Skip to main content
Nzall's user avatar
Nzall's user avatar
Nzall's user avatar
Nzall
  • Member for 10 years, 7 months
  • Last seen this week
178 votes
18 answers
23k views

What is a good analogy to explain to a layman why passwords should be hashed?

136 votes
8 answers
30k views

Why are programs written in C and C++ so frequently vulnerable to overflow attacks?

57 votes
9 answers
8k views

What can a company do against insiders going rogue and negatively affecting essential infrastructure?

49 votes
5 answers
6k views

Should the average user with no special access rights be worried about SMS-based 2FA being theoretically interceptable?

47 votes
5 answers
7k views

Should web applications that are only accessible from a LAN be held to the same security standards as publicly accessible websites?

22 votes
2 answers
28k views

How many bits of entropy should I aim at for my password? [closed]

15 votes
10 answers
6k views

Would an encryption scheme that generates an extra key to be securely stored offsite be a safe backdoor?

14 votes
1 answer
2k views

Could the Stack Overflow Dance Dance Authentication April Fool's joke actually work in a real environment?

10 votes
4 answers
12k views

How can my bank debit card reader know that my pin is valid?

9 votes
1 answer
377 views

How does CVE-2020-0601 (ChainOfFools/CurveBall) work to undermine ECC?

8 votes
1 answer
4k views

Why do so many spam emails lately contain a lot of unicode characters?

6 votes
2 answers
347 views

Why aren't we using multiple algorithms to protect against attacks like SHAttered?

6 votes
2 answers
845 views

Can viewing an email message in Outlook 2013 install malware on my computer?

5 votes
2 answers
1k views

Can a website have multiple valid TLS certs looping back to multiple root CAs in case one of them is compromised?

5 votes
1 answer
422 views

Can ransomware hide in cloud storage/backup environments?

4 votes
2 answers
2k views

Where to store a pepper?

4 votes
1 answer
177 views

What measures beyond those for general software, if any, should be taken when preparing a work PC for lunchtime or after-hour gaming?

4 votes
2 answers
968 views

What should I do when I need to store passwords for usage in 3rd party software?

3 votes
3 answers
939 views

is it feasible to improve the entropy of XKCD #936 by using a larger dictionary?

3 votes
3 answers
508 views

Why do so many banks have relatively weak e-banking security? [closed]

3 votes
1 answer
4k views

Is the Struts2 token interceptor a viable way of protecting against CSRF?

2 votes
2 answers
2k views

Received 2 "Delivery Status Notification (Failure)" Mails from [email protected] with messages I did not send. Is this an attack?

2 votes
2 answers
307 views

Is a random work factor an increase or decrease of security?

2 votes
0 answers
238 views

How can I restore my Windows certificate cache so I only have those from trusted CAs? [duplicate]

2 votes
2 answers
820 views

How to explain "the k-anonymity model used by HaveIBeenPwned for pwned passwords doesn't expose your passwords" to a layman?

1 vote
3 answers
159 views

How can I mitigate attacks that rely on poisoned data as a developer?

1 vote
3 answers
706 views

Is using my phone number as a pin for a phone a security risk?

1 vote
1 answer
343 views

Windows command line does not check for revoked certificates: How bad is it?

1 vote
1 answer
529 views

How do I verify the supported ciphersuites of a TLS server that only accepts POST requests?

1 vote
1 answer
195 views

Is there a risk of a bootstrap problem when using NTS?