Top Questions

In Hoc Signo's user avatar

Community Bot

modified 4 hours ago

0 votes

0 answers

30 views

Is C#'s System.Web.Helpers.Crypto password-hashing still considered secure?

In Hoc Signo

asked 8 hours ago

0 votes

0 answers

13 views

Late 2025/2026 equivalent of ExtAnalysis to audit Firefox extensions? [closed]

Gilles Quénot's user avatar

Gilles Quénot

asked 11 hours ago

4 votes

2 answers

8k views

Is there practical risk to keeping UDP ports open?

Tim Abdiukov's user avatar

Tim Abdiukov

modified 19 hours ago

-1 votes

0 answers

38 views

Why do money transactions stop during the change of clock due to daylight saving time? [closed]

Space.yg's user avatar

Space.yg

asked yesterday

0 votes

1 answer

1k views

How do I get a forensic copy of an EC2 server?

Community Bot

Toby Speight's user avatar

5 votes

1 answer

586 views

What is the difference between contactless Apple Pay and contactless card?

Toby Speight

1,329

0 votes

0 answers

14 views

using ffuf with wordfile but it is not finding .env [closed]

schroeder's user avatar

schroeder ♦

134k

0 votes

1 answer

1k views

How to monitor a logs directory with OSSEC agent in windows

Community Bot

0 votes

1 answer

107 views

File backup encryption for personal files

schroeder's user avatar

schroeder ♦

134k

Gabriel Vanca's user avatar

3 votes

2 answers

1k views

Is it normal for a payment procedure to ask for third party cookies to be turned on?

Gabriel Vanca

2 votes

1 answer

300 views

PCI & e-banking sensitive information tokenization/encryption/obfuscation - Which fields require to be secured?

Community Bot

2 votes

1 answer

570 views

Decrypt SSL with Wireshark supported browsers

Community Bot

0 votes

1 answer

781 views

StrongSwan, IPsec remote certs and cert_policy

Community Bot

0 votes

1 answer

1k views

DMZ to Virtualbox VM with pfSense

Community Bot

2 votes

1 answer

5k views

Starting a new shell in a strcpy exploit using buffer overflow

Community Bot

0 votes

1 answer

60 views

Does qualified electronic signature require a certified middleware

grawity's user avatar

grawity

1,918

answered 2 days ago

0 votes

1 answer

2k views

How to avoid response manipulation in NodeJS Application?

Community Bot

3 votes

3 answers

789 views

Encrypt User specific Information without a password

Community Bot

0 votes

2 answers

349 views

Downside of resource owner password flow for native mobile apps?

Community Bot

5 votes

1 answer

791 views

Can you bypass PIN requirement of FIDO token protected LUKS device with hex editor?

Ja1024's user avatar

Ja1024

38.6k

9 votes

2 answers

915 views

When is memory allocation/layout deterministic?

Jack G's user avatar

Jack G

2 votes

2 answers

656 views

OIDC Hybrid flow

openid-connect

Community Bot

1 vote

1 answer

184 views

Testing for Broken Object Level Authorization (BOLA) vulnerabilities

Community Bot

1 vote

1 answer

1k views

SAML Without Session

Community Bot

2 votes

1 answer

153 views

Can /proc/PID/fd be used to snoop on anonymous sockets?

linux

Community Bot

2 votes

2 answers

924 views

Feasability of deanonymizing commercially available advertiser data

TRiG's user avatar

TRiG

modified Nov 21 at 23:26

1 vote

1 answer

61 views

Managing keys for encrypted system backups and recovery

Community Bot

modified Nov 21 at 23:01

4 votes

1 answer

1k views

OCSP invalidation of intermediate CA using OCSP_SIGNING

Community Bot

modified Nov 21 at 20:06

0 votes

1 answer

372 views

Will this Setup Protect My External Drive Files from Malware (e.g. Ransomware)?

ransomware

Community Bot

modified Nov 21 at 19:03

2 votes

2 answers

661 views

What is a secure way to log onto the domain controller?

Community Bot

modified Nov 21 at 18:06

0 votes

3 answers

2k views

If an SSD uses TRIM, is there any reason to destroy it physically to protect one's data?

gnasher729's user avatar

gnasher729

3,524

modified Nov 21 at 14:15

12 votes

3 answers

4k views

Suitable cipher for SMS encryption

un7r4c4bl3's user avatar

un7r4c4bl3

modified Nov 21 at 12:22

0 votes

1 answer

698 views

Kubernetes show secrets for namespace

Community Bot

modified Nov 21 at 2:03

2 votes

1 answer

1k views

Passive WiFi sniffing without associating to the AP

Community Bot

modified Nov 21 at 0:08

7 votes

3 answers

2k views

Does an SMS OTP have to be recreated for every message?

Ja1024's user avatar

Ja1024

38.6k

answered Nov 20 at 17:23

3 votes

1 answer

1k views

Implement state parameter in OAuth2.0 code flow server-side

Community Bot

modified Nov 20 at 16:10

0 votes

0 answers

39 views

Wordpress site compromised? [closed]

andii1997's user avatar

andii1997

asked Nov 20 at 12:19

1 vote

1 answer

252 views

mTLS with trust established through a chain of client certificates rather than a central CA

Community Bot

modified Nov 20 at 12:00

0 votes

1 answer

40 views

PCI applicability when only typing cc info into a client's payment system

pci-dss

Gh0stFish's user avatar

Gh0stFish

answered Nov 20 at 9:56

1 vote

2 answers

900 views

Checking system integrity after clicking scam email link on Linux

Community Bot

modified Nov 20 at 8:02

1 vote

1 answer

817 views

How to set autorunscript of core commands?

Community Bot

modified Nov 20 at 6:05

1 vote

1 answer

3k views

Website doesn't provide cookie (csrf token) when connecting over proxy. Why/how?