Skip to main content
Information Security

Top Questions

Ask Question
ActiveHotWeekMonth
0votes
1answer
539views

OAuth alternative for two-party scenario?

Community's user avatar
CommunityBot
  • 1
1vote
1answer
287views

Using AWS System Manager Parameter Store SecureString in config file in ec2

Community's user avatar
CommunityBot
  • 1
0votes
0answers
17views

For AES-GCM, why do protocols not use the nonce to prevent replay attacks? [migrated]

Coffe's user avatar
Coffe
  • 1
1vote
1answer
5kviews

Can I create an SSL certificate on windows signed with the machine's certificate?

Jenni Skott's user avatar
Jenni Skott
  • 1
2votes
0answers
53views

Impossible optimization in IKE Intermediate RFC?

hakoja's user avatar
hakoja
  • 129
3votes
1answer
606views

How to detect malicious actor altering DNS responses?

Community's user avatar
CommunityBot
  • 1
2votes
1answer
2kviews

Apple Mail versus GMail app content security

Community's user avatar
CommunityBot
  • 1
-3votes
0answers
86views

How to know whether a plate number is being faked or not? [closed]

Martheen's user avatar
Martheen
  • 1,146
2votes
1answer
122views

Extract CRT and KEY from signed PEM file without the openssl tool

Steffen Ullrich's user avatar
Steffen Ullrich
  • 211k
10votes
2answers
3kviews

What are the preferred ways to exchange public keys physically?

Glorfindel's user avatar
Glorfindel
  • 2,295
1vote
1answer
580views

AES ECB cookie bypass

RainnyD's user avatar
RainnyD
  • 1
0votes
0answers
21views

How can I stop C code from debugging while it's being compiled using GCC? [closed]

schroeder's user avatar
schroeder♦
  • 133k
4votes
2answers
647views

Are truncated SHA-256 hashes safe enough when collisions are not a risk?

Steffen Ullrich's user avatar
Steffen Ullrich
  • 211k
0votes
0answers
28views

Can my work see my BitTorrent downloads on a personal device when logged into the company WiFi? [closed]

Plump Wagon's user avatar
Plump Wagon
  • 1
6votes
2answers
128views

Can a nonconformity be raised against a control - for ISMS audit based on ISO 27001?

Whookiee's user avatar
Whookiee
  • 21
0votes
0answers
24views

Creating a pentester tool in c/c++ that's used for controlled sections like bug bounty programs? [closed]

schroeder's user avatar
schroeder♦
  • 133k
3votes
1answer
366views

Is it safe for website to generate fake profile pages?

Community's user avatar
CommunityBot
  • 1
3votes
1answer
29views

How to migrate an OLD Yubikey with an OLD PGP key to a NEW Yubikey with a NEW PGP Key? Cross-signing, certifying, etc

Ja1024's user avatar
Ja1024
  • 33.7k
2votes
2answers
1kviews

tunnelling HTTP request through DMZ from a secured area

Community's user avatar
CommunityBot
  • 1
9votes
3answers
2kviews

Overlap for One-Time Passwords

Maarten Bodewes's user avatar
Maarten Bodewes
  • 4,983
2votes
1answer
642views

HTTP Headers: Document Policy vs. Permissions-Policy/Feature-Policy

Community's user avatar
CommunityBot
  • 1
2votes
1answer
3kviews

how to generate RSAES-OAEP keys?

Community's user avatar
CommunityBot
  • 1
0votes
0answers
18views

Issues consuming HTTP FastAPI from HTTPS-embedded widget (frontend fetch)

Angel Panda's user avatar
Angel Panda
  • 1
0votes
0answers
23views

Checkmarx seeing vulnerabilities in DLL files but the package has already been updated

willie revillame's user avatar
willie revillame
  • 1
1vote
1answer
277views

How does DNSCurve protect against forgery in a man-in-the-middle attack scenario?

Community's user avatar
CommunityBot
  • 1
0votes
0answers
51views

Sanity check on how bad my router's VPN is [closed]

schroeder's user avatar
schroeder♦
  • 133k
2votes
1answer
176views

For the same private key, I have two slightly different public keys. Is it normal?

Maarten Bodewes's user avatar
Maarten Bodewes
  • 4,983
2votes
2answers
164views

What's the point of users having to authorize their SSH keys and tokens they created themselves when SAML single sign-on is enabled on GitHub?

Sophie Alpert's user avatar
Sophie Alpert
  • 101
1vote
2answers
737views

What are some symptoms of malware exfiltrating data in packet captures?

Community's user avatar
CommunityBot
  • 1
2votes
1answer
371views

Which OAuth2 flow should I use?

Community's user avatar
CommunityBot
  • 1
3votes
2answers
860views

Hiding information in the SAN field of a certificate

Steffen Ullrich's user avatar
Steffen Ullrich
  • 211k
0votes
2answers
1kviews

Crunch wordlist with different number of words

Community's user avatar
CommunityBot
  • 1
2votes
1answer
836views

OpenID Connect Web Message Response Mode and XSS

Community's user avatar
CommunityBot
  • 1
1vote
1answer
24views

Is using req.path as a file path in an Express route vulnerable?

cis's user avatar
cis
  • 377
3votes
3answers
3kviews

Gaming Mods Security Risks

schroeder's user avatar
schroeder♦
  • 133k
0votes
1answer
295views

Does Windows Defender remove registry keys and scheduled tasks for items on its exclusion list?

schroeder's user avatar
schroeder♦
  • 133k
0votes
0answers
27views

Server invisible cookies using service workers [migrated]

Dana v's user avatar
Dana v
  • 51
23votes
3answers
7kviews

Why is the synchronizer token pattern preferred over the origin header check to prevent CSRF

n0099's user avatar
n0099
  • 103
1vote
0answers
71views

CTF finding flag in an image [closed]

schroeder's user avatar
schroeder♦
  • 133k
3votes
2answers
365views

Encrypted log entries authorization

Community's user avatar
CommunityBot
  • 1
3votes
2answers
694views

Are client certificates a secure way of having publicly facing SQL database?

Vitor Figueredo Marques's user avatar
Vitor Figueredo Marques
  • 223
1vote
1answer
684views

Getting reverse shell from firewalled target

Community's user avatar
CommunityBot
  • 1
0votes
0answers
7views

Gathering entropy at different times using a cycle counter [migrated]

a3f's user avatar
a3f
  • 101
0votes
1answer
59views

Is using software without buying all available patches against security standards?

Gh0stFish's user avatar
Gh0stFish
  • 18.2k
1vote
1answer
92views

Is it safe to publish encrypted secrets in a git repository?

Ja1024's user avatar
Ja1024
  • 33.7k
0votes
2answers
714views

Getting a couple of remote login and calls into Ubuntu server?

Community's user avatar
CommunityBot
  • 1
0votes
1answer
51views

Is this an effective scheme to store EEE key on browser client?

Ja1024's user avatar
Ja1024
  • 33.7k
5votes
2answers
1kviews

Accessing a database publicly via HTTPS API vs. native but with client certificates

Ja1024's user avatar
Ja1024
  • 33.7k

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.

close