Hottest Questions Today - Information Security Stack Exchange

0 votes

0 answers

23 views

Someone else's external antenna mounted to close to mine? [closed]

schroeder♦

133k

modified 2 hours ago

0 votes

0 answers

27 views

Issues importing GPG private key and decrypting message [migrated]

Ja1024

34.2k

modified 10 hours ago

0 votes

1 answer

31 views

Can someone use Google Login to take information from you (without informing you)?

Ja1024

34.2k

answered 13 hours ago

8 votes

1 answer

2k views

Is Free Nginx Suspect/Sketchy?

ThoriumBR

56.5k

answered yesterday

6 votes

3 answers

2k views

Using public-key crypto for all HTTP requests of a session – bad idea?

Ja1024

34.2k

modified yesterday

0 votes

0 answers

13 views

I am getting the very alert in ELK SIEM from different IP ,which I think is False Positive. "ET policy DNS update from external net" [closed]

Hesam No

1

modified 23 hours ago

0 votes

1 answer

63 views

For e-mails without TLS connection, where is the connection not encrypted?

Steffen Ullrich

212k

modified yesterday

1 vote

1 answer

68 views

Is It Safe to Use a Long-Lived JWT Without a Refresh Token?

Ja1024

34.2k

modified yesterday

7 votes

5 answers

1k views

When Code Signing, what is the point of enhanced security specifically for the private key itself?

JimmyJames supports Canada

3,417

answered May 5 at 17:46

1 vote

0 answers

561 views

iVentoy installing unsafe Windows Kernel drivers: Why is this happening? [closed]

Pat

129

modified May 6 at 20:52

0 votes

0 answers

88 views

How do i deauth a client on 5Ghz?

Jory S

1

modified yesterday

1 vote

0 answers

15 views

Anyway to install a separate firmware in a motherboard [migrated]

Ja1024

34.2k

modified 2 days ago

-1 votes

0 answers

28 views

Geeks for Geeks Video Completion Tracking Issue with Speed Control [closed]

schroeder♦

133k

modified 2 days ago

1 vote

0 answers

42 views

Is it possible to firewall a named pipe connection?

pimenz

11

asked May 7 at 10:32

1 vote

1 answer

65 views

Can biometrics be intercepted locally?

localhostport80

151

answered 2 days ago

1 vote

1 answer

31 views

libreoffice2john produces hash for old ODF file, but JtR does not recognize

Ja1024

34.2k

answered May 7 at 6:49

2 votes

0 answers

46 views

Is there an official, or accepted, recommendation to turn off autocomplete for bank account details

schroeder♦

133k

modified May 6 at 11:30

1 vote

0 answers

33 views

Can setting a value in localStorage bypass PayPal's 2FA during support chat? [closed]

Darklyn

11

asked May 6 at 12:00

1 vote

1 answer

69 views

ModSecurity: How to whitelist all cookies EXCEPT a few specific ones?

peppy

121

modified May 5 at 22:49

1 vote

0 answers

36 views

Poisoned Google search result on legitimate website [closed]

Zephyr

181

asked May 6 at 6:08

11 votes

2 answers

3k views

What are the preferred ways to exchange public keys physically?

Glorfindel

2,295

modified Apr 26 at 19:04

6 votes

3 answers

1k views

What DOESN'T change when signing Certificate is renewed?

Steffen Ullrich

212k

answered May 1 at 14:13

3 votes

5 answers

2k views

What is the drawback of always generating passphrases for the user?

schroeder♦

133k

modified May 2 at 8:54

0 votes

0 answers

19 views

Network isolation in a private security Endpoint Agent [closed]

Q Tech IT

1

asked May 6 at 6:45

0 votes

1 answer

26 views

How do I ensure that a file remains as I expect it to on my webserver?

Ja1024

34.2k

modified May 5 at 21:24

0 votes

0 answers

48 views

HMAC Verification Failures in AES-256-CBC Encryption with Bash [closed]

Sofiane

1

modified May 5 at 10:36

2 votes

2 answers

157 views

Extract CRT and KEY from signed PEM file without the openssl tool

mortirolo

41

answered yesterday

9 votes

3 answers

3k views

Overlap for One-Time Passwords

Maarten Bodewes

4,993

modified Apr 25 at 20:25

0 votes

0 answers

12 views

Reverse shell not working with python server [closed]

mark

1

asked May 5 at 21:51

4 votes

1 answer

198 views

Overlong Encoding Paired with bits sequence of \ is %c05c seems incorrect

Steffen Ullrich

212k

answered May 2 at 11:34

2 votes

1 answer

49 views

Is it best practice to expose tenant login configurations via a public GET endpoint for Auth0?

Ja1024

34.2k

answered May 2 at 20:42

9 votes

3 answers

3k views

Is it acceptable to ignore potential XSS payloads if they are not executed on our side?

Toph

161

answered Apr 16 at 11:33

4 votes

2 answers

702 views

Are truncated SHA-256 hashes safe enough when collisions are not a risk?

Steffen Ullrich

212k

modified Apr 26 at 14:50

5 votes

2 answers

1k views

Accessing a database publicly via HTTPS API vs. native but with client certificates

Ja1024

34.2k

answered Apr 22 at 20:43

2 votes

1 answer

108 views

How worried should I be about firmware level persistance after a security breach?

Greg Askew

352

answered May 1 at 12:48

-2 votes

0 answers

53 views

Phone and computer hacked into [closed]

Tasneem Ahmed

1

asked May 2 at 1:54

3 votes

2 answers

883 views

Hiding information in the SAN field of a certificate

Steffen Ullrich

212k

answered Apr 24 at 15:01

1 vote

1 answer

34 views

Combining nonce and CSRF for HTTP form submission

Ja1024

34.2k

modified May 1 at 9:20

13 votes

4 answers

3k views

Cryptographic strength of VeraCrypt

Josiah

1,897

answered Apr 12 at 20:51

3 votes

2 answers

711 views

Are client certificates a secure way of having publicly facing SQL database?

Vitor Figueredo Marques

223

modified Apr 23 at 22:29

1 vote

0 answers

17 views

What options are there for live output of nmap scan results? [duplicate]

schroeder♦

133k

modified May 1 at 18:32

4 votes

2 answers

1k views

How to check if a file contains exploit for a specific zero day vulnerability?

Maarten Bodewes

4,993

modified Apr 22 at 19:52

3 votes

0 answers

76 views

Impossible optimization in IKE Intermediate RFC? [migrated]

hakoja

139

asked Apr 27 at 14:07

2 votes

1 answer

198 views

For the same private key, I have two slightly different public keys. Is it normal?

Maarten Bodewes

4,993

modified Apr 25 at 9:42

1 vote

0 answers

38 views

Are secrets from automatically unlocked keychain in Ubuntu 24.04 Seahorse accessible for any application?

hoelzeli

11

asked Apr 28 at 15:00

1 vote

0 answers

35 views

LinkedIn website automatically gets my email address in Edge without consent, can all websites I browse silently get my email? [closed]

Basj

972

asked Apr 28 at 14:11

3 votes

1 answer

1k views

Can a public certificate provider impersonate an AD?

Crypt32

6,904

modified Apr 16 at 6:56

3 votes

1 answer

255 views

What is the hashed password in the master.passwd file?

Steffen Ullrich

212k

modified Apr 20 at 18:25

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.