Questions tagged [end-user]
In security, an end user is a person or machine with no administrative privileges with respect to a given security context. For example, non-admin users of a Windows or Unix domain, a device on a public network, even a server installing an SSL certificate is an end-user with respect to the CA hierarchy.
13
questions
4
votes
0
answers
516
views
Are external email warnings effective?
Conceptually, "THIS EMAIL IS FROM AN EXTERNAL SENDER" warnings should be useful at preventing phishing or spoofing attacks. If "your boss" asks you to buy a bunch of gift cards ...
- 141
2
votes
2
answers
135
views
How should failures by a single user on a simulated phishing email be measured?
I work in the IT Security function of my company as a team lead. We periodically send out phishing emails to all users on company network as a form of continuous education of users on how to spot ...
- 1,766
3
votes
1
answer
836
views
Is it reasonable to store encrypted TOTP keys + authentication credentials on a single device (for end-user)?
My current security model (at least for passwords) is to store them encrypted at rest and use GPG (in combination with an Yubikey) to perform encryption / decryption. I'm using pass (https://www....
- 173
2
votes
2
answers
13k
views
How do traffic correlation attacks against Tor users work?
I was reading about how Tor works. There is says that if the attacker is able to see both ends of the communication channel then Tor fails (and other anonymous networks too).
How and why does this ...
- 381
4
votes
2
answers
239
views
Allowing access to a programmatically created user without compromising security?
I am writing an app that requires multiple levels of users, where one user is an administrator and adds slave users.
I can't really seem to find a way to allow access to the slave users safely. ...
- 153
0
votes
2
answers
159
views
Efficiency of end-user training
I have read a lot on the topic of enforcing end-user security training, such as how to spot a phishing email for example. Even enforced training, such as conferences or videos that the end-user must ...
-3
votes
1
answer
327
views
How information security/cyber security evolved for a Novice End user in the Last 10 Years [closed]
The main point to note is the type of laws that protect the users.
Its main focus is
My points of discussion include 1) Challenges faced in Cyber-security. 2) Evolution of cyber security over the ...
0
votes
2
answers
135
views
Secure key exchange in web between pages
In the authentification page the user writes his password, and if it is correct, he is redirected to the main page.
In the main page there is a messenger also, which uses end-to-end encryption (...
1
vote
0
answers
438
views
Recommended End-User Authentication for OpenID Connect / OAuth 2 [closed]
I am learning about OAuth 2 and OpenID Connect. Reading the documentations I feel that the specification of OpenID Connect leaves some blank space regarding the End-User Authentication.
The spec ...
1
vote
2
answers
1k
views
Is HTML5/JavaScript more secure than Flash/Java, as the browser becomes more like an OS? [closed]
I have been asked to post this here:
I want to focus on the security of the end-user in these two different scenarios:
1) Pre HTML 5 where the applications and so on lived in plug ins outside the ...
46
votes
3
answers
6k
views
For an end-user, is HTML5/JavaScript more secure than Flash?
I’m not talking about server-side security or even necessarily XSS vulnerabilities, as these are attacks on vulnerable services and do not use any pre-existing vulnerabilities on the client side to ...
- 1,027
35
votes
5
answers
4k
views
How can I explain "zero knowledge proof" to an end user?
A ZKP allows proof of knowing the answer to a secret, without actually disclosing what that answer is.
Is there any analogy that can help people put this concept into everyday practice? A "lie to ...
- 50.7k
13
votes
5
answers
2k
views
End user security awareness measurement
Apart from the conventional email phishing tests, what other security Key Performance Indicators can be used to measure end user security awareness in an Organization?
Looking at the SANS critical ...
- 707