Information Security Stack Exchange

0

votes

0

answers

3

views

School Request: What can be done protect people's financial information?

credit-card sensitive-data-exposure

asked 29 mins ago Chris Camaratta 101

0

votes

0

answers

6

views

Internet privacy, VPNs, etc. Am I anonymous?

privacy ip openvpn

modified 1 hour ago mti2935 11.6k

0

votes

0

answers

10

views

Is that SQL query exploitable for really malicious things

sql-injection mysql

asked 1 hour ago User9123 1

13

votes

5

answers

17k

views

bot detection via browser fingerprinting

javascript detection fingerprinting

answered 2 hours ago AccountantM 296

4

votes

3

answers

213

views

Hierarchical Key Rotation. Should I rotate the lowest level keys?

key-management key

answered 2 hours ago Ángel 16.4k

0

votes

1

answer

82

views

DVWA - Converting Local File Inclusion to Remote Code Exploitation

php remote-code-execution local-file-inclusion

modified 2 hours ago Community♦ 1

0

votes

2

answers

33

views

Working code examples for stack or heap buffer overflows?

buffer-overflow

answered 3 hours ago multithr3at3d 10.9k

1

vote

1

answer

14

views

Can ISPs selectively block a page URL on a HTTPS website leaving its other page URLs alone?

tls url

answered 3 hours ago ThoriumBR 39.6k

1

vote

1

answer

26

views

Should users be allowed to to login with the same email when an email change is requested but not completed?

email account-security access-control

answered 4 hours ago Conor Mancone 27k

2

votes

2

answers

4k

views

Rights vs permissions vs privileges

access-control terminology rbac

modified 5 hours ago user249250 1

20

votes

3

answers

1k

views

Should Stack Exchange be more obscure in its systems' structure?

disclosure obscurity

modified 5 hours ago Glorfindel 1,728

0

votes

0

answers

20

views

Curve25519 vs. Curve25519 and AES Key vs. Curve25519 AES Ciphertext (Instagram)

encryption cryptography aes ecc instagram

modified 5 hours ago kelalaka 4,040

1

vote

1

answer

31

views

Sync AWS snapshots to secondary account - supplier ask for “swap” - security theathre?

backup

answered 6 hours ago Andrew Russell 3,480

2

votes

3

answers

163

views

Which Diffie-Hellman Groups does TLS 1.3 support? And should we use TLS 1.3 as a guide?

tls cryptography vpn audit diffie-hellman

modified 6 hours ago kelalaka 4,040

2

votes

1

answer

40

views

Installed TPM, how to use BitLocker without USB key?

disk-encryption tpm bitlocker

answered 6 hours ago Reiner Rottmann 201

1

vote

1

answer

60

views

How is PKCE secure?

oauth2

answered 7 hours ago lumiemp 21

3

votes

2

answers

1k

views

PKCE vs Client Secret

oauth oauth2 openid-connect

answered 8 hours ago lumiemp 21

0

votes

0

answers

37

views

I want to decrypt the message “Boe an emait” but i don't know either the algorithm or key, any help? [closed]

decryption

asked 9 hours ago anonymoususer 1

1

vote

1

answer

38

views

Are reproducible builds practically possible on major app stores?

appsec trust compiler

answered 11 hours ago bk2204 649

0

votes

2

answers

183

views

Is an OTP alone useful for a hacker?

malware one-time-password

modified 11 hours ago Community♦ 1

0

votes

0

answers

15

views

Does TLS provide data integrity? [duplicate]

tls integrity hmac

asked 11 hours ago user1876202 53

1

vote

2

answers

337

views

OIDC SPA Keycloak refresh_token storage location

authentication session-management openid-connect single-page-app

modified 12 hours ago Community♦ 1

4

votes

0

answers

127

views

How is my ISP circumventing SSL on thepiratebay even though the certificate is valid?

tls isp censorship

modified 14 hours ago Amal 41

0

votes

0

answers

21

views

Whats wrong with this XSS vector? [duplicate]

xss javascript html dom

asked 14 hours ago Arun Joshla 101

0

votes

0

answers

52

views

Isn't this kind of password ultimately secure and insanely easy to remember? [duplicate]

passwords brute-force password-cracking

modified 14 hours ago schroeder♦ 111k

0

votes

0

answers

27

views

Is it possible to circumvent the 2FA protection on Gmail using a stolen photo id?

gmail

modified 15 hours ago schroeder♦ 111k

0

votes

2

answers

50

views

How to run a meterpreter script multiple times

metasploit meterpreter

answered 15 hours ago Esa Jokinen 13.8k

1

vote

1

answer

34

views

LFI php://input returning initial argument?

web-application file-upload remote-code-execution lfi

answered 15 hours ago kikos897 1

0

votes

1

answer

44

views

Should I redirect http request to https from my system's application or from DNS or other?

tls http dns

answered 16 hours ago Conor Mancone 27k

0

votes

0

answers

34

views

Looking for recommendations for my Personal [closed]

mobile account-security network-access-control remote-code-execution macbookpro

asked 16 hours ago Nic 1

0

votes

1

answer

50

views

how end certificate refers to intermediate certificate

certificates trust

modified 16 hours ago Community♦ 1

0

votes

1

answer

56

views

How to install and use scanlogd

ids ports network-scanners

modified 19 hours ago schroeder♦ 111k

8

votes

4

answers

17k

views

Does GHIDRA have a debugger?

malware reverse-engineering debugging

answered 20 hours ago Soleil 101

0

votes

2

answers

112

views

Will carrier servers allow the ISP to see anything I'm doing even on a VPN?

privacy vpn isp

modified 20 hours ago Community♦ 1

0

votes

0

answers

30

views

Surfshark virustotal alerts seen [closed]

vpn

asked 22 hours ago Rosario V 1

9

votes

1

answer

6k

views

How can I spoof the Mimetype of a file upload?

file-upload

modified 23 hours ago guesy 1

44

votes

3

answers

16k

views

How can Android encryption be so fast?

encryption android disk-encryption

modified 23 hours ago forest 53.1k

4

votes

1

answer

315

views

If rowhammer only results in capacitor discharge, how can it flip 0 to 1?

hardware physical memory side-channel rowhammer

modified yesterday forest 53.1k

6

votes

1

answer

1k

views

How can I protect my home/office computer against row hammer?

attack-prevention memory rowhammer

modified yesterday forest 53.1k

0

votes

0

answers

16

views

What is the obfuscation method utilised in Playdead's 'LIMBO' video game? [migrated]

reverse-engineering source-code obfuscation

asked yesterday ivan866 101

0

votes

2

answers

64

views

Can GET Requests with Spring Rest controllers be intercepted by attackers?

aes jwt spring-framework react

modified yesterday Community♦ 1

56

votes

5

answers

14k

views

Is it secure to use MD5 to verify the integrity of small files (less than 15kb)?

hash md5 sha256

modified yesterday forest 53.1k

79

votes

10

answers

23k

views

Why is JavaScript “safe” to run in the browser?

web-browser javascript

modified yesterday forest 53.1k

0

votes

0

answers

48

views

What are the risks of a client application not verifying the server's certificate in an internal network?

tls certificates

asked yesterday chivano 1

22

votes

4

answers

7k

views

How is Sandboxing implemented?

sandbox

modified yesterday forest 53.1k

0

votes

1

answer

2k

views

bettercap - arp spoofing

arp-spoofing bettercap

modified yesterday Community♦ 1

0

votes

2

answers

40

views

Investigating a downloaded certificate

certificate-authority openssl

modified yesterday Steffen Ullrich 159k

0

votes

1

answer

45

views

Can't find cause of malware in Wordpress site - adding html files with redirects [closed]

malware wordpress blacklist

answered yesterday tom johnes 21

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.