to EICAR?
Awarded Sep 20 at 11:26
Why use .ENV? What's wrong with storing secrets in a config.php file outside root directory?
Awarded Sep 19 at 17:17
Unattended Disk Encryption
Awarded Sep 15 at 0:17
MAC vs DAC vs RBAC
Awarded Sep 13 at 10:36
Is allowing blob: in Content-Security-Policy a risk?
Awarded Sep 11 at 22:18
How to pentest an AngularJS based SPA (Single Page Application)
Awarded Sep 8 at 14:12
Understanding GnuPG --export-options backup
Awarded Sep 4 at 12:56
How does SSLstrip work?
Awarded Aug 28 at 17:48
Disclose to user if account exists?
Awarded Aug 22 at 18:31
Do a TPM's benefits outweigh the risks?
Awarded Aug 22 at 4:11
when should i use HMAC-based JWT?
Awarded Jul 8 at 9:49
Why use OpenID Connect instead of plain OAuth2?
Awarded Jun 26 at 18:28
How secure are expiring tokens and refresh tokens?
Awarded Jun 19 at 13:21
Connection between PIN/password and encryption keys in Android
Awarded Jun 18 at 23:36
How to know if certificate is self-signed
Awarded Jun 1 at 11:56
Is a SSL Certificate for a static IP Address a good idea
Awarded May 31 at 20:01
What are the risks of exposing the Docker for Windows daemon on localhost?
Awarded May 23 at 15:32
Chrome SSL Warning: "You cannot proceed because the website operator has requested heightened security for this domain. "
Awarded May 17 at 14:26
How to properly secure an ActiveMQ instance, and what are all of the different files for?
Awarded May 15 at 9:13
Why would some Windows executables not have a "Digital Signatures" tab?
Awarded May 12 at 19:28
How to prevent BadUSB attacks on Linux desktop?
Awarded May 9 at 20:46
Differences between the Root user and users with AdministratorAccess in AWS
Awarded May 8 at 19:49
Could an attacker spoof a whitelisted IP to access the network?
Awarded May 4 at 14:47
Is it secure to store a two factor authentication seed in a password manager?
Awarded May 2 at 12:56
What is the default cipher algorithm for GnuPG?
Awarded Apr 27 at 14:03
Can ECC be used without infringing on patents?
Awarded Apr 15 at 11:40
Do PKCS #11 keyfiles on a yubikey actually improve security for Veracrypt?
Awarded Apr 7 at 7:57
Testing a hardware random number generator
Awarded Apr 1 at 21:27
Does giving out Dell service tag of my device pose a security risk?
Awarded Mar 24 at 17:35
GPG encryption failed - Unusable public key
Awarded Mar 20 at 19:05
How do I know if Google keyboard input is safe for use?
Awarded Mar 20 at 16:56
Need to access old forgotten router that only supports SSLv3
Awarded Mar 16 at 17:08
Does WPA3 OWE mean the return of Evil Twins?
Awarded Mar 14 at 11:22
What is the difference between active reconnaissance and scanning/enumeration
Awarded Mar 14 at 1:01
Why some applications host the API in a different domain?
Awarded Mar 6 at 7:25
Does LUKS protect the filesystem integrity?
Awarded Mar 2 at 0:10
Portability of SED supporting TCG Opal 2.0
Awarded Feb 28 at 7:55
What is the connection between CORS and SameSite cookie attribute?
Awarded Feb 27 at 19:34
How to crack (get secret from) Android Keystore System
Awarded Feb 21 at 2:16
Do security questions make sense?
Awarded Feb 20 at 20:27
JWT: Choosing between HMAC and RSA
Awarded Feb 20 at 14:04
How do you capture ALL the traffic from an Android app?
Awarded Feb 16 at 22:15
Are VPNS vulnerable to active man in the middle attacks?
Awarded Feb 16 at 6:28
HIDS - Choosing between regular OSSEC or Wazuh fork
Awarded Feb 13 at 14:41
Are HTTPOnly Cookies submitted via XmlHTTPRequest with withCredentials=True?
Awarded Feb 8 at 4:55
How do you securely delete httpOnly cookies previously used for login?
Awarded Feb 3 at 6:03
Online Retailer asks for a copy of Credit Card and Drivers License
Awarded Feb 1 at 16:32
Determine if private key belongs to certificate?
Awarded Jan 31 at 17:56
1
2 3 4 5
…
24

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.