Skip to main content
Information Security

Nice Question

 Nice Question
Question score of 10 or more. This badge can be awarded multiple times.
Awarded 7334 times.
What is the behaviour of CSP if default-src not specified?
Awarded Nov 17 at 19:05
How would you know a certificate/private key if you extracted it from RAM? Or would you?
Awarded Nov 12 at 11:12
Can an SSH server fingerprint be spoofed?
Awarded Oct 26 at 12:06
Does the endianness used with an encryption algorithm affect its security?
Awarded Oct 24 at 12:32
Is the standard scheme of RSA CCA and CPA secure?
Awarded Oct 10 at 15:56
What is the effect of the arguments in the following: conhost.exe 0xffffffff -ForceV1
Awarded Sep 30 at 12:48
Modify Certificate Subject using OpenSSL x509 Command
Awarded Sep 26 at 14:27
Is a local account on windows more secure than a microsoft account
Awarded Sep 23 at 15:27
Open-Source Hardware Security Modules (HSM)
Awarded Sep 18 at 20:46
Is it possible to set an HttpOnly Cookie from one domain to another subdomain
Awarded Sep 18 at 12:01
Why do browsers disallow accessing files from local file system even if the HTML document is also on the local file system?
Awarded Sep 9 at 8:18
Purpose of TPM "ownership" and "owner password"
Awarded Aug 27 at 9:34
For a router, is storing the Wi-Fi password in plain text in its own storage/firmware considered a vulnerability, or is it standard practice?
Awarded Aug 19 at 14:56
Prevent apps from having full access to user files
Awarded Aug 16 at 14:19
Why are many US Department of Defense certificates not trusted by Firefox?
Awarded Aug 14 at 5:51
Security Headers: Access-Control-Allow-Origin vs. Cross-Origin-Resource-Policy (CORP)
Awarded Aug 10 at 14:32
How to physically destroy an SSD at home?
Awarded Aug 9 at 14:28
How many possible MD5 hashes are there, 16³²? Or do MD5 checksums have error correction (in which case <16³² possible hashes)?
Awarded Jul 31 at 7:10
Why not use the "age" tool for encrypted backups?
Awarded Jul 29 at 11:07
Which actions does the GnuPG "Certify" capability permit?
Awarded Jul 28 at 23:19
What is the proliferation of IMSI Catchers?
Awarded Jul 22 at 18:07
Response to unauthorized scan by legit company? [closed]
Awarded Jul 22 at 1:21
How to share passwords *only* after death?
Awarded Jul 21 at 6:02
Is there any security risk in using untrusted data-only eSIM?
Awarded Jul 17 at 14:51
Why use one-time codes for two-factor authentication backups?
Awarded Jul 15 at 17:12
Is the ISO27001 audit a paper exercise or do they ask to see specific controls?
Awarded Jul 7 at 23:00
How *specifically* does public wifi present a malware infection threat
Awarded Jul 7 at 2:06
Linux root account without password - what are the issues, and how to address them?
Awarded Jul 3 at 6:17
TLS: how and when is the client's certificate used?
Awarded Jun 25 at 19:09
Risks of using an email address that had belonged to someone else
Awarded Jun 12 at 19:48
How to receive large files guaranteeing authenticity, integrity and sending time
Awarded Jun 11 at 8:48
Are EV certificates still useful?
Awarded Jun 2 at 13:09
Where to find the security hardened docker images
Awarded May 20 at 8:06
Does Gmail's 'preview' feature for documents in the browser prevent malware?
Awarded May 1 at 21:11
What are the preferred ways to exchange public keys physically?
Awarded Apr 27 at 19:17
Cryptographic strength of VeraCrypt
Awarded Apr 11 at 18:13
What's the point of hashing a password and then sending it to the server?
Awarded Apr 8 at 3:51
Why shred before LUKS disk encryption?
Awarded Apr 2 at 14:53
How to securely store credentials in a bash variables?
Awarded Mar 28 at 11:57
Why aren't passwords also hashed on client side on desktop applications?
Awarded Mar 27 at 9:12
How to change personal cipher/digest preferences of existing OpenPGP key in GnuPG?
Awarded Mar 24 at 18:27
Why "Only send non-temporary passwords over an encrypted connection or as encrypted data"?
Awarded Mar 24 at 17:12
How did Israel intercept WhatsApp calls during Oct 7 2023?
Awarded Mar 21 at 19:32
How are key exchange and signature algorithms negotiated in TLS 1.3
Awarded Mar 21 at 7:46
Does public key auth in SSH prevent most MITM attacks?
Awarded Mar 20 at 20:07
Do pentesters need to be able to fix their findings for their customers?
Awarded Mar 18 at 9:33
Is hashing user input data redundant on HTTPS?
Awarded Mar 18 at 9:15
Why is iOS sending HTTPS requests even with background refresh disabled?
Awarded Mar 15 at 21:52
Web application contains a link to a non-existing domain, is this a vulnerability?
Awarded Mar 13 at 19:35
Does HTTPS protect against DNS rebinding?
Awarded Mar 9 at 9:04
Is There Any Risk When Visiting Websites Without Secure Connections If You Don't Enter Personal Info?
Awarded Mar 4 at 14:55
Why are browser HTTP auth schemes stuck in 1999?
Awarded Feb 28 at 12:51
Token-based authentication - what's a good token length?
Awarded Feb 26 at 20:12
Security implications to removing delay on empty passwords?
Awarded Feb 26 at 19:43
Why doesn't the HTTP/2 spec require TLS?
Awarded Feb 25 at 20:53
How are users traced via their IP when ISPs use NAT?
Awarded Feb 24 at 9:33
Ordering of the PATH environment variable
Awarded Feb 23 at 5:27
Security of Bluetooth earphones when anyone can connect to them
Awarded Feb 21 at 8:45
How can I ensure that my Git projects have not been tampered with?
Awarded Feb 19 at 18:27
Why are PDF passwords so easy to break?
Awarded Feb 19 at 16:40
1
2 3 4 5
…
123