Skip to main content
Information Security

Benefactor

 Benefactor
First bounty you manually award on your own question.
Awarded 318 times.
Does a CAA record on a local hostname in a LAN offer additional security?
Awarded Oct 8, 2019 at 6:30
Is this a security flaw in LinkedIn or a known behaviour
Awarded Sep 17, 2019 at 8:40
How long should zip encryption password be for it take 10 years to crack?
Awarded Aug 18, 2019 at 17:45
Potential Risks Using Reference Code Based Authentication For Web Based Application Form That Contains SSN
Awarded Aug 10, 2019 at 19:20
Is there any existing attempted implementation of GSS-API/SPNEGO/GSS-SPNEGO for anything other than Kerberos / NTLM?
Awarded Jul 22, 2019 at 23:20
Distribute Program with Sheets API Credentials
Awarded Jun 21, 2019 at 16:40
Analysis of hacked servers -- daily RDP connections I can't find an obvious reason for
Awarded Jun 5, 2019 at 23:45
What are the benefits of using IP whitelists to secure cloud servers/resources?
Awarded May 15, 2019 at 6:50
CSRF token unique per user session - Why?
Awarded May 14, 2019 at 23:45
Does an authorization code grant rely on sessions?
Awarded Apr 30, 2019 at 20:10
Are the sha1 hashes used by common ssh configurations insecure?
Awarded Apr 23, 2019 at 16:05
Why were hyperlink auditing pings used for DDoS attacks and not any other requests?
Awarded Apr 20, 2019 at 15:15
Router Receiving Unknown Packets from the Same IP and Port Even After Address Rotations - How?
Awarded Mar 28, 2019 at 0:45
How can I be pwned if I'm not registered on the compromised site?
Awarded Mar 11, 2019 at 6:10
Why are top-level wildcard bindings unsafe?
Awarded Mar 7, 2019 at 9:35
Preparing to change over to new GPG-key - what to do with my old ones?
Awarded Mar 6, 2019 at 22:05
Windows process documentation for tuning Sysmon
Awarded Feb 3, 2019 at 8:30
Incident response and recovery from a security breach with unknown attack vector
Awarded Jan 31, 2019 at 18:10
SameSite cookie attribute and Synchronizer Token Pattern
Awarded Jan 24, 2019 at 16:50
Signing and timestamping implementation
Awarded Jan 14, 2019 at 8:30
Transforming keystroke dynamics raw data
Awarded Jan 8, 2019 at 19:50
A protocol for encrypting the data on the server, but with a password on a mobile device
Awarded Jan 3, 2019 at 7:25
Can a data requester get the sender when "Sealed sender" is enabled in Signal?
Awarded Dec 4, 2018 at 8:05
Can a custom return path make SPF redundant
Awarded Oct 1, 2018 at 7:15
Deal with API Webhooks that refuses authenticating itself
Awarded Sep 25, 2018 at 9:00
Configuration for Windows account mapped to IIS certificate authorization
Awarded Sep 21, 2018 at 2:15
Using android auto in a rental car
Awarded Sep 4, 2018 at 0:30
Does the ANeko app demonstrate vulnerabilities in the Android architecture?
Awarded Aug 27, 2018 at 3:15
What are the security implications of homebrew and macports?
Awarded Aug 21, 2018 at 21:00
Common format to send encrypted data + IV?
Awarded Aug 5, 2018 at 15:50
Why is unsanitized output from ajax request bad?
Awarded Aug 5, 2018 at 1:01
Do I need CSRF protection in this setup with a REST API backed with oauth2 and a basic auth SSO auth server?
Awarded Jul 25, 2018 at 10:05
Are there any objective reasons to use dedicated user/password instead of identity providers within a large organization?
Awarded Jul 18, 2018 at 6:32
Bank asked for a cross login?
Awarded Jun 17, 2018 at 12:38
Help! My information has been stolen! What do I do now?
Awarded Jun 16, 2018 at 15:45
Hydra - Attacking when login page encodes the username and password
Awarded Jun 11, 2018 at 12:58
Is "always use /dev/urandom" still good advice in an age of containers and isolation?
Awarded May 30, 2018 at 19:55
How secure IIS run together with XAMPP?
Awarded May 27, 2018 at 11:47
Using sqlmap and testing parameters inside SEF URL alias
Awarded May 24, 2018 at 4:59
Confused about using a password that "would take centuries to break"
Awarded May 9, 2018 at 20:47
BeEF XSS - internal working
Awarded May 8, 2018 at 13:32
iTunes Account Joined Family Group Without Permission
Awarded May 4, 2018 at 16:18
Token FIPS 140-2 level 3 with support for Android, iPhone and Web
Awarded Apr 26, 2018 at 20:38
Certificate transparency: should the certificate be submitted to ct-logs if the pre-certificate is already submitted
Awarded Apr 8, 2018 at 18:12
What is the best protocol for an organisation to make phone calls to clients, where the client is required to verify their identity?
Awarded Mar 25, 2018 at 22:06
Why are developers using embedded user agents for 3rd party auth? What are the alternatives?
Awarded Feb 26, 2018 at 23:41
What are the real world risks of opening ports for multiplayer games?
Awarded Feb 14, 2018 at 6:08
Is SSL/TLS pointless for IRC?
Awarded Feb 12, 2018 at 7:10
How to increase gadget occurence in a program
Awarded Feb 5, 2018 at 10:02
Entropy on native memorable password on macosX keychain
Awarded Jan 23, 2018 at 13:16
How to set basic defense on Nginx-CMS?
Awarded Jan 18, 2018 at 18:49
Putting secrets into enclave
Awarded Jan 13, 2018 at 9:26
How can application like Whatsdog detect user online status from Whatsapp?
Awarded Dec 29, 2017 at 5:57
Possible to use *only* U2F authentication?
Awarded Dec 21, 2017 at 17:29
What’s wrong with in-browser cryptography in 2017?
Awarded Nov 24, 2017 at 17:32
Content-Security-Policy: Getting weird reports with frame-ancestors 'self'
Awarded Nov 12, 2017 at 19:53
Security benefit of hardware backed host keys for OpenSSH
Awarded Oct 30, 2017 at 14:02
Execute a PHP function that returns an array from an XSL file
Awarded Oct 16, 2017 at 18:40
Known risks with the old IPSEC Cisco VPN client?
Awarded Sep 29, 2017 at 4:31
How feasible is it for an attacker to brute-force an NTLMv2 response captured off the network?
Awarded Sep 21, 2017 at 5:35
1
2
3 4 5 6