From an input-validation standpoint, they have no leg to stand on; there are a specific set of RFCs that robustly describe the format of a valid email address. Even if an email address is technically invalid according to the RFC, it may still be possible to deliver mail to it anyway. You can check if an email address…
Answered Mar 24, 2022 · 547 Views Read answer →
Real example of Data owner vs Data custodian: Data Owner - the administrator/CEO/board/president of a company Data custodian - the ones taking care of the actual data - like IT staff (generally) or HR staff (for HR-related data) System owner is the individual that is in charge of one or more systems, which may contain…
Answered Mar 23, 2022 · 1.5K Views Read answer →
You asked - Are RAR files safe I think a well known trick will be to disguise a PE or Executable program into another file, a PDF or an archive for example. Since most people rely on the file's icon or extention, it works pretty well on common users. For instance we (the sec folks) disguised a PE file as a pdf (which…
Answered Mar 23, 2022 · 838 Views Read answer →
There are two objects: the private key, which is what the server owns, keeps secret, and uses to receive new SSL connections; and the public key which is mathematically linked to the private key, and made "public": it is sent to every client as part of the initial steps of the connection. The certificate is,…
Answered Mar 22, 2022 · 1.0K Views Read answer →
You have to create a veracrypt hidden volume for two related reasons. If you are arrested by the government and they suspect that some of the data in the encrypted volume is evidence, you can be forced to provide the password. Since TrueCrypt advertises its ability to create a hidden volume and encourages its use (and…
Answered Mar 22, 2022 · 740 Views Read answer →
There are Domain Name System-based Blackhole List (DNSBL) like SORBS, but they all work the other way around, allowing to test reputation for known IP address. There's a good reason for that. While you may have permission to test your client's systems, but you don't have permission to use 3rd party servers for your…
Answered Mar 21, 2022 · 524 Views Read answer →
I found https://onetimesecret.com/ website as the answer to your question - how to send passwords securely. Basically you create a link containing a password and you send this link to the intended recipient. As soon as the receiver clicks on the link, the link expires and the password is deleted. So the receiver only…
Answered Mar 17, 2022 · 712 Views Read answer →
Netstat -tlnp is the netstat switches application with arguments:-t: Show only the TCP protocol-l: Show only listening sockets -n: Show numerical addresses instead of attempting to resolve the hostname -p: Show the PID of the program that is associated with that socket So combined you are running netstat that will…
Answered Mar 15, 2022 · 647 Views Read answer →
In my opinion, the answer to - is openDNS safe is that it's perfectly fine to use, and probably a very good option for a home user. Perhaps you should elaborate on your specific concerns? I think it's OK because it seems well resourced (due to its business success), and has otherwise signalled "good" intentions. By…
Answered Mar 15, 2022 · 792 Views Read answer →
The answer to how to crack a hash is that generally, to "crack a password" you have to try many combinations and it will take long if the password is not weak. For every password candidate you calculate it's hash, look it up in the list of given hashes, if there's no match - discard the calculated hash (you don't need…
Answered Mar 15, 2022 · 737 Views Read answer →
The answer to your question - Can someone steal your money with your bank account number is that the following is based primarily on US Banking, but most countries have similar risk management practises if they follow Basel Practices. To perform an ACH requires a routing number and an account number. However, for an…
Answered Mar 15, 2022 · 704 Views Read answer →
As the question assumes, in gmail someone has your password, so Google has the password for the POP3 account; it can check the common password dumps if the password is known publicly. They don't claim that somebody is actively using the password with your POP3 account, only that somebody knows it. And they urge you to…
Answered Mar 15, 2022 · 559 Views Read answer →
Learners asking and answering questions on the same topics — follow their questions and join in.
Cyber Security learner
167Questions 203AnswersCyber Security learner
162Questions 179AnswersCyber Security learner
129Questions 158AnswersCyber Security learner
117Questions 141AnswersSQL Server learner
76Questions 92AnswersSalesforce learner
68Questions 162AnswersGuides, tips and career advice on Cyber Security from JanBask experts.
Cyber Security Prepare with 100 Cyber Security Interview Questions & Answers
Boost your interview confidence learn answers to 101 common cybersecurity questions, from basics to advanced techniques.
Cyber Security AI in Cybersecurity: The Double-Edged Sword
Explore how AI is reshaping cybersecurity as a double-edged sword. Learn how attackers use AI for sophisticated threats and how…
Cyber Security Exploring the Advantages and Disadvantages of Ethical Hacking
Discover the key advantages and disadvantages of ethical hacking from enhancing security and regulatory compliance to potential…
Cyber Security Top Cyber Security Projects Ideas to Consider in 2025
Explore 19 practical cybersecurity project ideas for 2025, from AI threat detection to honeypots. Build skills, boost your…
Free tutorials and interview questions from industry experts — learn the skill, then get ready to prove it.
Step-by-step Cyber Security guides from industry experts
Common Cyber Security interview questions, answered
