Skip to main content
Information Security

Excavator

 Excavator
Edit first post that was inactive for 6 months.
Awarded 1603 times.
How can I convert an ED25519 key in PKCS#8 to OpenSSH private key format?
Awarded 4 hours ago
Is it unsafe to use environmental variables for secret data?
Awarded Jul 16 at 4:35
How should web app developers defend against JSON hijacking?
Awarded Jul 11 at 4:20
HttpResponse Headers Information Leakage on Server Error (Verbose Headers)
Awarded Jul 11 at 4:20
Which host key algorithm is best to use for SSH?
Awarded Jul 5 at 4:17
Best Practice: ”separate ssh-key per host and user“ vs. ”one ssh-key for all hosts“
Awarded Jul 1 at 4:23
Blind SQL Injection
Awarded Jun 7 at 5:55
Can I specify a public key file instead of recipient when encrypting with GPG
Awarded May 26 at 4:11
Why is 'Bearer' required before the token in 'Authorization' header in a HTTP request?
Awarded May 17 at 5:56
gpg key size of 4096 and "the future is ECC"
Awarded May 9 at 4:27
How to Force STARTTLS on Outlook and other clients
Awarded Apr 20 at 4:51
Hashing a credit card number for use as a fingerprint
Awarded Apr 18 at 4:56
Is there a way around HTTPS being redirected to HTTP?
Awarded Mar 26 at 5:06
Running openssl s_client with an aes encrypted key fails
Awarded Mar 20 at 4:57
What is the purpose of frequently rotating TLS certificates without changing underlying keys?
Awarded Mar 19 at 5:11
SVCHOST Executed without any arguements [closed]
Awarded Mar 8 at 5:47
How to check whether NTLM v2 or v1 is used for authentication?
Awarded Mar 1 at 4:08
Is LDAP encrypted after SASL authentication?
Awarded Mar 1 at 4:08
Which key usages are required by each key exchange method?
Awarded Feb 17 at 4:08
What could cause "Bad packet length" with sshd?
Awarded Feb 7 at 4:11
CryptoKey with IndexedDB to secure stateless authentication
Awarded Feb 6 at 5:22
(post deleted or otherwise unavailable)
Awarded Feb 5 at 4:41
Are Web Views in android secure?
Awarded Feb 3 at 5:09
What's the difference between end-to-end and regular TLS encryption?
Awarded Jan 25 at 4:20
SQL Injection - Find SQL platform
Awarded Jan 22 at 4:07
Are the SS64.com password generators a good approach?
Awarded Jan 22 at 4:07
Which host key algorithm is best to use for SSH?
Awarded Jan 19 at 5:11
CSRF protection with custom headers (and without validating token)
Awarded Jan 10 at 4:28
Is Wifi Penetration Testing Dead?
Awarded Jan 9 at 5:11
Should I obscure database primary keys (IDs) in application front end?
Awarded Jan 5 at 4:58
Checklist on building an Offline Root & Intermediate Certificate Authority (CA)
Awarded Dec 28, 2023 at 4:56
Are there any risks associated with SSH agent forwarding?
Awarded Dec 23, 2023 at 5:20
Is mosh now recommended by the security experts? (2014)
Awarded Dec 23, 2023 at 5:20
Is it html escape enough for mitigating all xss, if html is going to be generated only in client side?
Awarded Dec 19, 2023 at 4:40
Case sensitive logins
Awarded Dec 11, 2023 at 4:17
Does insecure delivery of keys and certs make a VPN useless?
Awarded Dec 5, 2023 at 4:42
Do you consider PWGen safe to use?
Awarded Nov 18, 2023 at 4:48
Force a specific SSL cipher
Awarded Nov 3, 2023 at 7:07
Security risks of user generated HTML?
Awarded Nov 1, 2023 at 5:18
Does Mozilla Thunderbird leak any personally identifying data in email headers?
Awarded Oct 27, 2023 at 4:41
Secure SSH host keys
Awarded Oct 21, 2023 at 4:46
Securing Email: use GPG for all emails?
Awarded Oct 15, 2023 at 7:11
Sign SSL certificate with root certificate using openssl
Awarded Oct 7, 2023 at 6:17
How does "Somewhere you are" authentication add further security?
Awarded Oct 3, 2023 at 5:46
Why is a wildcard-subdomain callback URL in OAuth considered unsafe?
Awarded Sep 30, 2023 at 4:33
File upload not checking on mime type
Awarded Sep 12, 2023 at 4:15
How secure are my passwords in the hands of Firefox using a Master Password?
Awarded Sep 12, 2023 at 4:15
How bad it would be? If hackers managed to take down all 13 Root DNS servers at the same time?
Awarded Sep 8, 2023 at 5:16
What's the wireguard "key" exactly used for?
Awarded Sep 8, 2023 at 5:16
OAuth2 Cross Site Request Forgery, and state parameter
Awarded Sep 7, 2023 at 5:10
Bridge Firewall vs Routing Firewall
Awarded Sep 4, 2023 at 4:27
How difficult is it to decrypt a disk encrypted with luksOpen?
Awarded Aug 31, 2023 at 7:05
What's the use of an "extra" dynamic declaration in an external DTD blind XXE attack?
Awarded Aug 29, 2023 at 6:10
Does python's pip provide cryptographic authentication and integrity validation?
Awarded Aug 21, 2023 at 4:31
GPG why is my trusted key not certified with a trusted signature?
Awarded Jul 28, 2023 at 5:43
Hiding HMAC-SHA256 in source code and configuration file
Awarded Jul 20, 2023 at 4:33
Is it bad practice to use your real name online?
Awarded Jul 6, 2023 at 4:06
OpenSSH default/preferred ciphers, hash, etc for SSH2
Awarded Jul 2, 2023 at 6:48
What's a "safe" URL shortening algorithm?
Awarded Jun 22, 2023 at 4:20
Is there a method of generating site-specific passwords which can be executed in my own head?
Awarded Jun 17, 2023 at 4:02
1
2 3 4 5
…
27