Great Question - Badge - Information Security Stack Exchange

Great Question

Question score of 100 or more. This badge can be awarded multiple times.

Awarded 327 times.

What is the benefit of having FIPS hardware-level encryption on a drive when you can use Veracrypt instead?

Awarded Jul 1 at 16:13

Taeyang

4872 gold badges4 silver badges4 bronze badges

What could an "<img src=" XSS do?

Awarded Jan 21 at 18:34

user1910744

1,0632 gold badges8 silver badges6 bronze badges

How would disabling IPv6 make a server any more secure?

Awarded Nov 28, 2023 at 18:03

vakus

3,8435 gold badges23 silver badges34 bronze badges

Are there any downsides to using Let's Encrypt for a website's SSL certificates?

Awarded Oct 3, 2023 at 7:16

Dolan Antenucci

1,1532 gold badges7 silver badges5 bronze badges

What is the specific reason to prefer bcrypt or PBKDF2 over SHA256-crypt in password hashes?

Awarded Jun 9, 2023 at 7:26

ilkkachu

2,1852 gold badges12 silver badges16 bronze badges

Company computers for competent developers, how can you deal with them?

Awarded May 31, 2023 at 13:42

grochmal

5,8874 gold badges22 silver badges31 bronze badges

How do I get the RSA bit length with the pubkey and openssl?

Awarded Apr 12, 2023 at 23:43

Evan Carroll

2,8735 gold badges26 silver badges43 bronze badges

How are private keys kept private?

Awarded Mar 4, 2023 at 6:16

George Hawkins

1,1551 gold badge8 silver badges11 bronze badges

What aspects of image preparation workflows can lead to accidents like Boris Johnson's No. 10 tweet's 'hidden message'?

Awarded Jan 31, 2023 at 1:18

uhoh

1,4092 gold badges12 silver badges21 bronze badges

What is ECDHE-RSA?

Awarded Jan 31, 2023 at 1:18

Hubert Kario

3,8085 gold badges29 silver badges35 bronze badges

Are GUIDs safe for one-time tokens?

Awarded Jan 31, 2023 at 1:18

Michael Haren

1,1122 gold badges7 silver badges7 bronze badges

Why do you have to be an admin to create a symlink in Windows?

Awarded Jan 29, 2023 at 10:20

ripper234

1,2462 gold badges9 silver badges12 bronze badges

Is it bad that my ed25519 key is so short compared to a RSA key?

Awarded Jan 10, 2023 at 2:11

Alex

1,4772 gold badges11 silver badges10 bronze badges

Can I add a password to an existing private key?

Awarded Nov 15, 2022 at 10:55

IQAndreas

6,86510 gold badges35 silver badges53 bronze badges

What's the advantage of using PBKDF2 vs SHA256 to generate an AES encryption key from a passphrase?

Awarded Oct 21, 2022 at 6:05

Andrey Fedorov

1,3332 gold badges10 silver badges12 bronze badges

How do very big companies manage their most important passwords / keys?

Awarded Sep 14, 2022 at 22:27

Basj

9532 gold badges9 silver badges16 bronze badges

Landlord will be watching my data traffic, as mentioned in the lease agreement

Awarded Aug 29, 2022 at 18:16

Olba12

1,0692 gold badges8 silver badges13 bronze badges

In 2018, what is the recommended hash to store passwords: bcrypt, scrypt, Argon2?

Awarded Jul 29, 2022 at 19:41

jcaron

3,6752 gold badges17 silver badges23 bronze badges

Does it improve security to use obscure port numbers?

Awarded Jul 16, 2022 at 12:36

William Rosenbloom

1,5562 gold badges9 silver badges12 bronze badges

Do I need CSRF token if I'm using Bearer JWT?

Awarded Mar 30, 2022 at 14:27

Igor Pomogai

1,4232 gold badges9 silver badges7 bronze badges

SSH Key: Ed25519 vs RSA

Awarded Mar 20, 2022 at 18:12

Ben Richard

3,7265 gold badges19 silver badges18 bronze badges

How to check if an SSH private key has passphrase or not?

Awarded Mar 3, 2022 at 21:47

kung

1,4892 gold badges9 silver badges9 bronze badges

How to create a company culture that cares about information security?

Awarded Feb 16, 2022 at 18:21

RF03

1,0631 gold badge8 silver badges12 bronze badges

How does SSLstrip work?

Awarded Feb 16, 2022 at 18:21

Scott Helme

3,2483 gold badges23 silver badges33 bronze badges

What is the purpose of confirming old password to create a new password?

Awarded Feb 16, 2022 at 18:21

ronaldtgi

1,2053 gold badges11 silver badges14 bronze badges

What is the difference between an X.509 "client certificate" and a normal SSL certificate?

Awarded Feb 16, 2022 at 18:21

Brandon Yarbrough

1,1132 gold badges8 silver badges7 bronze badges

How can I reliably erase all information on a hard drive?

Awarded Feb 15, 2022 at 14:06

nealmcb

20.9k6 gold badges72 silver badges118 bronze badges

Token-based authentication - Securing the token

Awarded Feb 10, 2022 at 1:21

James

1,7083 gold badges14 silver badges18 bronze badges

Why is writing zeros (or random data) over a hard drive multiple times better than just doing it once?

Awarded Jan 10, 2022 at 11:00

Tom Marthenal

3,3424 gold badges24 silver badges26 bronze badges

How to address bad password security policy from a large company?

Awarded Dec 2, 2021 at 8:33

Douglas Gaskell

1,2293 gold badges10 silver badges15 bronze badges

Is MD5 considered insecure?

Awarded Nov 19, 2021 at 0:35

Tawfik Khalifeh

2,6026 gold badges23 silver badges27 bronze badges

Can I safely preview a short link?

Awarded Oct 29, 2021 at 13:41

stackprotector

1,6633 gold badges10 silver badges19 bronze badges

Why is client-side hashing of a password so uncommon?

Awarded Sep 19, 2021 at 16:16

Maestro

1,1832 gold badges8 silver badges8 bronze badges

Certificate based authentication vs Username and Password authentication

Awarded Jul 4, 2021 at 12:12

Stefany

1,2872 gold badges10 silver badges9 bronze badges

How do I run proper HTTPS on an Internal Network?

Awarded May 27, 2021 at 8:40

alficles

1,7812 gold badges11 silver badges4 bronze badges

Is using 'dot' and 'at' in email addresses in public text still useful?

Awarded Apr 28, 2021 at 12:36

n611x007

2,2953 gold badges17 silver badges18 bronze badges

Is Plaid, a service which collects user’s banking login information, safe to use?

Awarded Apr 26, 2021 at 1:22

gfrung4

2,6893 gold badges9 silver badges8 bronze badges

Suspicious GitHub fork

Awarded Apr 17, 2021 at 15:43

Giorgi

9132 gold badges5 silver badges12 bronze badges

Should we store accesstoken in our database for oauth2?

Awarded Apr 4, 2021 at 11:18

Deepak Kumar Padhy

1,2382 gold badges9 silver badges7 bronze badges

Should I change the private key when renewing a certificate?

Awarded Mar 25, 2021 at 11:57

Commander Keen

1,2432 gold badges8 silver badges6 bronze badges

Someone is trying to brute-force(?) my private mail server... very... slowly... and with changing IPs

Awarded Mar 14, 2021 at 3:02

Heinzi

3,7882 gold badges25 silver badges31 bronze badges

Why is Math.random() not designed to be cryptographically secure?

Awarded Mar 7, 2021 at 6:56

forest

67k20 gold badges217 silver badges275 bronze badges

Unsubscribe safely

Awarded Feb 8, 2021 at 16:16

Nrc

1,1532 gold badges7 silver badges7 bronze badges

Buying a "Used" Router

Awarded Jan 24, 2021 at 15:51

GWR

1,2332 gold badges9 silver badges11 bronze badges

Why refresh CSRF token per form request?

Awarded Jan 8, 2021 at 16:03

Philipp Gayret

1,4332 gold badges11 silver badges14 bronze badges

How does Shutterstock keep getting my latest debit card number?

Awarded Jan 8, 2021 at 5:11

M -

1,9475 gold badges11 silver badges13 bronze badges

Why do ATMs accept any PIN?

Awarded Jan 7, 2021 at 14:02

Andrew Savinykh

1,6823 gold badges14 silver badges24 bronze badges

How can my employer be a man-in-the-middle when I connect to Gmail? [duplicate]

Awarded Jan 6, 2021 at 10:10

Lernkurve

1,1443 gold badges9 silver badges10 bronze badges

Does bcrypt have a maximum password length?

Awarded Dec 22, 2020 at 22:25

d0ctor

1,3032 gold badges9 silver badges7 bronze badges

Which elliptic curve should I use?

Awarded Dec 7, 2020 at 10:51

executifs

4,8524 gold badges25 silver badges25 bronze badges

Can "cat-ing" a file be a potential security risk?

Awarded Nov 21, 2020 at 8:26

Ivan Kovacevic

2,1895 gold badges21 silver badges21 bronze badges

What's the purpose of DH Parameters?

Awarded Oct 23, 2020 at 11:20

Ben Richard

3,7265 gold badges19 silver badges18 bronze badges

What is the difference between Federated Login and Single Sign On?

Awarded Sep 15, 2020 at 8:28

c card

1,2132 gold badges9 silver badges4 bronze badges

How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?

Awarded Aug 26, 2020 at 8:46

TheHans255

1,2782 gold badges7 silver badges13 bronze badges

Is saving passwords in Chrome as safe as using LastPass if you leave it signed in?

Awarded Jul 23, 2020 at 4:45

brentonstrine

1,2692 gold badges10 silver badges13 bronze badges

Recommended # of rounds for bcrypt

Awarded Jul 9, 2020 at 10:47

Jason Smith

1,6212 gold badges12 silver badges12 bronze badges

Is `sudo` almost useless?

Awarded Jul 7, 2020 at 9:51

Wernight

1,2172 gold badges9 silver badges8 bronze badges

Why is this 435 × 652 pixel JPEG over 6 MB?

Awarded May 26, 2020 at 13:17

David

7822 gold badges5 silver badges9 bronze badges

Should SSL be terminated at a load balancer?

Awarded May 13, 2020 at 11:55

Matt Goforth

1,3132 gold badges9 silver badges5 bronze badges

Why is root security enforced but $HOME typically unprotected?

Awarded May 13, 2020 at 8:57

phil294

1,0222 gold badges7 silver badges11 bronze badges

2 3 4 5 6 Next