Information Security Stack Exchange Community Digest

Top new questions this week:

VPN client on a router versus VPN client on a computer

Until now, I have been using VPN client on my computer. I did this to hide the fact that I was using Tor, as well as other activities, from my ISP. I would like to change my configuration. I want to ...

vpn tor router  
user avatar asked by zbroqvfuktscvn Score of 1

GPU speedup for PBKDF2 vs bcrypt vs Argon2

I've got a service currently using PBKDF2-HMAC-SHA256 for password hashing, and I thought I'd upgrade that to something a wee bit more GPU-resistant, so I've been checking out my options, comparing ...

password-cracking bcrypt pbkdf2 argon2  
user avatar asked by Dolda2000 Score of 1

Greatest hits from previous weeks:

How difficult to crack keepass master password?

How easily could someone crack my keepass .kdbx file if that person steals the file but never obtains the Master Password? Is this a serious threat, or would a brute force attack require massive ...

passwords password-management  
user avatar asked by steampowered Score of 121

Is Adblock (Plus) a security risk?

My email-provider's website (http://www.gmx.de) recently started linking to the (German) site http://www.browsersicherheit.info/ which basically claims that due to its capabilities to modify a site's ...

web-browser phishing browser-extensions threats  
user avatar asked by Tobias Kienzler Score of 172
user avatar answered by Andalur Score of 225

How safe are password managers like LastPass?

I use LastPass to store and use my passwords, so I do not have duplicate passwords even if I have to register four to five different accounts a day, and the passwords are long. How safe are password ...

passwords password-management  
user avatar asked by blended Score of 206

How to find live hosts on my network?

I am trying to find the live hosts on my network using nmap. I am scanning the network in Ubuntu using the command sudo nmap -sP 192.168.2.1/24. However, I am unable to find the live hosts. I just get ...

nmap host-discovery  
user avatar asked by TheRookierLearner Score of 316
user avatar answered by Shurmajee Score of 329

Is Plaid, a service which collects user’s banking login information, safe to use?

I recently signed up for Privacy.com, which uses a service called Plaid to link a bank account. To do this, it requires the user to provide their banking username and password to a webpage from Plaid,...

authentication banks  
user avatar asked by gfrung4 Score of 213
user avatar answered by Ilikeprivacy Score of 109

How do I use "openssl s_client" to test for (absence of) SSLv3 support?

In order to mitigate the "Poodle" vulnerability, I'd like to disable SSLv3 support in my (in this case, TLS, rather than HTTPS) server. How can I use openssl s_client to verify that I've done this?

tls openssl  
user avatar asked by Roger Lipscombe Score of 130
user avatar answered by ifexploit Score of 171

What is s3.amazonaws.com, and why is Chrome blocking it?

Lately, whenever I click on a download link in Google Chrome, it redirects to another link starting with s3.amazonaws.com, which in turn gets blocked either by Chrome or by my Antivirus (Comodo ...

web-service chrome  
user avatar asked by Tymric Score of 10
You're receiving this message because you subscribed to the Information Security community digest.
Unsubscribe from this community digest       Edit email settings       Leave feedback       Privacy
Stack Overflow

Stack Overflow, 14 Wall Street, 20th Floor, New York, NY 10005

<3