Skip to main content
Information Security

Famous Question

 Famous Question
Question with 10,000 views. This badge can be awarded multiple times.
Awarded 5927 times.
What's the point of hashing a password and then sending it to the server?
Awarded Mar 26 at 9:48
Do I put my subordinate (intermediate) or root CA certificate in my truststore?
Awarded Mar 25 at 22:27
Transport Layer Encryption vs. Application Layer Encryption
Awarded Mar 25 at 15:55
2FA: Why do I need to keep my backup codes for each platform on paper?
Awarded Mar 24 at 10:36
SEToolkit Not Cloning Login Page
Awarded Mar 22 at 6:31
Is it really possible to install spyware on a cell phone without having access to it?
Awarded Mar 21 at 22:43
What's the difference between "Trusted Root Certification Authorities" and "Third-Party Root Certification Authorities" Windows certificate stores?
Awarded Mar 19 at 13:51
Can my IP be found on Telegram by malicious people?
Awarded Mar 17 at 16:22
What does using Cloudflares WARP app offer that HTTPS (websites) alongside DNS over HTTPS / TLS doesn't?
Awarded Mar 17 at 5:06
How does the option to “use system certificates” for a wifi login vary from choosing a specific certificate?
Awarded Mar 13 at 9:06
Move a user CA cert to a trusted root cert in Android 13
Awarded Mar 11 at 2:07
DDoS on LAN: How to Defend?
Awarded Mar 10 at 21:45
What's the security issue with base64 encoding/decoding?
Awarded Mar 10 at 8:47
Why do I get the error "dh key too small" when the RSA key is 2048 bits?
Awarded Mar 7 at 12:31
Reason to not use chmod -R 777 on internal server for project source code?
Awarded Mar 7 at 4:35
SHA256 instead of Rfc2898DeriveBytes [closed]
Awarded Mar 7 at 3:26
Using PBKDF2 for hash and AES key generation implementation
Awarded Mar 6 at 16:08
Shared secret when using JWT with an HMAC for authentication
Awarded Mar 4 at 21:32
John The Ripper and PBKDF2-HMAC-SHA1
Awarded Mar 4 at 21:07
After changing Microsoft password, one can still login to previously authenticated Windows devices with old password indefinitely. Why?
Awarded Mar 3 at 8:46
Privacy with Chromium?
Awarded Mar 2 at 15:48
How valuable is secrecy of an algorithm?
Awarded Feb 25 at 22:04
What is the difference between "key length" and "bit strength"?
Awarded Feb 24 at 18:02
How to check if your computer has a backdoor installed on it? [closed]
Awarded Feb 21 at 19:21
Allowing a website MIDI access from Chrome
Awarded Feb 20 at 14:52
TLS: how and when is the client's certificate used?
Awarded Feb 20 at 12:34
How to disable the use of HTTP verb tunneling using HTTP headers or query parameters?
Awarded Feb 19 at 16:57
RADIUS Authentication and Shared Secret, is secure?
Awarded Feb 19 at 9:12
Couldn't validate TLS certificate - Nord VPN
Awarded Feb 18 at 12:45
Should a windows IT shop have concerns about enabling WSL for users?
Awarded Feb 17 at 3:25
Why do I need both root password and user password in Fedora Linux?
Awarded Feb 14 at 17:38
Is WPA3 mixed mode less secure than pure WPA3?
Awarded Feb 14 at 6:35
How does proxychains avoid DNS leaks?
Awarded Feb 13 at 6:40
TLS version of cipher suite TLS_DHE_RSA_WITH_AES_256_CBC_SHA
Awarded Feb 12 at 16:49
Do I need CSRF protection in this setup with a REST API backed with oauth2 and a basic auth SSO auth server?
Awarded Feb 10 at 22:30
How to get shodan to report IP addresses with a specific open port?
Awarded Feb 10 at 11:42
Exploit: Send cookie to another server from url
Awarded Feb 10 at 0:38
Is http to http to https redirection secure?
Awarded Feb 6 at 15:56
What was SSL 1.0?
Awarded Feb 6 at 11:15
MSF Venom Reverse TCP-Shell: Meterpreter and Netcat Listeners not responsive
Awarded Feb 5 at 16:18
how to make socat ignore client certificate?
Awarded Feb 5 at 5:04
Estimating Password Cracking Speed Based on GPU?
Awarded Feb 4 at 22:50
Should I consider my Azure tenant ID as a secret?
Awarded Feb 3 at 23:15
When exactly is Diffie-Hellman used in TLS?
Awarded Jan 31 at 9:27
Having a JWT that doesn't expire
Awarded Jan 31 at 8:42
How to prevent illegal file transfer or copying of video files from a PC? [closed]
Awarded Jan 30 at 20:35
Is open RDP really dangerous? [duplicate]
Awarded Jan 30 at 4:23
Are RADIUS and TACACS+ Ever Allowed in FIPS 140-2 Compliant Scenarios?
Awarded Jan 30 at 1:40
Is there a way to use VirusTotal.com offline?
Awarded Jan 29 at 15:10
Brute force time estimation - random sequence
Awarded Jan 28 at 12:57
Why did TLS 1.3 drop AES-CBC?
Awarded Jan 27 at 16:01
security issues in JWT storage
Awarded Jan 23 at 15:36
Passing a C# object to Javascript in ASP.NET MVC
Awarded Jan 23 at 11:05
PKI: Difference between CPS and CP
Awarded Jan 23 at 10:01
What are the differences between Session Ticket and Session ID based Session Resumption?
Awarded Jan 22 at 1:55
How could a scammer get my card details if I've never used it
Awarded Jan 20 at 19:25
I have a scammer's phone number. Now what? [closed]
Awarded Jan 19 at 17:02
Chinese or "pinyin" wordlists for dictionary attacks
Awarded Jan 19 at 11:55
GnuPG + Yubikey 4: How to manually check that all keys are where they belong (on the Yubikey only)?
Awarded Jan 17 at 9:35
How to find and disable specific ciphers on Linux?
Awarded Jan 17 at 7:03
1 2
3
4 5
…
99