user avatar
user avatar
user avatar
Andrew Savinykh
  • Member for 9 years, 5 months
  • Last seen more than a week ago
  • Auckland, New Zealand
101 votes
8 answers
33k views

Why do ATMs accept any PIN?

16 votes
1 answer
4k views

What benefits do Hardware Security Modules provide when keys are not stored inside them?

12 votes
1 answer
20k views

How does HDMI splitter bypass HDCP?

6 votes
4 answers
7k views

Is it possible to fake incoming IP?

4 votes
2 answers
1k views

Are there any security disadvantages of using production SSL certificate in non-prod environments?

4 votes
3 answers
3k views

In the context of SSL Labs where is the "trust store"?

4 votes
1 answer
516 views

Secret Santa implementation that does not require a participant to trust the server

3 votes
1 answer
383 views

Is there an advantage in using separate key pairs for encryption and signing? [duplicate]

3 votes
2 answers
758 views

How to check if I have a rogue SSL/TLS certificate?

1 vote
1 answer
341 views

What is the worst I can do, if I know OpenId Connect client secret?

0 votes
1 answer
596 views

REST API is protected by HMAC based authentication. What does including URL path in the message protect from?