User Peter Harmann - Information Security Stack Exchange

190 votes

Accepted

Secure way of masking out sensitive information in screenshots?

answered Apr 19, 2018 at 19:12

182 votes

Received a set of SMS/MMS containing 2 photos, a voice message, and a text "I need help" with Google Maps link from a known contact. Is it spam?

answered Apr 23, 2018 at 13:27

170 votes

Accepted

Is it more secure to program a client-server system in a language other than English?

answered Apr 30, 2018 at 14:03

66 votes

Why is this certificate for Imgur only valid for one day?

answered May 5, 2018 at 15:43

52 votes

What considerations do I need to keep in mind when enforcing passphrases?

answered Apr 30, 2018 at 12:07

38 votes

Accepted

Is there any security risk when a certificate authority is used more than all others?

answered Apr 24, 2018 at 12:36

27 votes

What local resources are used when bruteforcing a remote service?

answered May 19, 2019 at 14:00

15 votes

Why would I ever use AES-256-CBC if AES-256-GCM is more secure?

answered Apr 22, 2018 at 15:21

9 votes

Accepted

Should a "password reset" link be valid after changing email?

answered Apr 24, 2018 at 16:56

9 votes

Accepted

Is it safe to store APK signing passwords in private git repository?

answered Jul 5, 2018 at 13:20

8 votes

How well can Tor + VPN secure my anonymity on the internet?

answered Jun 20, 2019 at 1:57

7 votes

Accepted

Is it okay to save passwords as base64 strings with no other hashing or encryption beforehand?

answered Sep 28, 2018 at 8:03

7 votes

Accepted

Diffie-Hellman with non-prime modulus

answered Apr 23, 2019 at 7:11

7 votes

Should we use different usernames for each website, to achieve better anonymity?

answered May 1, 2018 at 20:28

7 votes

How to prevent "JailBreak detection bypass" by Cydia tools such as "Flex 3" etc?

answered May 2, 2018 at 11:16

6 votes

The basic difference between RSA algorithm and Shor's algorithm

answered Jul 18, 2018 at 22:24

6 votes

Accepted

Does Time-based One Time Password improves security in case of database leak?

answered Apr 25, 2018 at 11:17

6 votes

Accepted

What are the relation (difference and similarities) between Replay attack, reflection attack and relay attack?

answered Apr 22, 2018 at 15:49

6 votes

Accepted

Alternative to bcrypt in .NET Core?

answered Apr 26, 2019 at 17:57

6 votes

Do different files always have different MD5 or SHA1 hash codes?

answered Oct 2, 2018 at 22:31

6 votes

Accepted

How well can Tor + VPN secure my anonymity on the internet?

answered Aug 31, 2019 at 10:10

5 votes

Accepted

"Family" apps use shared passwords for different usernames. How bad is it?

answered Jun 16, 2019 at 13:55

5 votes

Accepted

Does an admin need legitimaly to access his own logs generated by auditd?

answered Sep 27, 2018 at 10:39

5 votes

Accepted

How vulnerable are rolling codes used in car keyfobs to simple replay attacks?

answered May 1, 2018 at 14:57

5 votes

How do I know if a Certificate Authority is not fake?

answered Apr 19, 2018 at 17:05

5 votes

As a security compliance professional, what should I do if I find that my employer has a PCI AOC but is not compliant?

answered Apr 20, 2018 at 8:55

5 votes

Can a badly configured AppArmor profile reduce security?

answered Apr 24, 2018 at 23:02

5 votes

Is it possible to include a PHP Function while performing SQL Injection?

answered May 30, 2018 at 13:55

5 votes

Isn't password storage designed to not un-mask passwords?

answered May 5, 2018 at 1:30

5 votes

Why is it recommended to use accounts without sysop rights for everyday work?

answered May 2, 2018 at 13:05

Stack Exchange Network

210 Answers

Secure way of masking out sensitive information in screenshots?

Received a set of SMS/MMS containing 2 photos, a voice message, and a text "I need help" with Google Maps link from a known contact. Is it spam?

Is it more secure to program a client-server system in a language other than English?

Why is this certificate for Imgur only valid for one day?

What considerations do I need to keep in mind when enforcing passphrases?

Is there any security risk when a certificate authority is used more than all others?

What local resources are used when bruteforcing a remote service?

Why would I ever use AES-256-CBC if AES-256-GCM is more secure?

Should a "password reset" link be valid after changing email?

Is it safe to store APK signing passwords in private git repository?

How well can Tor + VPN secure my anonymity on the internet?

Is it okay to save passwords as base64 strings with no other hashing or encryption beforehand?

Diffie-Hellman with non-prime modulus

Should we use different usernames for each website, to achieve better anonymity?

How to prevent "JailBreak detection bypass" by Cydia tools such as "Flex 3" etc?

The basic difference between RSA algorithm and Shor's algorithm

Does Time-based One Time Password improves security in case of database leak?

What are the relation (difference and similarities) between Replay attack, reflection attack and relay attack?

Alternative to bcrypt in .NET Core?

Do different files always have different MD5 or SHA1 hash codes?

How well can Tor + VPN secure my anonymity on the internet?

"Family" apps use shared passwords for different usernames. How bad is it?

Does an admin need legitimaly to access his own logs generated by auditd?

How vulnerable are rolling codes used in car keyfobs to simple replay attacks?

How do I know if a Certificate Authority is not fake?

As a security compliance professional, what should I do if I find that my employer has a PCI AOC but is not compliant?

Can a badly configured AppArmor profile reduce security?

Is it possible to include a PHP Function while performing SQL Injection?

Isn't password storage designed to not un-mask passwords?

Why is it recommended to use accounts without sysop rights for everyday work?