User Adam Katz

1 vote

Storing weakness level of passwords

answered Apr 14, 2022 at 16:58

1 vote

Accepted

Why don't applications suggest passwords themselves?

answered Sep 9, 2022 at 21:52

1 vote

Accepted

Should password strength validation also be run server-side or only client-side?

answered Sep 30, 2022 at 21:56

1 vote

Is a sufficiently long password unsafe just because it only consists of 2-3 letter long mixed-case dictionary words and numbers?

answered Oct 17, 2022 at 22:31

1 vote

Accepted

How much does the strength of the password depend on the variety of characters?

answered May 16, 2022 at 16:37

1 vote

Accepted

How would you counter an email/honeypot mischief scenario?

answered Jun 6, 2022 at 15:32

1 vote

Accepted

Is an HMAC of an email address with a permanent secret key a good way to generate security tokens for unsubscribing from an email list?

answered Jun 22, 2022 at 16:37

1 vote

Cannot use "ecdsa" and "rsa" in parallel when using SFTP

answered Jul 14, 2022 at 20:53

1 vote

Do fowarded emails retain DMARC protection?

answered Aug 10, 2021 at 16:14

1 vote

Would Thunderbird's cache be affected by ransomware?

answered Jul 9, 2021 at 15:32

1 vote

Possible Phishing Attempt?

answered Aug 18, 2021 at 21:56

1 vote

Forged linkedin invitation phishing? How does it work?

answered Aug 18, 2021 at 22:38

1 vote

Accepted

Is there any security risk in sending a dangerous file via email to oneself?

answered Aug 27, 2021 at 19:12

1 vote

Is exposing email delivery failure to a user a security risk?

answered Sep 13, 2021 at 15:14

1 vote

Suspicious GitHub mirror site (https://hzb.world/)

answered Sep 13, 2021 at 15:48

1 vote

How do you get a secure bastion host if your IP address is constantly changing?

answered Aug 21, 2020 at 16:12

1 vote

Phishing emails sent to my contacts, from another contact

answered Mar 4, 2021 at 15:31

0 votes

Avoiding having emails being traced

answered Mar 10, 2021 at 23:08

0 votes

Accepted

Whitelisting Email Service for Anti-Spoofing and DMARC

answered Apr 8, 2021 at 15:28

0 votes

Accepted

Standard form of email signature

answered May 18, 2021 at 17:07

0 votes

Accepted

Can subdomains of trusted domains be registered for malicious use?

answered Dec 22, 2020 at 19:21

0 votes

Let user send an email to register to prevent outgoing mail abuse

answered Sep 18, 2020 at 22:34

0 votes

Forget Me Not? Abandoning the Forgot Password Functionality

answered Sep 2, 2021 at 18:14

0 votes

Inbox filling up with "confirm your registration" emails - what kind of attack is this?

answered Aug 9, 2021 at 15:55

0 votes

Email server compromise?

answered Jul 2, 2021 at 15:39

0 votes

What to make of inconsistent TFA/2FA verification emails from AOL

answered Nov 25, 2020 at 20:36

0 votes

Emails being duplicated with different recipient address

answered Oct 20, 2022 at 18:10

0 votes

Is it safe for my password hint to be synonymous to my password?

answered Oct 27, 2022 at 15:54

0 votes

Accepted

X11 forwarding to another user. How it's possible?

answered Nov 1, 2022 at 21:44

0 votes

Is it secure for a platform to use the same private key for multiple clients' SSH connections?

answered Nov 1, 2022 at 22:13

Stack Exchange Network

174 Answers

Storing weakness level of passwords

Why don't applications suggest passwords themselves?

Should password strength validation also be run server-side or only client-side?

Is a sufficiently long password unsafe just because it only consists of 2-3 letter long mixed-case dictionary words and numbers?

How much does the strength of the password depend on the variety of characters?

How would you counter an email/honeypot mischief scenario?

Is an HMAC of an email address with a permanent secret key a good way to generate security tokens for unsubscribing from an email list?

Cannot use "ecdsa" and "rsa" in parallel when using SFTP

Do fowarded emails retain DMARC protection?

Would Thunderbird's cache be affected by ransomware?

Possible Phishing Attempt?

Forged linkedin invitation phishing? How does it work?

Is there any security risk in sending a dangerous file via email to oneself?

Is exposing email delivery failure to a user a security risk?

Suspicious GitHub mirror site (https://hzb.world/)

How do you get a secure bastion host if your IP address is constantly changing?

Phishing emails sent to my contacts, from another contact

Avoiding having emails being traced

Whitelisting Email Service for Anti-Spoofing and DMARC

Standard form of email signature

Can subdomains of trusted domains be registered for malicious use?

Let user send an email to register to prevent outgoing mail abuse

Forget Me Not? Abandoning the Forgot Password Functionality

Inbox filling up with "confirm your registration" emails - what kind of attack is this?

Email server compromise?

What to make of inconsistent TFA/2FA verification emails from AOL

Emails being duplicated with different recipient address

Is it safe for my password hint to be synonymous to my password?

X11 forwarding to another user. How it's possible?

Is it secure for a platform to use the same private key for multiple clients' SSH connections?