Skip to main content
Information Security

Popular Question

 Popular Question
Question with 1,000 views. This badge can be awarded multiple times.
Awarded 30704 times.
If you don't need a PIN for your card in Apple Wallet and don't need a PIN to use Apple Wallet, how is that safe?
Awarded 3 hours ago
A website asks you to enter a Microsoft/Google/Facebook password. How do you know it is safe?
Awarded 6 hours ago
Why do most VPN protocols work on the Transport Layer and not on the Network Layer instead?
Awarded 6 hours ago
How to intercept XmlHttpRequest with OWASP ZAP
Awarded 8 hours ago
Why would a bus ticketing app require an Internet connection when you board the bus?
Awarded 12 hours ago
How can website server recognize incoming Tor or VPN connection? [duplicate]
Awarded 13 hours ago
ssh-keygen: How to guarantee the uniqueness of serial numbers?
Awarded 19 hours ago
Accessing a hidden token file in a website using RFI?
Awarded 22 hours ago
Certificate Propagation Service CertPropSvc immediately stops
Awarded yesterday
It's possible to bypass CSRF protection Referer-Based by spoof the referer in browser victim ? (POST-Based)
Awarded yesterday
How to mimic a HTTP POST request?
Awarded yesterday
Reseting passwords using IP address
Awarded yesterday
How would you explain CSRF token to a newbie? How is it safer than cookie based approach?
Awarded yesterday
Is it possible to proxy USB and disconnect when a certain sequence is intercepted before it is (fully) passed to the real USB device?
Awarded yesterday
How to defend against network traffic pattern correlation attacks?
Awarded yesterday
How does the MITM attack work when a client does not check the hostname vs the certificate? [duplicate]
Awarded yesterday
SQL Lite Injection via CSS URL
Awarded yesterday
Questions on the variations of RSA keys
Awarded yesterday
Will a virus/malware travel between devices when logged into the same Google account
Awarded yesterday
How to tie an authorisation token to a device?
Awarded yesterday
Will changing the Wifi router fix a hijacked Wifi problem? [closed]
Awarded yesterday
Perform static analysis over executable Jar
Awarded yesterday
Where and how to create secret on embedded Linux system?
Awarded yesterday
How to add a malicious file scanner to live server?
Awarded 2 days ago
Sanitising a file/folder path from user input
Awarded 2 days ago
Has there ever seen a recorded case of a M.2 infected SSD firmware?
Awarded 2 days ago
fTPM more secure than TPM when using Bitlocker?
Awarded 2 days ago
Why might an operating system require a restart after N failed login attempts?
Awarded Dec 8 at 11:31
Consequences of trusting a PC from my iPhone
Awarded Dec 8 at 1:56
Metasploit with multiple console instances
Awarded Dec 8 at 1:03
Is it reasonable to store encrypted TOTP keys + authentication credentials on a single device (for end-user)?
Awarded Dec 7 at 18:58
Monitor HTTPS URL logging of a specific device of a Network
Awarded Dec 7 at 15:05
Is it bad practice or major security risk to cache decoded auth tokens in my backend?
Awarded Dec 7 at 0:13
Validate if URL (message) is coming from a trusted source
Awarded Dec 6 at 21:21
of the cookies created by OTHER websites, which ones would the browser allow a website to access?
Awarded Dec 6 at 20:45
Bash: Why would sourcing a file be less safe than bashing it (executing in another session)?
Awarded Dec 6 at 17:31
Now that `sshcontrol` has been deprecated, how to use gpg key for ssh authentication with an agent?
Awarded Dec 6 at 15:51
Is there a consensus on whether HTML encoding should happen upon upload or retrieval/display for defense against stored XSS?
Awarded Dec 6 at 15:33
How can I understand the zip2john hash format?
Awarded Dec 6 at 12:07
My ISP seems to be intercepting my DNS requests even though my router is set to use Cloudflare [duplicate]
Awarded Dec 6 at 10:19
How Zscaler enables system wide proxy?
Awarded Dec 6 at 7:41
Feasibility of persistent iOS malware which survives factory reset
Awarded Dec 6 at 1:26
What use does a TPM have for accurate timekeeping?
Awarded Dec 6 at 0:50
Metasploit opens Meterpreter, but the shell is unresponsive [closed]
Awarded Dec 5 at 22:05
Why is not checking the origin of postMessage insecure?
Awarded Dec 5 at 19:12
How does TLS work with another protocol (example SIP)?
Awarded Dec 5 at 15:35
Bank issued new credit card as a 'safety measure' but 16 digit acount number is the same
Awarded Dec 5 at 15:08
What is the purpose of the ID Token if I can get the user info from the userinfo endpoint?
Awarded Dec 5 at 9:50
How to allow a user to login via client X.509 certificate or username/password?
Awarded Dec 4 at 19:09
How to store an user access token on a third party site in the front end
Awarded Dec 4 at 14:30
Does distributing an SSL certificate and private key pose a security risk?
Awarded Dec 4 at 10:11
How can I use a user's own SMS service to send OTP and make mobile number verification in my Android app?
Awarded Dec 4 at 3:07
Why can't we close some tags for cross site scripting purposes?
Awarded Dec 4 at 2:35
Session Fixation - Is that even an issue here?
Awarded Dec 3 at 21:41
PGP expired encryption subkey : renew or replace?
Awarded Dec 3 at 20:54
DNS entry defined only in HOSTS file - will browsers mark the SSL cert as valid?
Awarded Dec 3 at 18:09
Why is PKCS#7 used as a response to PKCS#10?
Awarded Dec 3 at 10:06
Can a rootkit hide processes from "Volatility" or other memory forensics tools?
Awarded Dec 2 at 21:07
Should I worry about a cmd opening and typing "echo off"?
Awarded Dec 2 at 19:33
Are my basic implemetations of AES-CBC and AES-GCM in PHP secure?
Awarded Dec 2 at 18:53
1
2 3 4 5
…
512