User MechMK1

8

77

votes

5

answers

12k

views

Does code obfuscation give any measurable security benefit?

obfuscation

Oct 12 at 14:00 R.. GitHub STOP HELPING ICE 5,821

20

56

votes

3

answers

5k

views

What is a threat model, and how do I make one?

threat-modeling

Jan 30 at 14:56 yoozer8 788

9

47

votes

5

answers

7k

views

Is using 'echo' to display attacker-controlled data on the terminal dangerous?

vulnerability bash

Jun 8 at 8:07 Peter Cordes 821

14

44

votes

4

answers

12k

views

Is Diceware more secure than a long passphrase?

passwords entropy

Dec 22 at 19:39 curiousguy 4,698

6

26

votes

3

answers

6k

views

How bad would a partial hash leak be, realistically?

hash password-cracking

Jun 3 at 13:55 jpmc26 833

1

14

votes

2

answers

786

views

Does File-Based Encryption offer comparable security to Full-Disk Encryption on Android?

android disk-encryption file-encryption

Sep 13 at 8:35 Xavier59 2,744

1

12

votes

5

answers

490

views

How can one tell if a binary is safe to give sudo permissions for to an untrusted user?

linux privilege-escalation sudo

Dec 1 at 18:57 Ángel 13.8k

2

9

votes

1

answer

328

views

Are there any reasons for Kerberos being based on symmetric cryptography?

kerberos

Mar 15 at 17:29 MechMK1 19.6k

6

votes

0

answers

216

views

Why does Chrome not allow the modification of these headers by extensions?

chrome header

Feb 3 at 10:51 phisch 328

2

5

votes

1

answer

280

views

Why does Chrome claim that this stylesheet violates the Content Security Policy?

content-security-policy

Dec 9 at 15:05 Steffen Ullrich 143k

5

votes

1

answer

156

views

Can a non-privileged user modify the file descriptor table of an elevated process?

linux file-access kernel

Dec 2 at 10:23 J.J 1,522

4

5

votes

2

answers

247

views

How can I protect the confidentiality, integrity and authenticity of my communication if I am victim of a Man-in-the-Middle attack?

man-in-the-middle

Aug 14 at 11:49 multithr3at3d 6,086

4

votes

1

answer

338

views

What are the minimum parameters for Argon2?

hash argon2

Jun 1 at 3:29 forest 50.6k

3

votes

2

answers

5k

views

How would one scan a large, untrusted file?

malware antivirus

Jul 6 at 15:22 user211743 1

3

votes

2

answers

2k

views

Why do DESFire and Mifare Plus cards offer a random UID feature?

rfid mifare

May 26 '18 at 17:22 schroeder♦ 96.6k

2

votes

2

answers

147

views

Does the use of a Hardware Security Module improve the security of a password storage?

password-cracking hsm

Jul 9 at 22:27 LvB 6,691

1

vote

0

answers

61

views

Has SQRL been extensively audited? [duplicate]

sqrl

Aug 22 at 11:30 MechMK1 19.6k

1

vote

1

answer

140

views

How to rate CVSS3's “Privileges Required” when an attacker can create an account?

cvss

May 28 at 8:52 alnbhclyn 274

1

vote

1

answer

419

views

Does it pose a problem to use 'strict-dynamic' with a hash and not a nonce?

content-security-policy

May 18 at 6:47 Artur Janc 46

1

vote

1

answer

475

views

How common is steganography in real world applications?

steganography

May 16 at 11:54 Overmind 8,019

1

vote

1

answer

270

views

How can a Trusted Platform Module “enhance network security”?

tpm

Jun 20 '18 at 18:26 vrtjason 780

0

votes

0

answers

40

views

Are there any standards or guidelines tamper-evident devices can adhere to?

standards tampering

Feb 4 at 13:18 MechMK1 19.6k

0

votes

1

answer

57

views

How much entropy is required for a Grid Card?

multi-factor entropy

May 24 '18 at 9:59 Steffen Ullrich 143k

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

23 Questions

Does code obfuscation give any measurable security benefit?

What is a threat model, and how do I make one?

Is using 'echo' to display attacker-controlled data on the terminal dangerous?

Is Diceware more secure than a long passphrase?

How bad would a partial hash leak be, realistically?

Does File-Based Encryption offer comparable security to Full-Disk Encryption on Android?

How can one tell if a binary is safe to give sudo permissions for to an untrusted user?

Are there any reasons for Kerberos being based on symmetric cryptography?

Why does Chrome not allow the modification of these headers by extensions?

Why does Chrome claim that this stylesheet violates the Content Security Policy?

Can a non-privileged user modify the file descriptor table of an elevated process?

How can I protect the confidentiality, integrity and authenticity of my communication if I am victim of a Man-in-the-Middle attack?

What are the minimum parameters for Argon2?

How would one scan a large, untrusted file?

Why do DESFire and Mifare Plus cards offer a random UID feature?

Does the use of a Hardware Security Module improve the security of a password storage?

Has SQRL been extensively audited? [duplicate]

How to rate CVSS3's “Privileges Required” when an attacker can create an account?

Does it pose a problem to use 'strict-dynamic' with a hash and not a nonce?

How common is steganography in real world applications?

How can a Trusted Platform Module “enhance network security”?

Are there any standards or guidelines tamper-evident devices can adhere to?

How much entropy is required for a Grid Card?