Skip to main content
Information Security

Good Question

 Good Question
Question score of 25 or more. This badge can be awarded multiple times.
Awarded 2660 times.
Which strategy to encrypt data accessed by multiple users?
Awarded 23 hours ago
Wireless client isolation - how does it work, and can it be bypassed?
Awarded Jul 17 at 2:41
Should I be worried about unusual SSH login attempts from unknown IP addresses?
Awarded Jul 16 at 20:32
How does this Bitcoin scam work?
Awarded Jul 4 at 0:12
Tracking down a rogue access point
Awarded Jun 25 at 0:21
Does the recommendation to use password managers also apply to corporate environments?
Awarded Jun 20 at 14:31
To firewall or not to firewall?
Awarded Jun 19 at 4:05
Using V4 UUID for authentication
Awarded Jun 18 at 22:20
Is it safe to publish a private CA's root and intermediate certificates?
Awarded Jun 11 at 9:10
My credit union is reducing its maximum password length to 10 characters
Awarded Jun 6 at 1:42
Is there a way to download a PHP file without it being executed?
Awarded Jun 3 at 11:49
Why doesn't Microsoft implement salt on users passwords in Windows?
Awarded May 31 at 11:17
CSP allowing all Google domains?
Awarded May 30 at 19:55
A client did an unannounced penetration test on our platform
Awarded May 28 at 17:47
How long does malware last "in the wild"?
Awarded May 27 at 9:46
Are older viruses removed from virus definition files?
Awarded May 20 at 8:00
Memory dumping Android
Awarded May 8 at 14:57
Is .txt the only email attachment type that can always be opened without risk?
Awarded May 6 at 16:07
Vim Modeline Vulnerabilities
Awarded May 5 at 7:57
Is it secure to store a two factor authentication seed in a password manager?
Awarded Apr 8 at 21:42
Why are certificates limited in time?
Awarded Mar 25 at 1:06
Why is it called cross-site scripting? (XSS)
Awarded Mar 19 at 15:40
Why are refresh tokens treated differently than access tokens
Awarded Mar 12 at 22:36
Is Postgres's uuid_generate_v4 securely random?
Awarded Mar 10 at 6:56
How to subscribe to information about new vulnerabilities in selected products? [closed]
Awarded Mar 4 at 21:52
Difference between OpenSSL and keytool
Awarded Feb 19 at 7:05
Can I add an email address to an existing GPG key?
Awarded Feb 9 at 17:52
What is the point of entering numbers in the two-factor authentication app?
Awarded Feb 5 at 11:25
How is 4G LTE encrypted?
Awarded Jan 31 at 2:20
Firefox: certificate can’t be installed [closed]
Awarded Jan 21 at 13:09
Is a JWT usable as a CSRF token?
Awarded Jan 17 at 5:25
Is it safe to rely on UUIDs for privacy?
Awarded Dec 15, 2023 at 5:17
Did a Huawei modem just try to do a Man-In-The-Middle attack on me?
Awarded Dec 7, 2023 at 18:22
What's wrong with the use of a WAF (Web Application Firewall)?
Awarded Dec 7, 2023 at 10:57
Preventing User Enumeration on Registration Page
Awarded Dec 6, 2023 at 12:20
SSL/TLS: How to fix "Chain issues: Contains anchor"
Awarded Dec 5, 2023 at 0:42
OpenSSH default/preferred ciphers, hash, etc for SSH2
Awarded Nov 17, 2023 at 10:48
Access to the codebase in big companies [duplicate]
Awarded Nov 7, 2023 at 18:25
Spying on a smartphone remotely by the authorities: feasibility and operation
Awarded Nov 3, 2023 at 15:51
Can SSL be used to encrypt non-HTTP data? [closed]
Awarded Oct 21, 2023 at 13:06
How could a security control introduce a privacy issue?
Awarded Oct 18, 2023 at 14:30
Security Headers for a web API
Awarded Oct 3, 2023 at 20:19
What happens when a TPM chip breaks or fails?
Awarded Sep 29, 2023 at 20:09
How do "Confidence images" on my bank's login page improve security?
Awarded Sep 29, 2023 at 13:31
Is a safelinks.protection.outlook.com link phishing?
Awarded Sep 29, 2023 at 7:09
Does the X-Permitted-Cross-Domain-Policies header have any benefit for my website if I'm not using Adobe products?
Awarded Sep 28, 2023 at 19:42
How is storing an API secret key in plaintext (in a database) secure?
Awarded Sep 28, 2023 at 12:18
Is it okay to sign a PGP key without an IRL meeting?
Awarded Sep 27, 2023 at 19:35
What is the point of restricting a google API key by HTTP referer?
Awarded Sep 7, 2023 at 13:33
Relationship between RSA, Diffie-Hellman Key Exchange, PKI and X.509?
Awarded Aug 20, 2023 at 6:19
Create backup Yubikey with identical PGP keys
Awarded Jul 20, 2023 at 7:35
Simple string comparisons not secure against timing attacks [duplicate]
Awarded Jul 13, 2023 at 21:09
Is it reasonable to use KeePassXC with YubiKey?
Awarded Jul 12, 2023 at 15:48
How secure are sha256 + salt hashes for password storage [duplicate]
Awarded Jul 7, 2023 at 21:09
Password hashing on frontend or backend? [duplicate]
Awarded Jul 3, 2023 at 4:56
Why use usernames and not just email addresses to identify users?
Awarded Jun 30, 2023 at 14:26
Does rebooting a phone daily increase your phone's security?
Awarded Jun 25, 2023 at 1:10
What's a "safe" URL shortening algorithm?
Awarded Jun 20, 2023 at 19:46
Java SecureRandom doesn't block? How?
Awarded Jun 19, 2023 at 9:42
Is checking the Referer and Origin headers enough to prevent CSRF, provided that requests with neither are rejected?
Awarded Jun 15, 2023 at 11:13
1
2 3 4 5
…
45