Great Answer - Badge - Information Security Stack Exchange

Great Answer

Answer score of 100 or more. This badge can be awarded multiple times.

Awarded 576 times.

Is "the oft-cited XKCD scheme [...] no longer good advice"?

Awarded Jun 12 at 1:08

Jeffrey Goldberg

6,6251 gold badge18 silver badges21 bronze badges

How to store salt?

Awarded Mar 3 at 17:40

Jacco

7,7125 gold badges34 silver badges54 bronze badges

My email address is being used to enroll for online services. Should I be concerned?

Awarded Feb 9 at 17:18

hax

3,9412 gold badges17 silver badges35 bronze badges

ECDSA vs ECDH vs Ed25519 vs Curve25519

Awarded Nov 12, 2023 at 15:30

Brian Minton

1,2261 gold badge9 silver badges15 bronze badges

Is using a public-key for logging in to SSH any better than saving a password?

Awarded Sep 12, 2023 at 17:36

john

11.1k2 gold badges38 silver badges43 bronze badges

Should I change the default SSH port on linux servers?

Awarded Aug 27, 2023 at 7:49

Scott Pack

15.3k6 gold badges63 silver badges91 bronze badges

What is the difference between serial number and thumbprint?

Awarded Jul 10, 2023 at 17:56

Thomas Pornin

327k60 gold badges794 silver badges964 bronze badges

What could an "<img src=" XSS do?

Awarded May 24, 2023 at 13:57

grochmal

5,8874 gold badges22 silver badges31 bronze badges

Password management for kids - what's a good way to start?

Awarded Apr 24, 2023 at 12:25

not_very_nice

8831 gold badge7 silver badges5 bronze badges

How to check if an SSH private key has passphrase or not?

Awarded Apr 6, 2023 at 17:25

Jakuje

5,8791 gold badge22 silver badges34 bronze badges

Certificate based authentication vs Username and Password authentication

Awarded Mar 12, 2023 at 8:52

Thomas Pornin

327k60 gold badges794 silver badges964 bronze badges

What's the purpose of DH Parameters?

Awarded Feb 7, 2023 at 3:42

SEJPM

9,7906 gold badges40 silver badges69 bronze badges

Why can't you work backwards with public key to decrypt a message?

Awarded Jan 16, 2023 at 9:18

Lucas

1,4111 gold badge12 silver badges11 bronze badges

Is Plaid, a service which collects user’s banking login information, safe to use?

Awarded Jan 3, 2023 at 15:51

Ilikeprivacy

1,0811 gold badge6 silver badges3 bronze badges

Does bcrypt have a maximum password length?

Awarded Oct 25, 2022 at 21:36

Tom Leek

173k29 gold badges349 silver badges481 bronze badges

How dangerous is XSS?

Awarded Oct 24, 2022 at 7:18

Gowtham

1,0131 gold badge7 silver badges14 bronze badges

How can I explain SQL injection without technical jargon?

Awarded Oct 19, 2022 at 13:56

Erlend

2,2551 gold badge15 silver badges14 bronze badges

Why would someone "double encrypt"?

Awarded Sep 9, 2022 at 14:49

Mike Goodwin

2,1711 gold badge13 silver badges14 bronze badges

Does OpenPGP key expiration add to security?

Awarded Sep 9, 2022 at 11:21

Jens Erat

24.6k12 gold badges82 silver badges103 bronze badges

Do I need CSRF token if I'm using Bearer JWT?

Awarded Aug 17, 2022 at 11:21

Conor Mancone

31.4k13 gold badges95 silver badges101 bronze badges

SSH Key: Ed25519 vs RSA

Awarded May 4, 2022 at 12:03

Tom Leek

173k29 gold badges349 silver badges481 bronze badges

Storing weakness level of passwords

Awarded Apr 18, 2022 at 22:34

Steffen Ullrich

204k30 gold badges410 silver badges474 bronze badges

If we should encrypt the message rather than the method of transfer, why do we care about wifi security? Is this just security theatre?

Awarded Feb 26, 2022 at 11:01

Lie Ryan

31.5k6 gold badges71 silver badges95 bronze badges

Can malicious code fit in 14 bytes?

Awarded Feb 25, 2022 at 13:30

ThoriumBR

54.6k13 gold badges137 silver badges153 bronze badges

What is different about being targeted by a professional attacker?

Awarded Feb 21, 2022 at 17:27

Basic

1,1901 gold badge6 silver badges13 bronze badges

Is it bad that my ed25519 key is so short compared to a RSA key?

Awarded Feb 20, 2022 at 0:48

Tom Leek

173k29 gold badges349 silver badges481 bronze badges

What are the security reasons for disallowing the plus sign in email addresses?

Awarded Feb 10, 2022 at 13:11

gowenfawr

73k17 gold badges166 silver badges201 bronze badges

Why would I choose SHA-256 over SHA-512 for a SSL/TLS certificate?

Awarded Nov 28, 2021 at 8:51

Xander

35.8k27 gold badges117 silver badges145 bronze badges

Why does DocuSign require that your password "must not contain the characters <, > or spaces."?

Awarded Nov 7, 2021 at 15:12

CBHacking

49.6k3 gold badges91 silver badges134 bronze badges

How are one-time password generators like Google Authenticator different from having two passwords?

Awarded Oct 8, 2021 at 9:36

Esa Jokinen

19.1k6 gold badges59 silver badges60 bronze badges

Can I safely preview a short link?

Awarded Oct 6, 2021 at 5:57

stackprotector

1,6633 gold badges10 silver badges19 bronze badges

Have I properly destroyed my SSD?

Awarded Sep 14, 2021 at 10:16

Polynomial

135k43 gold badges307 silver badges383 bronze badges

How secure are virtual machines really? False sense of security?

Awarded Aug 23, 2021 at 8:00

Marcin

2,5781 gold badge16 silver badges14 bronze badges

Difference Between OAUTH, OpenID and OPENID Connect in very simple term?

Awarded Jul 28, 2021 at 15:32

Shaun Luttin

1,5033 gold badges12 silver badges13 bronze badges

Disadvantages of replacing TCP/IP with blockchain

Awarded Jul 5, 2021 at 15:12

schroeder♦

131k55 gold badges306 silver badges346 bronze badges

Is BASIC-Auth secure if done over HTTPS?

Awarded Jun 24, 2021 at 18:47

Nemo

1,7171 gold badge14 silver badges11 bronze badges

Known strings to have the same MD5 hash, not colliding in real life?

Awarded May 29, 2021 at 18:57

Steffen Ullrich

204k30 gold badges410 silver badges474 bronze badges

Suspicious GitHub fork

Awarded Apr 16, 2021 at 12:59

Stack Exchange Supports Israel

4,9313 gold badges22 silver badges19 bronze badges

Why do "remote desktop" software (allegedly) commonly have a "blackout" feature?

Awarded Apr 14, 2021 at 18:17

schroeder♦

131k55 gold badges306 silver badges346 bronze badges

Why would an attacker ever want to sit on a zero-day exploit?

Awarded Mar 7, 2021 at 5:27