User nobody

87 votes

Does blocking keywords prevent code injection inside this interactive Python file?

injection python

answered Mar 15, 2021 at 18:32

72 votes

Accepted

Why are passwords generated by a password generator a complicated mix of letters and numbers instead of a long phrase?

passwords

answered Nov 15, 2021 at 4:08

65 votes

Accepted

Why don't car keys use algorithms like RFC 4226?

authentication passwords vehicle

answered Jun 3, 2021 at 17:41

62 votes

Accepted

How does one take advantage of unencrypted traffic?

tls http man-in-the-middle

answered Jan 12, 2021 at 10:44

52 votes

Accepted

When could 256 bit encryption be brute forced?

encryption brute-force quantum-computing

answered Dec 11, 2020 at 5:58

52 votes

Accepted

Identification of a laptop using a spoofed WiFi MAC address

wifi mac-address mac-spoofing

answered Apr 19 at 18:05

47 votes

Accepted

Not understanding why I should use public/private key encryption over password?

encryption passwords key-management file-encryption public-key

answered Jul 17, 2021 at 11:05

44 votes

Accepted

Microsoft Word to secure stored data

encryption office secrets-management

answered Dec 7, 2020 at 9:18

41 votes

Why is there no web client for Signal?

man-in-the-middle javascript secure-coding end-to-end-encryption signal

answered Sep 6, 2020 at 8:29

33 votes

How is HTTPS protected against MITM attacks by other countries?

tls certificate-authority

answered Dec 30, 2020 at 14:20

33 votes

Can iterated hashes be used to create cryptographically secure random data from strong random seed?

encryption hash random

answered Jul 30, 2021 at 11:18

27 votes

Accepted

How does this unsigned exe launch without the windows 10 SmartScreen warning?

certificates digital-signature windows-10

answered Dec 28, 2020 at 7:32

26 votes

Accepted

Crack 7Z password if I also have the original file

passwords zip

answered Sep 23, 2021 at 15:32

24 votes

Is at-rest encryption worth it if the key has to be kept accessible for decryption?

encryption

answered Jan 14 at 3:23

14 votes

Does biometric authentication in Android transfer any biometric data to the app?

authentication android biometrics

answered Apr 10, 2021 at 18:47

13 votes

What is the frequency of open security bugs in an operating system with increasing age?

operating-systems

answered Feb 1 at 23:52

12 votes

Where does the root of trust actually lie?

public-key-infrastructure trust threat-modeling

answered May 1 at 0:00

12 votes

Accepted

How is it possible that this spam mail came from Google Forms without revealing their sender address?

email phishing gmail

answered Nov 25, 2020 at 20:07

11 votes

Accepted

How do browsers get HSTS preload data?

hsts

answered Feb 5, 2021 at 13:35

10 votes

Accepted

Keepass' password protection in memory

keepass

answered Feb 15, 2021 at 10:51

10 votes

Accepted

Solution to the ‘Browser Crypto Chicken-and-Egg Problem’?

encryption web-application web-browser javascript protonmail

answered Sep 18, 2020 at 12:17

10 votes

Where can I find an engineer who can examine an exe and verify its legitimacy?

malware incident-response trojan

answered Aug 2, 2020 at 7:28

10 votes

What protects users from fake web browsers?

web-browser

answered Apr 19 at 21:09

9 votes

Accepted

What makes a symmetric encryption algorithm cryptographically secure?

encryption cryptography decryption

answered Dec 17, 2021 at 21:14

9 votes

Securing client side code of react application

authentication obfuscation react

answered Jan 10, 2021 at 9:14

7 votes

Accepted

Can I upload a reverse shell to a website remotely if directory listing is enabled?

wordpress

answered Dec 31, 2020 at 16:31

7 votes

Are we gossiping in Certificate Transparency?

certificates public-key-infrastructure certificate-authority certificate-transparency

answered Mar 4, 2021 at 7:38

6 votes

Why can't we protect the password file so that only the system can read it?

encryption passwords linux

answered Jul 3, 2020 at 12:30

5 votes

Performance comparison between AES256 GCM vs AES 256 SHA 256

ipsec

answered Jul 4, 2020 at 8:37

5 votes

Accepted

Securing HTTPS between two local applications on same system

tls certificates self-signed

answered Feb 11, 2021 at 17:04

Stack Exchange Network

current community

your communities

more stack exchange communities

129 Answers

Does blocking keywords prevent code injection inside this interactive Python file?

Why are passwords generated by a password generator a complicated mix of letters and numbers instead of a long phrase?

Why don't car keys use algorithms like RFC 4226?

How does one take advantage of unencrypted traffic?

When could 256 bit encryption be brute forced?

Identification of a laptop using a spoofed WiFi MAC address

Not understanding why I should use public/private key encryption over password?

Microsoft Word to secure stored data

Why is there no web client for Signal?

How is HTTPS protected against MITM attacks by other countries?

Can iterated hashes be used to create cryptographically secure random data from strong random seed?

How does this unsigned exe launch without the windows 10 SmartScreen warning?

Crack 7Z password if I also have the original file

Is at-rest encryption worth it if the key has to be kept accessible for decryption?

Does biometric authentication in Android transfer any biometric data to the app?

What is the frequency of open security bugs in an operating system with increasing age?

Where does the root of trust actually lie?

How is it possible that this spam mail came from Google Forms without revealing their sender address?

How do browsers get HSTS preload data?

Keepass' password protection in memory

Solution to the ‘Browser Crypto Chicken-and-Egg Problem’?

Where can I find an engineer who can examine an exe and verify its legitimacy?

What protects users from fake web browsers?

What makes a symmetric encryption algorithm cryptographically secure?

Securing client side code of react application

Can I upload a reverse shell to a website remotely if directory listing is enabled?

Are we gossiping in Certificate Transparency?

Why can't we protect the password file so that only the system can read it?

Performance comparison between AES256 GCM vs AES 256 SHA 256

Securing HTTPS between two local applications on same system