Skip to main content
Information Security

Favorite Question

 Favorite Question
Question saved by 25 users. This badge can be awarded multiple times.
Awarded 530 times.
Should I change the private key when renewing a certificate?
Awarded May 13 at 12:48
RSA public key and private key lengths
Awarded May 11 at 17:10
How does the TPM perform integrity measurements on a system?
Awarded May 6 at 10:51
How should web app developers defend against JSON hijacking?
Awarded Mar 3 at 6:58
Diffie Hellman parameters still calculating after 24 hours
Awarded Jan 8 at 13:05
Preventing deauthentication attacks
Awarded Jan 6 at 20:35
Sending passwords to someone remotely
Awarded Nov 26, 2024 at 11:06
Detecting steganography in images
Awarded Aug 29, 2024 at 4:22
Which protocols exist for end-to-end encrypted group chat?
Awarded Aug 29, 2024 at 2:48
Hashing a credit card number for use as a fingerprint
Awarded Jun 2, 2024 at 11:16
How is it possible to embed executable code in an image
Awarded May 10, 2024 at 7:10
Why is using salt more secure?
Awarded Jan 18, 2024 at 11:58
What is the difference between serial number and thumbprint?
Awarded Dec 31, 2023 at 16:47
Should I use CSRF protection for GET requests?
Awarded Sep 8, 2023 at 12:27
What security scheme is used by PDF password encryption, and why is it so weak?
Awarded Aug 7, 2023 at 23:35
Why isn't open WiFi encrypted?
Awarded Aug 7, 2023 at 22:21
Migrating GPG master keys as subkeys to new master key
Awarded Jun 8, 2023 at 15:28
Are random URLs a safe way to protect profile photos?
Awarded May 14, 2023 at 8:50
Extract pre-master keys from an OpenSSL application
Awarded Feb 19, 2023 at 13:35
Are phone calls on a GSM network encrypted?
Awarded Feb 15, 2023 at 17:13
Diffie-Hellman and its TLS/SSL usage
Awarded Jan 7, 2023 at 18:27
Why would I ever use AES-256-CBC if AES-256-GCM is more secure?
Awarded Dec 16, 2022 at 5:25
Can I require both private key and password authentication for SSH login?
Awarded Nov 7, 2022 at 2:51
Is Signal still more secure than WhatsApp?
Awarded Oct 16, 2022 at 18:03
Docker as a sandbox for untrusted code
Awarded Aug 20, 2022 at 15:32
What is the specific reason to prefer bcrypt or PBKDF2 over SHA256-crypt in password hashes?
Awarded Jul 25, 2022 at 20:03
SSL with GET and POST
Awarded Jul 7, 2022 at 17:42
How do antiviruses scan for thousands of malware signatures in a short time?
Awarded Jul 3, 2022 at 9:40
What is the difference between a Hash Function and a Cryptographic Hash Function?
Awarded Jun 30, 2022 at 12:10
Why should I offer HTTP in addition to HTTPS?
Awarded Jun 21, 2022 at 11:27
Store encrypted user data in database
Awarded Apr 18, 2022 at 12:16
How does CORS prevent XSS?
Awarded Apr 7, 2022 at 21:26
Can wiped SSD data be recovered?
Awarded Mar 25, 2022 at 0:31
Recommended ssl_ciphers for security, compatibility - Perfect Forward secrecy
Awarded Mar 15, 2022 at 20:10
Why is JavaScript "safe" to run in the browser?
Awarded Mar 8, 2022 at 23:51
Are password-protected ZIP files secure?
Awarded Feb 15, 2022 at 12:06
Differences between using Tor browser and VPN
Awarded Feb 6, 2022 at 20:33
What are the differences between TPM and HSM?
Awarded Feb 1, 2022 at 13:40
How to verify the checksum of a downloaded file (pgp, sha, etc.)?
Awarded Dec 15, 2021 at 19:22
How can ISPs handle DDoS attacks?
Awarded Nov 14, 2021 at 13:33
How do I safely inspect a potentially malicious website?
Awarded Oct 30, 2021 at 23:03
Port Knocking is it a good idea?
Awarded Oct 12, 2021 at 22:27
Length of passwords that are rainbow table safe
Awarded Oct 8, 2021 at 3:17
Can I safely preview a short link?
Awarded Oct 6, 2021 at 9:28
Why add username to salt before hashing a password?
Awarded Sep 22, 2021 at 21:56
Generic error message for wrong password or username - is this really helpful?
Awarded Sep 19, 2021 at 17:42
Is refreshing an expired JWT token a good strategy?
Awarded Sep 15, 2021 at 3:16
Can RAM retain data after removal?
Awarded Sep 12, 2021 at 12:27
Is it bad that my ed25519 key is so short compared to a RSA key?
Awarded Sep 8, 2021 at 13:25
Is Plaid, a service which collects user’s banking login information, safe to use?
Awarded Aug 5, 2021 at 7:18
Why is SMS used as a way of verifying a user's mobile, when it is not even encrypted in transit?
Awarded Jul 21, 2021 at 16:10
Is it possible make brute-force attacks ineffective by giving false positive answers to failed log-in attempts?
Awarded Jun 12, 2021 at 14:26
Is CORS helping in anyway against Cross-Site Forgery?
Awarded May 27, 2021 at 6:42
Can someone explain what exactly is accomplished by generation of DH parameters?
Awarded May 14, 2021 at 6:30
Is using 'dot' and 'at' in email addresses in public text still useful?
Awarded Apr 29, 2021 at 16:52
SSH Key: Ed25519 vs RSA
Awarded Apr 11, 2021 at 9:30
Why is Math.random() not designed to be cryptographically secure?
Awarded Mar 7, 2021 at 5:57
How does Shutterstock keep getting my latest debit card number?
Awarded Feb 23, 2021 at 18:04
Invalid users trying to log in to my server
Awarded Feb 22, 2021 at 7:33
How to determine if a browser is using an SSL or TLS connection?
Awarded Feb 22, 2021 at 7:33
1
2 3 4 5
…
9