Skip to main content
Information Security

Investor

 Investor
First bounty you offer on another person's question.
Awarded 140 times.
What should we do in practice to mitigate vulnerabilities in WPA3?
Awarded Apr 17 at 20:03
Does a signature service provider level digital certificate for electronic signature comply with eIDAS requirement for Advanced Electronic Signatures?
Awarded Apr 10 at 21:15
Is there a standard for OTPs tied to transaction details (that has been implemented in apps/devices)?
Awarded Jan 10 at 16:55
What's the use of an "extra" dynamic declaration in an external DTD blind XXE attack?
Awarded Aug 5, 2023 at 9:09
How do big websites (e.g. Google, Twitter, GitHub, ...) have practically infinite session lengths without compromising on security?
Awarded Jan 31, 2023 at 0:20
What is the best practice for relying parties to selectively trust certificates in a corporate pki hierarchy?
Awarded Aug 3, 2022 at 10:47
Detecting BIOS changes on PC
Awarded Jun 3, 2022 at 9:32
Scan sg350-28 with Nessus Credentialed checks
Awarded Feb 21, 2022 at 17:20
Powershell says microsoft's own ps1 script is insecure, should I proceed with running the script?
Awarded Dec 31, 2021 at 11:55
How to find out if ClamAV current version has signature for specific Exploit/Trojan/Worm etc. or not?
Awarded Dec 14, 2021 at 13:36
Should I hash session IDs before storing the session contents?
Awarded Sep 26, 2021 at 18:52
Can “c:set” cause Cross Site Scripting (XSS) vulnerability?
Awarded Sep 16, 2021 at 12:25
Why is HTTPS not the default protocol?
Awarded Aug 30, 2021 at 13:03
NXP NTAG 21x/Desfire password protection and Original signature, protects against cloning?
Awarded Jun 27, 2021 at 11:31
Adding Expect-CT header to HTTP response
Awarded Mar 20, 2021 at 10:10
Unseen.is encryption claims revisited with their proprietary, patented "xAES" algorithm
Awarded Mar 7, 2021 at 5:27
Passive and active attacks via X11. Is Wayland any better?
Awarded Feb 23, 2021 at 11:32
Web Assembly Security
Awarded Jan 16, 2021 at 1:05
Can Google access data in their Confidential Computing VMs?
Awarded Dec 4, 2020 at 17:34
How are TPMs used to detect tampering?
Awarded Sep 23, 2020 at 3:55
Use Personal certificate without a key with Firefox
Awarded Sep 9, 2020 at 15:28
Smart-Screen filter still complains, despite I signed the executable, why?
Awarded Sep 8, 2020 at 9:08
Passwordless login over email - security considerations
Awarded Jul 10, 2020 at 3:26
Are X.509 nameConstraints on certificates supported on OS X?
Awarded Jun 18, 2020 at 14:21
How can I verify Keybase's end-to-end encryption between me and a friend?
Awarded Apr 22, 2020 at 17:30
Why are CSRF tokens necessary?
Awarded Apr 19, 2020 at 20:04
Python's http.server library "basic security checks"
Awarded Feb 22, 2020 at 1:05
Unable to downgrade https to http through sslstrip, arpspoof
Awarded Feb 15, 2020 at 0:40
What gpg defaults can be improved, when performance is not an issue?
Awarded Jan 7, 2020 at 5:00
Wireshark tcp filter: tcp[((tcp[12:1] & 0xf0) >> 2):4]
Awarded Jan 1, 2020 at 23:15
How to secure backup scripts so I do not have to hardcode passwords?
Awarded Dec 11, 2019 at 13:45
Is it theoretically possible to hack printer using scanner tray?
Awarded Oct 23, 2019 at 14:00
Secure HttpOnly Cookie or Header field for auth token securing an API?
Awarded Oct 23, 2019 at 12:25
How to implement cross-domain, auto-login SSO without browser redirects for unlogged users?
Awarded Oct 16, 2019 at 11:35
iOS secure enclave and jailbreak
Awarded Oct 3, 2019 at 11:00
How do I check that users don't write down their passwords?
Awarded Oct 1, 2019 at 15:05
Methods root can use to elevate itself to kernel mode
Awarded Sep 6, 2019 at 14:05
DMA attacks despite IOMMU isolation
Awarded Aug 23, 2019 at 10:55
Is it possible to use WebAuthn for digitally signing documents in the browser?
Awarded Aug 16, 2019 at 0:35
Understanding SQLMAP payload
Awarded Aug 14, 2019 at 21:45
Why can SSL certificates not be free of charge?
Awarded Aug 10, 2019 at 19:20
Is it possible to connect to a proxy with an ssl (or otherwise encrypted) connection?
Awarded Jul 11, 2019 at 16:15
How do I check that users don't write down their passwords?
Awarded Jul 8, 2019 at 21:05
How can I get rid of the MDC packet in OpenPGP?
Awarded Jun 24, 2019 at 13:55
Can web sites detect whether you are using private browsing mode?
Awarded Jun 11, 2019 at 19:25
Prevent against OTP abuse in app sign up flow
Awarded Mar 13, 2019 at 10:30
Are FIDO U2F keys (like dual Yubikeys or dual Google Titan keys) undermined by the Google account recovery process?
Awarded Nov 28, 2018 at 19:40
How to use AWS KMS securely?
Awarded Nov 17, 2018 at 4:20
How secure is the Ciphersweet library for searchable encryption, and why is a duplicate entry leak not a problem?
Awarded Nov 9, 2018 at 0:35
What are the techniques to detect malware call home/beaconing activities?
Awarded Sep 30, 2018 at 9:10
How to calculate our application security debt?
Awarded Sep 22, 2018 at 6:50
Trying to understand what this PHP malware does [closed]
Awarded Sep 19, 2018 at 15:31
Security of WWAN cards in laptops
Awarded Jul 29, 2018 at 14:00
Why isn't PKCE encouraged for Single-Page Apps?
Awarded May 16, 2018 at 14:36
SIP UDP request breaking through iptables
Awarded Apr 4, 2018 at 13:25
Guessing PHP version and info from phpinfo using black box analysis
Awarded Apr 1, 2018 at 16:38
Frequent heavy CPU load from firefox browser -> malware? [closed]
Awarded Feb 22, 2018 at 12:45
Full disk encryption on dual boot system (Truecrypt/Veracrypt)
Awarded Feb 9, 2018 at 10:54
What technical reasons are there to have low maximum password lengths?
Awarded Dec 23, 2017 at 20:24
Smartcard authentication SSH remote client
Awarded Dec 22, 2017 at 17:42
1
2 3