User lofidevops

112 votes

6 answers

24k views

Why should I offer HTTP in addition to HTTPS?

tls http hsts

asked Apr 18, 2017 at 13:00

79 votes

4 answers

10k views

Can an identity provider impersonate me? (Can Facebook post Stack Overflow questions under my name?)

authentication web-application access-control third-party

asked May 28, 2018 at 11:47

59 votes

8 answers

18k views

How can I securely develop a local webapp at a coffee shop?

tls web-application web-browser

asked May 17, 2017 at 12:32

39 votes

1 answer

37k views

Should I publish my public SSH key with user@hostname at the end?

ssh key-management

asked Feb 4, 2014 at 10:23

27 votes

3 answers

19k views

Is Firefox Password Manager less secure than LastPass?

password-management cloud-computing storage firefox browser-extensions

asked Oct 23, 2014 at 13:54

12 votes

2 answers

5k views

Is there a test for KRACK (devices and routers)?

defense krack

asked Oct 17, 2017 at 13:02

7 votes

1 answer

1k views

Do any non-GNU/Linux display managers provide the same isolation as Wayland?

operating-systems desktop isolation

asked Feb 15, 2018 at 9:32

6 votes

2 answers

198 views

What category of anonymity do onion routing and blockchains afford?

anonymity terminology deanonymization

asked Oct 15, 2017 at 14:13

5 votes

3 answers

160 views

How do I diagram a network node with multiple layers of trust?

tls network proxy trust documentation

asked Mar 20, 2018 at 9:37

4 votes

1 answer

396 views

Can I safely post the output of lspci, lsusb, lshw?

attack-prevention exposure

asked Jan 20, 2012 at 8:04

3 votes

1 answer

1k views

Can I look up email address from a PGP/GPG fingerprint?

email pgp

asked Oct 17, 2017 at 15:07

2 votes

1 answer

415 views

What is a secure mechanism for wireless communication between Android and Ubuntu?

linux android wireless

asked Jul 16, 2014 at 14:50

2 votes

2 answers

7k views

Why is an HSM required to protect CA certificates (rather than a regular USB token)?

key-management physical hsm key hardware-token

asked Jul 11, 2018 at 9:37

1 vote

1 answer

90 views

Does the Web Cryptography API prevent a bad server from slurping cleartext?

web-application javascript web-crypto-api

asked Aug 30, 2018 at 9:19

1 vote

0 answers

117 views

How can I maintain and automate a list of download URLs with known hashes? [closed]

hash integrity debian

asked Oct 31, 2019 at 16:55

1 vote

4 answers

244 views

Does access to a BISmark router mean access my network?

network router

asked Oct 23, 2014 at 14:34

1 vote

2 answers

614 views

Is there a coordinated Firefox user-agent for anonymous browsing?

web-browser user-tracking fingerprint

asked Sep 20, 2017 at 13:23

1 vote

1 answer

345 views

Is shred -n1 /dev/sda demonstrably worse than Bleachbit?

file-system

asked Jan 3, 2018 at 10:59

1 vote

3 answers

2k views

If I switch to LUKS on an SSD, have I just wiped it?

disk-encryption luks ssd

asked Jan 3, 2018 at 11:08

0 votes

1 answer

218 views

Does the BitTorrent protocol expose my home IP address, even over VPN/Tor?

data-leakage bittorrent

asked Apr 9, 2018 at 21:31

0 votes

1 answer

779 views

On public WiFi, how does a VPN/tunnel protect me more than secure protocols? [duplicate]

privacy wifi man-in-the-middle vpn hotspot

asked Oct 12, 2017 at 12:29

0 votes

1 answer

766 views

How can I store user contacts (address book) with zero knowledge?

encryption client-side cloud-storage

asked May 27, 2017 at 10:37

0 votes

1 answer

124 views

What threats are mitigated by encrypted VPC connections?

network cloud-computing threat-modeling

asked Jul 16, 2021 at 17:06

0 votes

2 answers

845 views

What do you call an antivirus that detects suspicious activity?

antivirus ids terminology anomaly-detection machine-learning

asked Nov 7, 2017 at 13:03

-1 votes

1 answer

446 views

Can I perform a local test for DNS leaking?

vpn dns automated-testing

asked Oct 18, 2017 at 10:16

Stack Exchange Network

current community

your communities

more stack exchange communities

25 Questions

Why should I offer HTTP in addition to HTTPS?

Can an identity provider impersonate me? (Can Facebook post Stack Overflow questions under my name?)

How can I securely develop a local webapp at a coffee shop?

Should I publish my public SSH key with user@hostname at the end?

Is Firefox Password Manager less secure than LastPass?

Is there a test for KRACK (devices and routers)?

Do any non-GNU/Linux display managers provide the same isolation as Wayland?

What category of anonymity do onion routing and blockchains afford?

How do I diagram a network node with multiple layers of trust?

Can I safely post the output of lspci, lsusb, lshw?

Can I look up email address from a PGP/GPG fingerprint?

What is a secure mechanism for wireless communication between Android and Ubuntu?

Why is an HSM required to protect CA certificates (rather than a regular USB token)?

Does the Web Cryptography API prevent a bad server from slurping cleartext?

How can I maintain and automate a list of download URLs with known hashes? [closed]

Does access to a BISmark router mean access my network?

Is there a coordinated Firefox user-agent for anonymous browsing?

Is shred -n1 /dev/sda demonstrably worse than Bleachbit?

If I switch to LUKS on an SSD, have I just wiped it?

Does the BitTorrent protocol expose my home IP address, even over VPN/Tor?

On public WiFi, how does a VPN/tunnel protect me more than secure protocols? [duplicate]

How can I store user contacts (address book) with zero knowledge?

What threats are mitigated by encrypted VPC connections?

What do you call an antivirus that detects suspicious activity?

Can I perform a local test for DNS leaking?