Information Security Weekly Newsletter
Information Security Weekly Newsletter

Top new questions this week:

Why is my internal IP address (private) visible from the Internet?

When visiting some websites like "http://www.monip.org/" or "http://ip-api.com/", I get the following result: Your current IP Address - IP: 197.158.x.x - Internal IP: 192.168.x.x I ...

ip geolocation  
asked by Lova Nirina Andrianasolo 84 votes
answered by Christopher 80 votes

How dangerous is it to reveal your birth date, and why?

At some point I told a friend that it's dangerous to reveal your birth date (kind of like your social security number or your mother's maiden name), because it's a crucial piece of information for ...

identity-theft  
asked by Mehrdad 65 votes
answered by Lucas Kauffman 55 votes

How can common users defend against the StageFright vulnerability?

I was just informed of the StageFright vulnerability in Android devices. A specially crafted MMS message can gain access to data on the phone; so presumably it's a buffer overflow with subsequent ...

android stagefright  
asked by S.L. Barth 47 votes
answered by BadSkillz 52 votes

How exactly does the Stagefright Vulnerability work on Android?

Digital Trends describes the Stagefright Vulnerability thus: The exploit in question happens when a hacker sends a MMS message containing a video that includes malware code. What’s most alarming ...

android stagefright  
asked by PositriesElectron 38 votes
answered by Chavez 35 votes

What prevents a man in the middle from requesting a certificate for your server?

Let's say you have a server at shop.example.com and you are requesting a certificate from some trusted CA like Comodo (they say they'll issue it within few minutes online). First of all, how can ...

tls certificates man-in-the-middle  
asked by Ilya Chernomordik 23 votes
answered by Thomas Pornin 31 votes

How does this HTML5-based "Mass Router Infection" scheme work?

I read this article stating that purely through a website, "without any user interaction" mass router infection is (/was?) possible. I'm not sure that this problem still exists as it was posted 3 ...

network  
asked by Jonathan Todd 21 votes
answered by SilverlightFox 16 votes

How can people send me spam emails from the future?

Is this an exploit of the email system of some sort? I receive a great deal of spam every day, and my accounts in Yahoo and Gmail sometimes show me spam emails from the future. Yes, the future. ...

email  
asked by thinly veiled question mark 17 votes
answered by dr01 27 votes

Greatest hits from previous weeks:

How does changing your password every 90 days increase security?

Where I work I'm forced to change my password every 90 days. This security measure has been in place in many organizations for as long as I can remember. Is there a specific security vulnerability ...

authentication passwords password-management  
asked by Bill the Lizard 353 votes
answered by Justin Cave 222 votes

What is the difference between SSL vs SSH? Which is more secure?

What is the difference between SSH and SSL? Which one is more secure, if you can compare them together? Which has more potential vulnerabilities?

cryptography network tls ssh  
asked by Am1rr3zA 80 votes
answered by Thomas Pornin 89 votes

Can you answer these?

Forcing new password with zero-knowledge proof authentications

Let's say a ZKP (e.g. SRP6a) is used, for password verification. Let's say I need to force a user to change their password (so I have the salt and the verifier for the current password). For this, ...

salt srp  
asked by Pawel Veselov 3 votes

How does an android device/os prevent me from getting root?

I have never used an android phone and so hopefully this is not a bad question to ask. I know on iOS the kernel itself is signed and so cannot be extended and all applications are signed. Hence I ...

android  
asked by user220201 2 votes

Is a NAS vulnerable when VPN'd through dedicated server?

I'm concerned about the security of part of my home setup, but I'm quite unfamiliar with a lot of this so I thought I'd start out by saying what I'm trying to do, in case my solution is a poor one in ...

vpn  
asked by Helpme 1 vote
Subscribe to more Stack Exchange newsletters


Unsubscribe from this newsletter or change your email preferences by visiting your subscriptions page on stackexchange.com.

Questions? Comments? Let us know on our feedback site. If you no longer want to receive mail from Stack Exchange, unsubscribe from all stackexchange.com emails.

Stack Exchange, Inc. 110 William St, 28th Floor, NY NY 10038 <3