89 votes
Accepted

Does Sci-Hub use malware and phishing to obtain researchers' login credentials?

The claim in the article that people who go to the Sci-Hub website are "very vulnerable to having their credentials stolen" is completely baseless, since Sci-Hub never asks for credentials ...
Avery's user avatar
  • 44.9k
87 votes
Accepted

Are Americans more likely to be killed by vending machines than terrorist refugees?

Yes those numbers appear to be correct. The Cato instituted published "Terrorism and Immigration A Risk Analysis" in September 2016. From that report: NPR article on the chance of winning the ...
ventsyv's user avatar
  • 7,126
78 votes

Are Americans more likely to be killed by vending machines than terrorist refugees?

According to US Citizenship and Immigration Service webpage Refugees & Asylum, last updated in 2015: Asylum status is a form of protection available to people who: •Meet the definition of ...
DavePhD's user avatar
  • 106k
65 votes

Do four random common words make a stronger password than passwords like "Tr0ub4dor&3"?

It is true that you do not need numbers, special characters, etc for a strong password. If you instead increase the length of the password, the entropy will increase as well. See for example this ...
tim's user avatar
  • 51.9k
65 votes

Were Facebook employees unable to enter their own building to fix router problems, during a recent (six hour) outage?

It took "extra time" to get onsite. From Facebook's report about the outage: ...these facilities are designed with high levels of physical and system security in mind. They’re hard to get into, and ...
Rob Watts's user avatar
  • 5,736
37 votes

Did US prohibit the export of the mere description of a cryptographic algorithm?

Part 121 The United States Munitions List Enumeration of Articles Sec. 121.1 General. The United States Munitions List. ... Category XIII--Auxiliary Military Equipment ... (b) ...
DavePhD's user avatar
  • 106k
31 votes

Does Melania Trump's security cost double the National Endowment for the Arts' budget?

This claim is currently unproven. According to a Snopes article written today, which rates this claim as unproven, Chapman cited the CNN article linked below as his source for the security cost and he ...
reirab's user avatar
  • 4,094
22 votes
Accepted

Have ATMs across the US "spat out money" in the second half of January 2018?

Brian Krebs (noted and respected infosec analyst and blogger) reported this on 27th Jan. 27 Jan 18 First ‘Jackpotting’ Attacks Hit U.S. ATMs ATM “jackpotting” — a sophisticated crime in ...
PhillS's user avatar
  • 3,044
20 votes
Accepted

Is there any evidence that laptops in airplanes might be used for terrorist attack?

Your title and body ask different questions, but in Somalia last year, a bomb disguised as a laptop was used to attack a plane: 'Sophisticated' laptop bomb on Somali plane got through X-ray machine ...
ThisIsNoZaku's user avatar
19 votes

Did US prohibit the export of the mere description of a cryptographic algorithm?

Actually, it looks like books with crypto algorithms were excluded from such exporting licensing requirements; in the Karn case: The ODTC [Office of Defense Trade Controls] determined that the ...
Fizz's user avatar
  • 59.8k
14 votes

Can aircraft be hacked and "commandeered remotely"?

Evidence: There is an application for a search warrant documented in court by FBI that a US hacker named Chris Roberts hacked into the electronic entertainment systems of airplanes [1] and that he ...
pericles316's user avatar
  • 22.7k
14 votes

Do the "Presidential Alerts" give the government full access to all phone functionality?

The presidential alerts are part of a bigger system that also includes AMBER alerts and alerts for bad weather and "other threatening emergencies". These alerts are called Wireless Emergency Alerts (...
Laurel's user avatar
  • 30.8k
14 votes

Were Facebook employees unable to enter their own building to fix router problems, during a recent (six hour) outage?

As Robb Watts' answer states, Facebook has acknowledged this was part of the problem, so we know the claim is true. ("...it took extra time to activate the secure access protocols needed to get ...
Tiercelet's user avatar
  • 1,137
13 votes

Do four random common words make a stronger password than passwords like "Tr0ub4dor&3"?

There is no single right answer to how much entropy a password has: the result will depend on the assumptions the attacker will make about it, and these are unknown. More or less reasonable guesses ...
Dmitry Grigoryev's user avatar
13 votes

Does United States have no technology to allow Internet voting in a secure way?

Evidence: Experts warn against the usage of internet voting in USA unless the vote data is transmitted in a safe, secure and verifiable process over the internet. In 2008, 32 respected computer ...
pericles316's user avatar
  • 22.7k
13 votes

Did US prohibit the export of the mere description of a cryptographic algorithm?

Have a look at the case Bernstein v. United States In the early 1990s, Daniel J. Bernstein created the Snuffle encryption system. He wanted to publish it in an international conference. However, ...
Ángel's user avatar
  • 231
12 votes
Accepted

Did Sean Spicer tweet a password twice in two days?

The White House acknowledged that the tweets were made, calling them "pocket tweets." As for their content, WaPo speculates that they're two-factor authentication codes which he sent back to the SMS ...
Avery's user avatar
  • 44.9k
12 votes
Accepted

Did the FBI not require assistance from Apple to unlock the San Bernadino terrorist's phone?

There was a discussion at security stackexchange about this issue. The top rated answer says: Yes, it is possible. However, that runs the risk of destroying the device without getting the data ...
Christian's user avatar
  • 33.3k
12 votes

Does aluminum foil safeguard your credit card from RFID attacks?

Yes. Duo labs (security vendor) says on https://duo.com/decipher/labs-presents-whats-happening-with-rfid-blocking-gear It turns out standards for testing these RFID-blocking devices actually ...
Rory Alsop's user avatar
  • 6,237
12 votes

Does Sci-Hub use malware and phishing to obtain researchers' login credentials?

Does Sci-Hub rely on stolen credentials from unwitting researchers? Yes, at least in part. This is confirmed by Alexandra Elbakyan herself, although she also claims that Sci-Hub isn't the one ...
Allure's user avatar
  • 1,011
11 votes

Was John Podesta's email password "password"?

(With analysis thanks to Oddthinking) Assange seems to refer to this leaked email from Podesta's assistant Eryn Sapp to him, which contained an username and password for him to use. (This was not ...
Avery's user avatar
  • 44.9k
9 votes
Accepted

Did Seth Rich give Wikileaks the DNC leak emails?

This is answered in the question that @jwodder mentions. Snopes did an analysis of a closely related question. I think the answer is no and I'm confident Snopes would agree, based on their answer. ...
rougon's user avatar
  • 7,400
8 votes

Do informed, alert communities increase national safety?

In Israel, where there is a high level of alertness to threats and civilians are taught to act immediately if they see anything suspicious, there are multiple incidents of civilians identifying a ...
ff524's user avatar
  • 10.2k
8 votes

Is there documented evidence that George Kennan opposed the establishment of NATO?

David Mayer's 1990 book George Kennan and the Dilemmas of US Foreign Policy has the most detailed account on Kennan's view on that that I could find, albeit a lot of that is paraphrased (pp. 152-155): ...
Fizz's user avatar
  • 59.8k
7 votes

Was John Podesta's email password "password"?

The current accepted answer has a number of errors, so I'm creating this answer. Thanks to comments by Avery and Oddthinking for some resources. The source of this claim is apparently a Fox News ...
Batman's user avatar
  • 1,074
7 votes

Did the FBI not require assistance from Apple to unlock the San Bernadino terrorist's phone?

The answer is yes, there are alternative means for gaining access to the Apple Iphone 5c device running on IOS9 that exist which might not require the manufacturer's assistance which is agreed by ...
pericles316's user avatar
  • 22.7k
7 votes
Accepted

Has Telegram decrypted user messages and provided them to a gov agency?

As far as we know, the police did not go to Telegram and ask them for the data. Vice (Germany) states - based on non-public papers by the LKA - that the police got the data directly from the phone ...
tim's user avatar
  • 51.9k
7 votes

Is illegal immigration down since construction began on Trump's wall?

You know that Larry David gif when he made the "I can't make sense out of it" gesture? This is the thing. The claim in linked article is unquoted. Yet on FoxNews you can, again without a quotation ...
SZCZERZO KŁY's user avatar
6 votes

Are Americans more likely to be killed by vending machines than terrorist refugees?

According to this analysis on CrossValidated.SE, we don't really know. The first problem with this data is non-stationariness. These numbers hold only if the number of refugees and vending machines ...
Dmitry Grigoryev's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible