User d1str0

47 votes

Should I allow browsers to remember my passwords and synchronize them?

answered Mar 9, 2016 at 5:58

34 votes

Is it possible to modify your user agent http header for malicious use?

answered Feb 23, 2016 at 2:13

33 votes

Does username length/complexity/uniqueness positively impact security?

answered Mar 24, 2016 at 3:18

21 votes

Can I use SHA-512 hash as AES key?

answered Mar 21, 2016 at 6:20

19 votes

What prevents me from buying a SSL certificate for a domain I don't control?

answered Feb 24, 2016 at 5:04

9 votes

Should I use CSRF protection for GET requests?

answered Feb 26, 2016 at 0:00

7 votes

Why would an encrypted file be ~35% larger than an unencrypted one?

answered Mar 10, 2016 at 19:17

7 votes

Accepted

How does Tor network handle individual sessions?

answered Sep 30, 2016 at 18:03

6 votes

Relative merits and risks of encryption and OS security

answered Mar 12, 2016 at 18:12

6 votes

How do I verify HTTPS connections in Mobile apps?

answered Mar 14, 2016 at 16:47

6 votes

Accepted

Is it safe to leave Keepass always opened on a computer?

answered Feb 19, 2016 at 1:12

3 votes

Accepted

Intercept HTTPS traffic.. with a cert

answered Feb 24, 2016 at 0:14

3 votes

Does SSL certification have anything to do with the website legitimacy?

answered Mar 10, 2016 at 21:12

3 votes

Connecting to a compromised server

answered Feb 29, 2016 at 23:06

3 votes

How and what is used when information is sent to a hacker's server?

answered Mar 10, 2016 at 4:44

3 votes

Does all asymmetric encryption schemes rely on a third party?

answered Oct 19, 2016 at 18:27

2 votes

Accepted

How do I store other people's ssh keys securely?

answered Jun 24, 2019 at 19:10

2 votes

What would be the best course of action if you accidentally paste sensitive information into a medium you don't control?

answered Jan 31, 2020 at 6:58

2 votes

How to make a good choice between Symmetric and Asymmetric

answered Feb 26, 2016 at 18:35

2 votes

Accepted

Sniff network packets that don't talk to my computer?

answered Mar 15, 2016 at 21:15

2 votes

Can I dis-identify myself if I use VPN on sites?

answered Mar 7, 2016 at 8:44

2 votes

Client-side BCrypt, store salt and hash separately in MySQL database

answered Mar 8, 2016 at 17:51

2 votes

When should I renew certification authority?

answered Feb 22, 2016 at 20:54

2 votes

Does the glibc getaddrinfo vulnerability affect Windows systems?

answered Feb 22, 2016 at 23:29

2 votes

Why do websites use less effective hash functions?

answered Feb 24, 2016 at 19:36

1 vote

How Do AVs differentiate between normal cryptographic modules and viruses crypters

answered Feb 24, 2016 at 5:07

1 vote

How can I ensure that only the message I sent, and nothing else reaches the receiver?

answered Feb 22, 2016 at 20:30

1 vote

Why can't the FBI read the key embedded in the iPhone's secure chip/ROM directly from hardware (silicon)?

answered Feb 18, 2016 at 22:05

1 vote

Started seeing jQuery function calls in URL requests, what is this?

answered Feb 23, 2016 at 18:22

1 vote

What are the security implications of installing an iPhone configuration profile?

answered Mar 9, 2016 at 21:48

Stack Exchange Network

52 Answers

Should I allow browsers to remember my passwords and synchronize them?

Is it possible to modify your user agent http header for malicious use?

Does username length/complexity/uniqueness positively impact security?

Can I use SHA-512 hash as AES key?

What prevents me from buying a SSL certificate for a domain I don't control?

Should I use CSRF protection for GET requests?

Why would an encrypted file be ~35% larger than an unencrypted one?

How does Tor network handle individual sessions?

Relative merits and risks of encryption and OS security

How do I verify HTTPS connections in Mobile apps?

Is it safe to leave Keepass always opened on a computer?

Intercept HTTPS traffic.. with a cert

Does SSL certification have anything to do with the website legitimacy?

Connecting to a compromised server

How and what is used when information is sent to a hacker's server?

Does all asymmetric encryption schemes rely on a third party?

How do I store other people's ssh keys securely?

What would be the best course of action if you accidentally paste sensitive information into a medium you don't control?

How to make a good choice between Symmetric and Asymmetric

Sniff network packets that don't talk to my computer?

Can I dis-identify myself if I use VPN on sites?

Client-side BCrypt, store salt and hash separately in MySQL database

When should I renew certification authority?

Does the glibc getaddrinfo vulnerability affect Windows systems?

Why do websites use less effective hash functions?

How Do AVs differentiate between normal cryptographic modules and viruses crypters

How can I ensure that only the message I sent, and nothing else reaches the receiver?

Why can't the FBI read the key embedded in the iPhone's secure chip/ROM directly from hardware (silicon)?

Started seeing jQuery function calls in URL requests, what is this?

What are the security implications of installing an iPhone configuration profile?