Skip to main content
Information Security

Good Question

 Good Question
Question score of 25 or more. This badge can be awarded multiple times.
Awarded 2687 times.
What is the worst that can happen if your OAuth client secret is leaked?
Awarded Apr 18 at 17:47
DEK, KEK and Master key - simple explanation
Awarded Apr 15 at 3:47
What is the impact of an exposed secret key for a JWT token implementation?
Awarded Mar 31 at 22:23
Why is the absence of a Content-Type header with a HTTP 204 response considered a security vulnerability and what should we do about it?
Awarded Mar 13 at 12:06
What is the difference between "full" and "ultimate" trust? [duplicate]
Awarded Mar 4 at 15:55
Sending the GPG key to keyserver
Awarded Feb 11 at 13:37
Why are SSL CAs prohibiting double dash in third and fourth characters?
Awarded Jan 30 at 14:18
Why is it even possible to forge sender header in e-mail? [duplicate]
Awarded Jan 22 at 6:28
Openid connect nonce replay attack
Awarded Jan 19 at 3:48
Is it safe to have a DNS record pointing to 127.0.0.1?
Awarded Jan 11 at 19:52
Why don't folks seem to use ECC for TLS root certificate signature?
Awarded Jan 1 at 3:57
If JWT tokens are stateless how does the auth server know a token is revoked?
Awarded Dec 31, 2024 at 11:50
Free/Libre software to handle TCG OPAL 2.0-compliant Self-Encrypting Drives (SEDs)? [closed]
Awarded Dec 22, 2024 at 0:12
How practical is a laser microphone and how to protect against it?
Awarded Dec 17, 2024 at 12:22
How to crack (get secret from) Android Keystore System
Awarded Dec 9, 2024 at 1:42
How are all public computers (libraries, etc.) not full of malware?
Awarded Dec 2, 2024 at 17:09
Why doesn't DNS spoofing work against HTTPS sites? [duplicate]
Awarded Nov 19, 2024 at 7:30
Where to find Google Authenticator backup codes?
Awarded Nov 9, 2024 at 16:34
Redirect to login page if authorization required -- security flaw?
Awarded Nov 6, 2024 at 10:31
When might it *not* be a good idea to reset your password immediately?
Awarded Oct 22, 2024 at 19:26
Brute Forcing Password to a Truecrypt-encrypted file with Partial Knowledge
Awarded Oct 14, 2024 at 5:58
Why do apps such as the DuckDuckGo browser or Signal seem to try to protect my own data from me?
Awarded Oct 9, 2024 at 4:02
Is LetsEncrypt activity Public?
Awarded Oct 8, 2024 at 17:36
What's the point of certificates in SSL/TLS?
Awarded Sep 29, 2024 at 20:44
What are the good use cases for disk encryption?
Awarded Sep 5, 2024 at 8:56
What reputable site should I download Putty from?
Awarded Sep 5, 2024 at 5:56
My school wants me to download an SSL certificate to connect to WiFi. Can I just avoid doing anything private while on the WiFi?
Awarded Aug 28, 2024 at 20:18
JWT vs. Client Certificates
Awarded Aug 8, 2024 at 20:20
Should I be worried about unusual SSH login attempts from unknown IP addresses?
Awarded Aug 5, 2024 at 17:26
GET vs POST, which is more secure? [duplicate]
Awarded Aug 5, 2024 at 5:55
Why is much harder to encrypt emails, compared to web pages?
Awarded Jul 31, 2024 at 13:10
Which strategy to encrypt data accessed by multiple users?
Awarded Jul 19, 2024 at 13:09
Wireless client isolation - how does it work, and can it be bypassed?
Awarded Jul 17, 2024 at 2:41
Should I be worried about unusual SSH login attempts from unknown IP addresses?
Awarded Jul 16, 2024 at 20:32
How does this Bitcoin scam work?
Awarded Jul 4, 2024 at 0:12
Tracking down a rogue access point
Awarded Jun 25, 2024 at 0:21
Does the recommendation to use password managers also apply to corporate environments?
Awarded Jun 20, 2024 at 14:31
To firewall or not to firewall?
Awarded Jun 19, 2024 at 4:05
Using V4 UUID for authentication
Awarded Jun 18, 2024 at 22:20
Is it safe to publish a private CA's root and intermediate certificates?
Awarded Jun 11, 2024 at 9:10
My credit union is reducing its maximum password length to 10 characters
Awarded Jun 6, 2024 at 1:42
Is there a way to download a PHP file without it being executed?
Awarded Jun 3, 2024 at 11:49
Why doesn't Microsoft implement salt on users passwords in Windows?
Awarded May 31, 2024 at 11:17
CSP allowing all Google domains?
Awarded May 30, 2024 at 19:55
A client did an unannounced penetration test on our platform
Awarded May 28, 2024 at 17:47
How long does malware last "in the wild"?
Awarded May 27, 2024 at 9:46
Are older viruses removed from virus definition files?
Awarded May 20, 2024 at 8:00
Memory dumping Android
Awarded May 8, 2024 at 14:57
Is .txt the only email attachment type that can always be opened without risk?
Awarded May 6, 2024 at 16:07
Vim Modeline Vulnerabilities
Awarded May 5, 2024 at 7:57
Is it secure to store a two factor authentication seed in a password manager?
Awarded Apr 8, 2024 at 21:42
Why are certificates limited in time?
Awarded Mar 25, 2024 at 1:06
Why is it called cross-site scripting? (XSS)
Awarded Mar 19, 2024 at 15:40
Why are refresh tokens treated differently than access tokens
Awarded Mar 12, 2024 at 22:36
Is Postgres's uuid_generate_v4 securely random?
Awarded Mar 10, 2024 at 6:56
How to subscribe to information about new vulnerabilities in selected products? [closed]
Awarded Mar 4, 2024 at 21:52
Difference between OpenSSL and keytool
Awarded Feb 19, 2024 at 7:05
Can I add an email address to an existing GPG key?
Awarded Feb 9, 2024 at 17:52
What is the point of entering numbers in the two-factor authentication app?
Awarded Feb 5, 2024 at 11:25
How is 4G LTE encrypted?
Awarded Jan 31, 2024 at 2:20
1
2 3 4 5
…
45