User Peter Harmann

192 votes

Accepted

Secure way of masking out sensitive information in screenshots?

forensics image

answered Apr 19, 2018 at 19:12

185 votes

Received a set of SMS/MMS containing 2 photos, a voice message, and a text "I need help" with Google Maps link from a known contact. Is it spam?

spam sms

answered Apr 23, 2018 at 13:27

172 votes

Accepted

Is it more secure to program a client-server system in a language other than English?

web-application rest

answered Apr 30, 2018 at 14:03

66 votes

Why is this certificate for Imgur only valid for one day?

certificates wifi

answered May 5, 2018 at 15:43

54 votes

What considerations do I need to keep in mind when enforcing passphrases?

authentication passwords password-management password-cracking password-policy

answered Apr 30, 2018 at 12:07

38 votes

Accepted

Is there any security risk when a certificate authority is used more than all others?

tls certificates public-key-infrastructure certificate-authority letsencrypt

answered Apr 24, 2018 at 12:36

27 votes

What local resources are used when bruteforcing a remote service?

passwords brute-force password-cracking

answered May 19, 2019 at 14:00

14 votes

Why would I ever use AES-256-CBC if AES-256-GCM is more secure?

encryption aes file-encryption json xml

answered Apr 22, 2018 at 15:21

9 votes

Accepted

Should a "password reset" link be valid after changing email?

passwords password-reset

answered Apr 24, 2018 at 16:56

9 votes

Accepted

Is it safe to store APK signing passwords in private git repository?

digital-signature git

answered Jul 5, 2018 at 13:20

8 votes

How well can Tor + VPN secure my anonymity on the internet?

vpn anonymity tor

answered Jun 20, 2019 at 1:57

7 votes

Should we use different usernames for each website, to achieve better anonymity?

password-management anonymity user-names

answered May 1, 2018 at 20:28

7 votes

How to prevent "JailBreak detection bypass" by Cydia tools such as "Flex 3" etc?

mobile ios jailbreak

answered May 2, 2018 at 11:16

6 votes

The basic difference between RSA algorithm and Shor's algorithm

encryption

answered Jul 18, 2018 at 22:24

6 votes

Accepted

Does Time-based One Time Password improves security in case of database leak?

authentication passwords multi-factor

answered Apr 25, 2018 at 11:17

6 votes

Accepted

What are the relation (difference and similarities) between Replay attack, reflection attack and relay attack?

attacks

answered Apr 22, 2018 at 15:49

6 votes

Accepted

How well can Tor + VPN secure my anonymity on the internet?

vpn anonymity tor

answered Aug 31, 2019 at 10:10

6 votes

Do different files always have different MD5 or SHA1 hash codes?

hash

answered Oct 2, 2018 at 22:31

6 votes

Accepted

Diffie-Hellman with non-prime modulus

cryptography diffie-hellman

answered Apr 23, 2019 at 7:11

6 votes

Accepted

Alternative to bcrypt in .NET Core?

.net bcrypt asp.net-core

answered Apr 26, 2019 at 17:57

5 votes

Accepted

Does an admin need legitimaly to access his own logs generated by auditd?

audit logging corporate-policy log-analysis

answered Sep 27, 2018 at 10:39

5 votes

Is it possible to include a PHP Function while performing SQL Injection?

php sql-injection

answered May 30, 2018 at 13:55

5 votes

Accepted

"Family" apps use shared passwords for different usernames. How bad is it?

answered Jun 16, 2019 at 13:55

5 votes

How do I know if a Certificate Authority is not fake?

certificate-authority

answered Apr 19, 2018 at 17:05

5 votes

As a security compliance professional, what should I do if I find that my employer has a PCI AOC but is not compliant?

pci-dss ethics

answered Apr 20, 2018 at 8:55

5 votes

Can a badly configured AppArmor profile reduce security?

mandatory-access-control apparmor

answered Apr 24, 2018 at 23:02

5 votes

Rolling your own crypto

encryption cryptography hash decryption

answered May 2, 2018 at 15:26

5 votes

Isn't password storage designed to not un-mask passwords?

passwords password-management

answered May 5, 2018 at 1:30

5 votes

Accepted

How vulnerable are rolling codes used in car keyfobs to simple replay attacks?

wireless locks vehicle

answered May 1, 2018 at 14:57

5 votes

Why is it recommended to use accounts without sysop rights for everyday work?

privileged-account

answered May 2, 2018 at 13:05

Stack Exchange Network

current community

your communities

more stack exchange communities

210 Answers

Secure way of masking out sensitive information in screenshots?

Received a set of SMS/MMS containing 2 photos, a voice message, and a text "I need help" with Google Maps link from a known contact. Is it spam?

Is it more secure to program a client-server system in a language other than English?

Why is this certificate for Imgur only valid for one day?

What considerations do I need to keep in mind when enforcing passphrases?

Is there any security risk when a certificate authority is used more than all others?

What local resources are used when bruteforcing a remote service?

Why would I ever use AES-256-CBC if AES-256-GCM is more secure?

Should a "password reset" link be valid after changing email?

Is it safe to store APK signing passwords in private git repository?

How well can Tor + VPN secure my anonymity on the internet?

Should we use different usernames for each website, to achieve better anonymity?

How to prevent "JailBreak detection bypass" by Cydia tools such as "Flex 3" etc?

The basic difference between RSA algorithm and Shor's algorithm

Does Time-based One Time Password improves security in case of database leak?

What are the relation (difference and similarities) between Replay attack, reflection attack and relay attack?

How well can Tor + VPN secure my anonymity on the internet?

Do different files always have different MD5 or SHA1 hash codes?

Diffie-Hellman with non-prime modulus

Alternative to bcrypt in .NET Core?

Does an admin need legitimaly to access his own logs generated by auditd?

Is it possible to include a PHP Function while performing SQL Injection?

"Family" apps use shared passwords for different usernames. How bad is it?

How do I know if a Certificate Authority is not fake?

As a security compliance professional, what should I do if I find that my employer has a PCI AOC but is not compliant?

Can a badly configured AppArmor profile reduce security?

Rolling your own crypto

Isn't password storage designed to not un-mask passwords?

How vulnerable are rolling codes used in car keyfobs to simple replay attacks?

Why is it recommended to use accounts without sysop rights for everyday work?