User Alexei

165 votes

8 answers

61k views

Why is Mother’s Maiden Name still used as a security question?

asked May 16, 2018 at 14:19

65 votes

6 answers

13k views

Are there objective reasons to not allow Google Chrome extensions, but to allow Firefox extensions?

asked Nov 27, 2017 at 8:51

10 votes

4 answers

3k views

How to quickly find out what the threat nature of a password protected archive is without getting infected?

asked May 27, 2020 at 13:08

7 votes

6 answers

537 views

Are there any objective reasons to use dedicated user/password instead of identity providers within a large organization?

asked Jun 30, 2018 at 6:23

4 votes

1 answer

160 views

Is there any type of cyber attack for which the geographical distance between the attacker and the target matters?

asked May 11, 2022 at 16:16

3 votes

1 answer

169 views

How do applications such as password managers check leaked credentials and how can I get more results?

asked Jan 7, 2020 at 13:06

2 votes

1 answer

80 views

Is there any security reason to not allow adding authenticators for a certain account?

asked Nov 26, 2021 at 16:28

1 vote

1 answer

146 views

Does it make sense to not use a VPN while consuming some services such as Internet Banking?

asked Jan 12, 2022 at 13:17

1 vote

0 answers

157 views

Should I consider migrating away from OAuth 2.0 Implicit Flow for an internal application relying on Azure AD?

asked Feb 12, 2021 at 10:31

1 vote

0 answers

204 views

Recruiter pretends to have found my e-mail address through GitHub account. How to check if this is true? [closed]

asked Nov 17, 2019 at 13:25

1 vote

2 answers

144 views

How to ensure reasonable anonymity when submitting information to a platform?

asked Dec 8, 2017 at 14:39

0 votes

1 answer

106 views

Should I reply to e-mails that reached me by mistake (very low chance of being regular spam)?

asked Nov 29, 2018 at 8:17

0 votes

1 answer

2k views

CISCO VPN Client - Gateway's fingerprint has changed - what is the risk of simply accepting the change?

asked Feb 6, 2019 at 7:57

0 votes

1 answer

117 views

Is it possible to avoid exposing the fact that an e-mail address is used by a web application (API) while still ensuring a decent UX?

asked Oct 17, 2021 at 15:37

Stack Exchange Network

14 Questions

Why is Mother’s Maiden Name still used as a security question?

Are there objective reasons to not allow Google Chrome extensions, but to allow Firefox extensions?

How to quickly find out what the threat nature of a password protected archive is without getting infected?

Are there any objective reasons to use dedicated user/password instead of identity providers within a large organization?

Is there any type of cyber attack for which the geographical distance between the attacker and the target matters?

How do applications such as password managers check leaked credentials and how can I get more results?

Is there any security reason to not allow adding authenticators for a certain account?

Does it make sense to not use a VPN while consuming some services such as Internet Banking?

Should I consider migrating away from OAuth 2.0 Implicit Flow for an internal application relying on Azure AD?

Recruiter pretends to have found my e-mail address through GitHub account. How to check if this is true? [closed]

How to ensure reasonable anonymity when submitting information to a platform?

Should I reply to e-mails that reached me by mistake (very low chance of being regular spam)?

CISCO VPN Client - Gateway's fingerprint has changed - what is the risk of simply accepting the change?

Is it possible to avoid exposing the fact that an e-mail address is used by a web application (API) while still ensuring a decent UX?