Ja1024's user avatar
Ja1024's user avatar
Ja1024's user avatar
Ja1024
  • Member for 10 months
  • Last seen this week
72 votes
Accepted

Filter arbitrary code for blacklisted keywords except on commented lines

42 votes
Accepted

What's the point of certificates in SSL/TLS?

41 votes
Accepted

Does public key cryptography provide any security advantages, or even just a different security model, over symmetric cryptography?

40 votes
Accepted

What stops a malicious user from hitting an endpoint with falsified data from the console of a webpage?

39 votes

Enabling a user to revert a hacked change in their email

20 votes

Reasoning behind banning '#' from the start of passwords?

15 votes

Do subdomains of a TLD with mandatory HTTPS require a wildcard certificate?

14 votes
Accepted

Understanding ssh-rsa not in PubkeyAcceptedAlgorithms

5 votes

What are the threats of using hashing functions that are built into the DBMS? (besides man-in-the-middle attacks)

5 votes
Accepted

Using hashed trigrams to search over encrypted data

4 votes
Accepted

Using localStorage to keep the user logged in in PWA

4 votes

openssl aes-128-cbc can be decrypted using different IV from encryption

4 votes
Accepted

Is it possible to distinguish the binary content of a gpg-encrypted file from a random blob of data?

4 votes

XKCD #936 Why not both?

4 votes
Accepted

Is backing up the seed used to generate an RSA key pair a secure practice?

3 votes
Accepted

Are certificates persistent outside of where it's created?

3 votes

Derive a key (and not store it) from a passphrase, to be used with AES

3 votes

HTTPonly token without CSRF is safe?

3 votes

Algorithms when using client side hashing plus server side hashing

3 votes
Accepted

How can I decrypt a text file with gpg?

3 votes
Accepted

CSRF: Signed Double Submit Cookie & 'Referer' validation vs MITM and vulnerable subdomains

3 votes
Accepted

Can someone with access to only my Yubikey gain access to my server that has SSH access via an ED25519-sk keypair?

3 votes

How can I be sure that my internet service provider is safe?

2 votes

Can I upload files to a certain website to see exactly what code they contain and what they do (heuristics)?

2 votes

How do applications like Instagram and Discord secure users' resources?

2 votes
Accepted

How to know if you have downloaded a malware on a virtual machine

2 votes
Accepted

Is it safe to use font-src with data: in a Content Security Policy?

2 votes

Using Proof of Work to slow down login attempts

2 votes
Accepted

Possible scenario for replay attack in acme protocol

2 votes
Accepted

CRIME like attack and locality of randomized data