Skip to main content
Information Security

Student

 Student
First question with score of 1 or more.
Awarded 32491 times.
Quick scan of a /8 subnet with nmap
Awarded yesterday
Is It Safe to Use a Long-Lived JWT Without a Refresh Token?
Awarded yesterday
Anyway to install a separate firmware in a motherboard [migrated]
Awarded 2 days ago
Does it matter (and go widely unnoticed) that GitLab CI+docker-executor produces world-writable files, or do "we" need to raise awareness for that? [closed]
Awarded 2 days ago
Can biometrics be intercepted locally?
Awarded 2 days ago
Is it possible to firewall a named pipe connection?
Awarded 2 days ago
libreoffice2john produces hash for old ODF file, but JtR does not recognize
Awarded May 6 at 17:51
iVentoy installing unsafe Windows Kernel drivers: Why is this happening? [closed]
Awarded May 6 at 17:51
Is there an official, or accepted, recommendation to turn off autocomplete for bank account details
Awarded May 6 at 17:27
Can setting a value in localStorage bypass PayPal's 2FA during support chat? [closed]
Awarded May 6 at 16:00
Is it best practice to expose tenant login configurations via a public GET endpoint for Auth0?
Awarded May 3 at 12:31
White hat "ethical" hacking legality
Awarded May 3 at 12:03
What options are there for live output of nmap scan results? [duplicate]
Awarded May 2 at 8:17
Combining nonce and CSRF for HTTP form submission
Awarded May 2 at 8:17
Overlong Encoding Paired with bits sequence of \ is %c05c seems incorrect
Awarded May 2 at 8:17
Are secrets from automatically unlocked keychain in Ubuntu 24.04 Seahorse accessible for any application?
Awarded Apr 30 at 10:36
What is the drawback of always generating passphrases for the user?
Awarded Apr 29 at 9:35
Impossible optimization in IKE Intermediate RFC? [migrated]
Awarded Apr 28 at 8:30
Extract CRT and KEY from signed PEM file without the openssl tool
Awarded Apr 27 at 5:41
How to migrate an OLD Yubikey with an OLD PGP key to a NEW Yubikey with a NEW PGP Key? Cross-signing, certifying, etc
Awarded Apr 26 at 5:48
Are truncated SHA-256 hashes safe enough when collisions are not a risk?
Awarded Apr 25 at 8:27
CTF finding flag in an image [closed]
Awarded Apr 24 at 19:48
What are the preferred ways to exchange public keys physically?
Awarded Apr 24 at 17:49
Hiding information in the SAN field of a certificate
Awarded Apr 24 at 16:01
For the same private key, I have two slightly different public keys. Is it normal?
Awarded Apr 24 at 4:20
Is using software without buying all available patches against security standards?
Awarded Apr 23 at 16:42
Is it safe to publish encrypted secrets in a git repository?
Awarded Apr 23 at 13:26
Is passing an IDToken OK for seamless handover from app to website?
Awarded Apr 22 at 4:41
(post deleted or otherwise unavailable)
Awarded Apr 21 at 7:49
How to check if a file contains exploit for a specific zero day vulnerability?
Awarded Apr 21 at 7:49
How to Configure BeEF Autorun Engine to Trigger Rules on Every Zombie Hook
Awarded Apr 21 at 7:49
Is it secure to use TOR with AVAST antivirus?
Awarded Apr 20 at 4:50
Setup Tor Hidden Service Anonymously
Awarded Apr 19 at 12:00
How to securely build code from the internet on my servers?
Awarded Apr 19 at 11:53
Why would a file need both a rmd160 and a sha256 hash of a file?
Awarded Apr 19 at 11:53
Why can't a Cognito user in the FORCE_CHANGE_PASSWORD state go through the forgot password flow?
Awarded Apr 17 at 18:17
What if MITRE's CVE goes dark? [closed]
Awarded Apr 16 at 7:08
Is it acceptable to ignore potential XSS payloads if they are not executed on our side?
Awarded Apr 16 at 3:01
Exposing size of last chunk in RSA file encryption
Awarded Apr 15 at 13:00
Should I restart or power off/on a phone to clear malware in volatile memory? [closed]
Awarded Apr 13 at 22:57
What are the acceptable ranges of MSE, MAE, and PSNR values in the context of image encryption? [migrated]
Awarded Apr 13 at 10:36
Gpg key management - lost / forgotten keys
Awarded Apr 13 at 7:36
Is it okay to use an expired access token to look up its corresponding refresh token?
Awarded Apr 11 at 6:37
Why do I need to check the issuer/subject of a certificate rather than just the thumbprint?
Awarded Apr 10 at 23:35
What are the risks of allowing outgoing traffic on all ports on a webserver? [duplicate]
Awarded Apr 9 at 9:27
Are there any security concerns with this authentication flow?
Awarded Apr 8 at 10:17
Why ProtonDrive uses so many layers of encryption that looks redundant
Awarded Apr 8 at 10:17
How can code signing posibly be secure on Windows when signed executables act on unsigned input?
Awarded Apr 5 at 22:11
What is the proper way of starting an HTTP-only reverse shell using Chisel?
Awarded Apr 5 at 18:37
Can someone spoof its IP address to mine when sending emails?
Awarded Apr 2 at 11:53
Hashing security question answers for bank account portal activation
Awarded Apr 1 at 9:12
What is the problem with Deserialization?
Awarded Mar 31 at 17:37
Why shred before LUKS disk encryption?
Awarded Mar 31 at 2:57
Using browser extension to allow webapp to extract user cookies for third party website [closed]
Awarded Mar 30 at 1:27
Separate DNS servers for non-domian hosts and users
Awarded Mar 28 at 21:08
(post deleted or otherwise unavailable)
Awarded Mar 28 at 12:33
Is there any reason to choose A256GCMKW over A256KW in JSON Web Encryption?
Awarded Mar 27 at 22:25
Is TLS1.2/3 + PSK recommended for future products?
Awarded Mar 27 at 20:28
Encryption to use when limited data for a chosen plaintext attack is available
Awarded Mar 27 at 20:28
How can I understand the zip2john hash format?
Awarded Mar 26 at 7:27
1
2 3 4 5
…
542