Skip to main content
Information Security

Enlightened

 Enlightened
First to answer and accepted with score of 10 or more. This badge can be awarded multiple times.
Awarded 3232 times.
Is it a security issue to expose PII on any publically accessible URL?
Awarded 3 hours ago
Why does OpenID Connect ("OIDC") use a `nonce` claim instead of the `jti` registered claim
Awarded yesterday
How did I obtain a wildcard SSL certificate without port 80 opened for a challenge?
Awarded yesterday
Is a "single" cpu safer than multiple cores?
Awarded 2 days ago
Should mail addresses for logins be stored hashed to minimize impact of data loss?
Awarded Jul 4 at 10:55
What is the term for when a hyperlink maliciously opens different URL from URL displayed when hovered over?
Awarded Jul 4 at 0:12
How should I report a Man-in-the-Middle attack in my workplace?
Awarded Jun 28 at 13:34
Help understanding basic user authentication with salts and hashing
Awarded Jun 27 at 11:48
Relevance of RFC2228
Awarded Jun 24 at 9:56
What are legal/ethical concerns to bear in mind, when hacking websites with open invitations?
Awarded Jun 23 at 7:16
Could a Google Chrome extension read my password?
Awarded Jun 21 at 9:26
Can OpenPGP private keys ever be secure enough to store publicly?
Awarded Jun 20 at 9:57
AD User vs SQL User for SQL Server Authentication
Awarded Jun 20 at 2:17
How safe is TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA?
Awarded Jun 13 at 19:04
How to deal with monitoring software on a personal PC used for work?
Awarded Jun 2 at 18:42
A client did an unannounced penetration test on our platform
Awarded May 27 at 8:57
How to exploit publicy known vunerable version of jquery?
Awarded May 26 at 18:41
Security risks of using ffmpeg as part of web service
Awarded May 23 at 0:07
Does Oracle's GuardedString protect sensitive data against heap or memory dumps?
Awarded May 15 at 22:57
Hash as filename to protect data
Awarded May 13 at 19:26
What is the difference between a certificate, a signature and a thumbprint in case of windows exe/binaries?
Awarded May 12 at 22:37
SANS training - worth it?
Awarded May 10 at 6:10
What's the difference between pixie attack and other attacks on WPS?
Awarded May 4 at 20:21
What are the minimum parameters for Argon2?
Awarded May 2 at 13:27
Should I be worried about unusual SSH login attempts from unknown IP addresses?
Awarded Apr 29 at 18:07
Is it impossible to protect an API from data redistribution?
Awarded Apr 23 at 16:51
SSL Labs report question: Is "Insecure Renegotiation" possible if weak cipher suites are not available on server?
Awarded Apr 22 at 21:16
What are the reasons for CORS failure errors to not be available to JS?
Awarded Apr 12 at 8:48
Why do so many spam emails lately contain a lot of unicode characters?
Awarded Apr 10 at 11:06
Finding DKIM selectors without mailing
Awarded Apr 7 at 18:27
Bypass x-frame-options for clickjacking
Awarded Mar 15 at 10:17
What's the difference between trusting a key and signing it?
Awarded Mar 4 at 14:17
Is the double submit cookie pattern still effective?
Awarded Mar 1 at 7:45
What is the current (April 2023) browser support for Ed25519 certificate signatures?
Awarded Feb 17 at 21:31
What are the differences between "simple" UAC and two user accounts on Windows?
Awarded Feb 14 at 15:51
How to securely provide SSL certs to a Docker app
Awarded Feb 12 at 18:56
Filter arbitrary code for blacklisted keywords except on commented lines
Awarded Feb 12 at 3:43
Keyboard firmware hack - Linux vulnerable?
Awarded Feb 9 at 12:31
Why sign session cookies?
Awarded Feb 8 at 17:42
Doesn't Samesite cookie and Sameorigin policy effectively does the same job?
Awarded Feb 8 at 11:34
Generating a GPG key with a expiration date
Awarded Feb 5 at 14:34
What is the point of entering numbers in the two-factor authentication app?
Awarded Feb 2 at 20:38
Should one reject login attempts when the correct password is newly added to a password deny list?
Awarded Jan 29 at 18:15
SAML assertion encryption and using same key for encryption as signing
Awarded Jan 27 at 6:15
How secure is the windows Cipher command?
Awarded Jan 23 at 17:41
Does a VPN provide any security benefits over sshuttle or a vanilla ssh tunnel?
Awarded Jan 23 at 12:48
Are bad passwords used to breach security in real life?
Awarded Jan 4 at 7:32
Does git commit hash prove the history until that point?
Awarded Dec 8, 2023 at 16:21
Did a Huawei modem just try to do a Man-In-The-Middle attack on me?
Awarded Dec 6, 2023 at 22:56
Where are FIDO U2F Keys Stored?
Awarded Dec 6, 2023 at 4:15
Unknown automatically generated email in sent folder
Awarded Dec 5, 2023 at 15:49
is sameSite attribute redundant on httpOnly cookie?
Awarded Dec 3, 2023 at 21:49
Can we safely distribute password protected .p12 file?
Awarded Nov 29, 2023 at 15:10
A simplistic stateless alternative to HTTP basic auth for API's
Awarded Nov 28, 2023 at 10:43
How to best obfuscate a built-in key in an application?
Awarded Nov 28, 2023 at 7:49
Why is the absence of a Content-Type header with a HTTP 204 response considered a security vulnerability and what should we do about it?
Awarded Nov 25, 2023 at 6:16
Explanation of the XTS Encryption Mode
Awarded Nov 24, 2023 at 20:51
Time-limited encryption
Awarded Nov 22, 2023 at 23:11
Escalating user privileges on Linux
Awarded Nov 21, 2023 at 7:42
How do rolling code fobs and receivers synchronise?
Awarded Nov 16, 2023 at 13:31
1
2 3 4 5
…
54