User Serge Ballesta

130 votes

Accepted

How can waiting 24 hours to change the password again be secure?

answered Apr 3, 2017 at 10:10

101 votes

Is there a way to hide HTML source code yet keeping it effective?

answered Sep 19, 2019 at 13:11

84 votes

Should log files be kept secret?

answered Dec 6, 2018 at 9:55

77 votes

Accepted

Force user to remove USB token

answered Mar 12, 2019 at 11:32

76 votes

Are there any security risks in replying to an SMS message?

answered Mar 3, 2017 at 8:43

60 votes

Allow only specific devices to be connected to USB

answered Mar 28, 2017 at 15:22

53 votes

Storing passwords in access-restricted Google spreadsheets?

answered Nov 14, 2016 at 9:48

51 votes

Accepted

Are there objective reasons to not allow Google Chrome extensions, but to allow Firefox extensions?

answered Nov 27, 2017 at 9:42

50 votes

Why is JavaScript "safe" to run in the browser?

answered Nov 30, 2018 at 11:06

49 votes

Why is so much ransomware breakable?

answered May 15, 2019 at 16:07

43 votes

Accepted

KeePass Vs OneNote

answered Nov 3, 2016 at 14:55

41 votes

Should I tell my boss I have discovered their passwords and they are too weak?

answered Feb 2, 2017 at 19:17

36 votes

How To Recover End-To-End Encrypted Data After Losing Private Key?

answered Feb 22, 2021 at 9:06

35 votes

How to deal with this fundamental problem with the advice: "Don't trust obscure PHP libraries that nobody uses!"?

answered Dec 13, 2019 at 11:09

34 votes

Is there an encryption algorithm that allows for a single payload to have two different outputs based on the password?

answered Jan 23, 2017 at 16:49

29 votes

Is it common to allow local desktop and/or active directory admin access and rights for developers in organizations?

answered Jul 16, 2018 at 10:30

28 votes

Are there any OSes that verify program signatures before executing them?

answered Dec 7, 2016 at 10:13

28 votes

Accepted

Do machines without any listening services need a firewall to block incoming connections?

answered Oct 1, 2021 at 15:21

27 votes

Can we tamper-proof a game that's sold along with the Windows machine it runs on?

answered Oct 31, 2017 at 15:17

27 votes

Security risk of connecting to two networks simultaneously

answered Feb 12, 2020 at 14:26

22 votes

Does password-protecting a database living next to the application add any security?

answered May 16, 2018 at 12:20

22 votes

Why would a school need to install certificates on student laptops?

answered Jan 9, 2019 at 17:16

21 votes

Why do email server/clients block executable attachments?

answered Jan 14, 2020 at 13:31

20 votes

Are virtual keyboards not necessary anymore to protect against keyloggers?

answered Oct 25, 2017 at 15:41

20 votes

How many digits of a Visa card number can vendors disclose on receipts?

answered Dec 12, 2016 at 7:37

19 votes

Accepted

Does disabling WiFi and mobile data make my phone impossible to hack online?

answered Dec 23, 2017 at 16:17

18 votes

Do you rather trust a widely adopted algorithm or an underdog if they're cryptoanalytically on a level playingfield?

answered Feb 26, 2021 at 11:14

18 votes

Obfuscating HTTP Error Codes

answered Jan 14, 2022 at 9:40

17 votes

Accepted

Why do Chrome and Firefox report a different server certificate and issuer than OpenSSL?

answered Jul 20, 2018 at 12:36

16 votes

Why is it a bad idea for management to have constant access to every employee's inbox?

answered Oct 14, 2016 at 15:20

Stack Exchange Network

682 Answers

How can waiting 24 hours to change the password again be secure?

Is there a way to hide HTML source code yet keeping it effective?

Should log files be kept secret?

Force user to remove USB token

Are there any security risks in replying to an SMS message?

Allow only specific devices to be connected to USB

Storing passwords in access-restricted Google spreadsheets?

Are there objective reasons to not allow Google Chrome extensions, but to allow Firefox extensions?

Why is JavaScript "safe" to run in the browser?

Why is so much ransomware breakable?

KeePass Vs OneNote

Should I tell my boss I have discovered their passwords and they are too weak?

How To Recover End-To-End Encrypted Data After Losing Private Key?

How to deal with this fundamental problem with the advice: "Don't trust obscure PHP libraries that nobody uses!"?

Is there an encryption algorithm that allows for a single payload to have two different outputs based on the password?

Is it common to allow local desktop and/or active directory admin access and rights for developers in organizations?

Are there any OSes that verify program signatures before executing them?

Do machines without any listening services need a firewall to block incoming connections?

Can we tamper-proof a game that's sold along with the Windows machine it runs on?

Security risk of connecting to two networks simultaneously

Does password-protecting a database living next to the application add any security?

Why would a school need to install certificates on student laptops?

Why do email server/clients block executable attachments?

Are virtual keyboards not necessary anymore to protect against keyloggers?

How many digits of a Visa card number can vendors disclose on receipts?

Does disabling WiFi and mobile data make my phone impossible to hack online?

Do you rather trust a widely adopted algorithm or an underdog if they're cryptoanalytically on a level playingfield?

Obfuscating HTTP Error Codes

Why do Chrome and Firefox report a different server certificate and issuer than OpenSSL?

Why is it a bad idea for management to have constant access to every employee's inbox?