Information Security

Nice Question

 Nice Question
Question score of 10 or more. This badge can be awarded multiple times.
Awarded 7101 times.
How are browsers able to find and construct an alternate trusted chain path?
Awarded 20 hours ago
Did a Huawei modem just try to do a Man-In-The-Middle attack on me?
Awarded yesterday
Are banking and finance apps safe on an Android phone with cracked apps?
Awarded 2 days ago
Where are FIDO U2F Keys Stored?
Awarded 2 days ago
How do I secure my login page?
Awarded Dec 1 at 19:04
What's wrong with the use of a WAF (Web Application Firewall)?
Awarded Nov 28 at 14:08
How to best obfuscate a built-in key in an application?
Awarded Nov 28 at 5:57
Is there anything like a known proxy server IP list/database?
Awarded Nov 25 at 1:57
Does referrer header checking offer any real world security improvement?
Awarded Nov 22 at 19:43
Why is the absence of a Content-Type header with a HTTP 204 response considered a security vulnerability and what should we do about it?
Awarded Nov 22 at 16:33
What's a good time period before refreshing CSRF token of the user session?
Awarded Nov 22 at 16:27
When should I generate a new CSRF token
Awarded Nov 20 at 11:58
Microsoft said UAC is not a security barrier. But in what cases?
Awarded Nov 20 at 2:40
To DMZ, or not to DMZ
Awarded Nov 19 at 21:41
nmap to scan all resolved ip addresses for a given domain name?
Awarded Nov 17 at 10:10
Why don't web email clients put emails in an iframe?
Awarded Nov 15 at 16:42
How to store IV and key temporarily but securely
Awarded Nov 9 at 9:09
Is WSL 2 secure for commercial work?
Awarded Nov 5 at 13:49
Why do some websites require logging in twice? Not two steps, but two full username/password entries
Awarded Nov 3 at 16:42
Extracting openssl pre-master secret from nginx
Awarded Nov 3 at 4:57
What security risks are involved in using older HTTP protocols such as HTTP/1.x that would justify upgrading to HTTP/2 or HTTP/3?
Awarded Nov 2 at 15:20
Does "=cmd" CSV injection still exist in 2020?
Awarded Nov 1 at 16:40
How do CORS proxy websites work?
Awarded Oct 30 at 8:21
Does Mozilla Thunderbird leak any personally identifying data in email headers?
Awarded Oct 26 at 11:47
Is it safe to store the state parameter value in cookie?
Awarded Oct 25 at 21:25
Security implications of not reusing SSL session in FTPS
Awarded Oct 23 at 1:48
Can fingerprint readers be trusted?
Awarded Oct 19 at 5:18
Diffie Hellman Group Matching to IPSec Encryption Algorithm
Awarded Oct 17 at 21:52
How could a security control introduce a privacy issue?
Awarded Oct 16 at 13:42
Difference between Secure Simple Pairing and Secure Connections in Bluetooth?
Awarded Oct 13 at 13:08
What are the consequences of increasing the "--risk" option of sqlmap?
Awarded Oct 6 at 11:55
Is behavioural analysis (e.g. keystroke dynamics) a reliable security mechanism for MFA?
Awarded Oct 3 at 14:06
Why do browsers send such detailed user agent strings?
Awarded Oct 2 at 8:05
Store user passwords in NoSQL database?
Awarded Sep 29 at 18:07
Why does Windows have a place to store intermediate SSL certificates?
Awarded Sep 27 at 9:51
Would it make sense to use Bcrypt and PBKDF2 together?
Awarded Sep 26 at 7:45
Is it common practice to take multiple hashes of the same object?
Awarded Sep 23 at 16:05
How is Xiaomi changing my browser home page?
Awarded Sep 10 at 16:09
Is there a problem with issuing a HSTS header in PHP?
Awarded Sep 10 at 11:15
Current best practices to prevent persistent XSS attacks
Awarded Sep 8 at 22:20
What gpg defaults can be improved, when performance is not an issue?
Awarded Sep 8 at 19:02
Is SQL injection possible via integer?
Awarded Sep 6 at 4:21
Will using a self-signed SSL certificate on a mail server hinder communication?
Awarded Sep 3 at 19:00
Is a backend API server vulnerable to CSRF?
Awarded Sep 1 at 21:12
Does enabling EnableLinkedConnections pose a security risk?
Awarded Sep 1 at 8:33
Where to store hashes, salts, keys in Desktop Applications
Awarded Sep 1 at 6:26
Is Tor over VPN a security risk?
Awarded Aug 21 at 15:41
Unknown automatically generated email in sent folder
Awarded Aug 20 at 8:42
Verify a key was signed by another key
Awarded Aug 18 at 5:46
How to attract traffic to a honeypot
Awarded Aug 12 at 14:17
PGP RSA key size - encryption/decryption time
Awarded Aug 12 at 11:05
Can I encrypt with GnuPG and decrypt with OpenSSL?
Awarded Aug 10 at 15:56
IN OAuth 2.0, how is the client secret supposed to be kept secret?
Awarded Jul 26 at 14:22
What information can you get with only a private IP address?
Awarded Jul 25 at 6:48
Which extensions to use for a S/MIME certificate?
Awarded Jul 21 at 4:50
how to make socat ignore client certificate?
Awarded Jul 21 at 1:41
MAC randomization for Bluetooth?
Awarded Jul 20 at 22:26
Apache - strange requests in logs
Awarded Jul 15 at 8:55
Does openssl refuse self signed certificates without basic constraints?
Awarded Jul 14 at 7:16
How does sending referrer HTTP headers protect against CSRF attacks?
Awarded Jul 10 at 14:11
1
2 3 4 5
…
119

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.