Profile Activity

MechMK1

Meta user

Network profile

Reputation

18,562

18.6k
9.4k
270

Next tag badge

web-application

141/100 score

16/20 answers

Badges

Newest

Nice Answer

Next badge

19/30

Impact

102 posts edited

178 helpful flags

914 votes cast

Summary Answers Questions Tags Badges Favorites 1 Bounties Reputation All actions

22 Questions

Views Newest Activity Votes

votes

answers

12k

views

Does code obfuscation give any measurable security benefit?

obfuscation

Oct 12 at 14:00 R.. GitHub STOP HELPING ICE 5,801

votes

answers

views

What is a threat model, and how do I make one?

threat-modeling

Jan 30 at 14:56 yoozer8 192

votes

answers

views

Is using 'echo' to display attacker-controlled data on the terminal dangerous?

vulnerability bash

Jun 8 at 8:07 Peter Cordes 811

votes

answers

12k

views

Is Diceware more secure than a long passphrase?

passwords entropy

Dec 22 at 19:39 curiousguy 4,688

votes

answers

views

How bad would a partial hash leak be, realistically?

hash password-cracking

Jun 3 at 13:55 jpmc26 833

votes

answers

631

views

Does File-Based Encryption offer comparable security to Full-Disk Encryption on Android?

android disk-encryption file-encryption

Sep 13 at 8:35 Xavier59 2,714

votes

answers

478

views

How can one tell if a binary is safe to give sudo permissions for to an untrusted user?

linux privilege-escalation sudo

Dec 1 at 18:57 Ángel 13.7k

votes

answers

211

views

Why does Chrome not allow the modification of these headers by extensions?

chrome header

Feb 3 at 10:51 phisch 203

votes

answer

279

views

Why does Chrome claim that this stylesheet violates the Content Security Policy?

content-security-policy

Dec 9 at 15:05 Steffen Ullrich 142k

votes

answer

150

views

Can a non-privileged user modify the file descriptor table of an elevated process?

linux file-access kernel

Dec 2 at 10:23 J.J 1,512

votes

answers

235

views

How can I protect the confidentiality, integrity and authenticity of my communication if I am victim of a Man-in-the-Middle attack?

man-in-the-middle

Aug 14 at 11:49 multithr3at3d 5,951

votes

answer

304

views

What are the minimum parameters for Argon2?

hash argon2

Jun 1 at 3:29 forest 50.4k

votes

answers

views

Why do DESFire and Mifare Plus cards offer a random UID feature?

rfid mifare

May 26 '18 at 17:22 schroeder♦ 94.6k

votes

answers

133

views

Does the use of a Hardware Security Module improve the security of a password storage?

password-cracking hsm

Jul 9 at 22:27 LvB 6,663

votes

answers

views

How would one scan a large, untrusted file?

malware antivirus

Jul 6 at 15:22 user211743 1

vote

answers

views

Has SQRL been extensively audited? [duplicate]

sqrl

Aug 22 at 11:30 MechMK1 18.6k

vote

answer

131

views

How to rate CVSS3's “Privileges Required” when an attacker can create an account?

cvss

May 28 at 8:52 alnbhclyn 274

vote

answer

364

views

Does it pose a problem to use 'strict-dynamic' with a hash and not a nonce?

content-security-policy

May 18 at 6:47 Artur Janc 46

vote

answer

436

views

How common is steganography in real world applications?

steganography

May 16 at 11:54 Overmind 7,959

vote

answer

259

views

How can a Trusted Platform Module “enhance network security”?

tpm

Jun 20 '18 at 18:26 vrtjason 780

votes

answers

views

Are there any standards or guidelines tamper-evident devices can adhere to?

standards tampering

Feb 4 at 13:18 MechMK1 18.6k

votes

answer

views

How much entropy is required for a Grid Card?

multi-factor entropy

May 24 '18 at 9:59 Steffen Ullrich 142k

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

22 Questions

Does code obfuscation give any measurable security benefit?

What is a threat model, and how do I make one?

Is using 'echo' to display attacker-controlled data on the terminal dangerous?

Is Diceware more secure than a long passphrase?

How bad would a partial hash leak be, realistically?

Does File-Based Encryption offer comparable security to Full-Disk Encryption on Android?

How can one tell if a binary is safe to give sudo permissions for to an untrusted user?

Why does Chrome not allow the modification of these headers by extensions?

Why does Chrome claim that this stylesheet violates the Content Security Policy?

Can a non-privileged user modify the file descriptor table of an elevated process?

How can I protect the confidentiality, integrity and authenticity of my communication if I am victim of a Man-in-the-Middle attack?

What are the minimum parameters for Argon2?

Why do DESFire and Mifare Plus cards offer a random UID feature?

Does the use of a Hardware Security Module improve the security of a password storage?

How would one scan a large, untrusted file?

Has SQRL been extensively audited? [duplicate]

How to rate CVSS3's “Privileges Required” when an attacker can create an account?

Does it pose a problem to use 'strict-dynamic' with a hash and not a nonce?

How common is steganography in real world applications?

How can a Trusted Platform Module “enhance network security”?

Are there any standards or guidelines tamper-evident devices can adhere to?

How much entropy is required for a Grid Card?