Questions tagged [end-user]

In security, an end user is a person or machine with no administrative privileges with respect to a given security context. For example, non-admin users of a Windows or Unix domain, a device on a public network, even a server installing an SSL certificate is an end-user with respect to the CA hierarchy.

Filter by
Sorted by
Tagged with
0
votes
2answers
96 views

Efficiency of end-user training

I have read a lot on the topic of enforcing end-user security training, such as how to spot a phishing email for example. Even enforced training, such as conferences or videos that the end-user must ...
4
votes
2answers
180 views

Allowing access to a programmatically created user without compromising security?

I am writing an app that requires multiple levels of users, where one user is an administrator and adds slave users. I can't really seem to find a way to allow access to the slave users safely. ...
3
votes
1answer
154 views

Is it reasonable to store encrypted TOTP keys + authentication credentials on a single device (for end-user)?

My current security model (at least for passwords) is to store them encrypted at rest and use GPG (in combination with an Yubikey) to perform encryption / decryption. I'm using pass (https://www....
32
votes
5answers
3k views

How can I explain “zero knowledge proof” to an end user?

A ZKP allows proof of knowing the answer to a secret, without actually disclosing what that answer is. Is there any analogy that can help people put this concept into everyday practice? A "lie to ...
13
votes
5answers
2k views

End user security awareness measurement

Apart from the conventional email phishing tests, what other security Key Performance Indicators can be used to measure end user security awareness in an Organization? Looking at the SANS critical ...
1
vote
2answers
5k views

How do traffic correlation attacks against Tor users work?

I was reading about how Tor works. There is says that if the attacker is able to see both ends of the communication channel then Tor fails (and other anonymous networks too). How and why does this ...
-3
votes
1answer
262 views

How information security/cyber security evolved for a Novice End user in the Last 10 Years [closed]

The main point to note is the type of laws that protect the users. Its main focus is My points of discussion include 1) Challenges faced in Cyber-security. 2) Evolution of cyber security over the ...
0
votes
2answers
80 views

Secure key exchange in web between pages

In the authentification page the user writes his password, and if it is correct, he is redirected to the main page. In the main page there is a messenger also, which uses end-to-end encryption (...
1
vote
0answers
335 views

Recommended End-User Authentication for OpenID Connect / OAuth 2 [closed]

I am learning about OAuth 2 and OpenID Connect. Reading the documentations I feel that the specification of OpenID Connect leaves some blank space regarding the End-User Authentication. The spec ...
46
votes
3answers
5k views

For an end-user, is HTML5/JavaScript more secure than Flash?

I’m not talking about server-side security or even necessarily XSS vulnerabilities, as these are attacks on vulnerable services and do not use any pre-existing vulnerabilities on the client side to ...
1
vote
2answers
1k views

Is HTML5/JavaScript more secure than Flash/Java, as the browser becomes more like an OS? [closed]

I have been asked to post this here: I want to focus on the security of the end-user in these two different scenarios: 1) Pre HTML 5 where the applications and so on lived in plug ins outside the ...