User Daisetsu

111 votes

Accepted

What should a verification email consist of?

answered Nov 4, 2018 at 23:48

38 votes

Is brute force a probable threat even if you enable CAPTCHA and rate limit logins?

answered Oct 7, 2018 at 16:39

23 votes

Does quick denial tell that you passwords are stored in plain text?

answered Apr 25, 2016 at 6:00

11 votes

JSON Web Tokens (JWT) as user identification and authentication tokens

answered Feb 11, 2014 at 21:48

11 votes

Comparison between Firejail and Apparmor

answered Oct 9, 2018 at 0:21

11 votes

Accepted

How would one scan a large, untrusted file?

answered Oct 11, 2018 at 3:17

11 votes

If I know the CPU architecture of a target, can I send instructions embedded in an image?

answered Oct 29, 2018 at 1:55

10 votes

SAML and kerberos what to use where

answered Feb 11, 2014 at 21:17

7 votes

How does SMS spoofing work practically?

answered Apr 23, 2016 at 7:14

7 votes

Accepted

How can I find a web application's document root using a path traversal vulnerability?

answered Mar 16, 2019 at 0:32

6 votes

Why iterate 5200 times when computing Safety Numbers in Signal?

answered Oct 15, 2018 at 17:17

6 votes

Accepted

What patterns does a signature based anti-virus look for?

answered Feb 11, 2014 at 17:47

6 votes

Are there any fast Homomorphic Obfuscuation techniques available?

answered Feb 11, 2014 at 23:37

6 votes

Accepted

What is a "Cookie Swap" password reset attack?

answered Oct 6, 2018 at 7:02

5 votes

Accepted

I don't understand what's wrong with just using cookies for authentication?

answered Oct 15, 2018 at 22:56

5 votes

Accepted

How can I execute a XSS on 302 redirect and the body on the page?

answered Oct 11, 2018 at 22:54

5 votes

How can I know for sure if somebody has planted spyware on my device?

answered Mar 25, 2019 at 5:00

5 votes

A link redirect to http instead of https: how critical is it?

answered Mar 15, 2019 at 18:18

4 votes

Can you serve up special content to an end-user based on IP or other identifiable data?

answered Nov 9, 2018 at 18:20

4 votes

Use MAC Address to Identify Laptop Model?

answered Oct 10, 2018 at 6:22

4 votes

How does IP Geolocation get weather station information

answered Apr 25, 2016 at 18:48

4 votes

CRC-96(ZIP) decryption

answered Apr 24, 2016 at 18:02

4 votes

Accepted

Hacker uploads script as image

answered Apr 24, 2016 at 18:35

4 votes

Accepted

I just can't use social engeneering tool in kali

answered Mar 25, 2019 at 4:47

3 votes

Accepted

How can releasing the text of an SQL query compromise security?

answered Apr 25, 2016 at 1:06

3 votes

Can my school see exactly what I’m doing?

answered Oct 7, 2018 at 17:34

3 votes

Why can't someone break email or https encryption by somehow getting access to the encryption key?

answered Feb 13, 2014 at 23:24

3 votes

Why would an attacker try to guess random email usernames on a small domain?

answered Feb 14, 2014 at 19:23

3 votes

Accepted

What are industry-standard recommended practices to protect user information in an Android app?

answered Feb 7, 2014 at 2:00

3 votes

How can I ensure that Dropbox is using only its folder?

answered Feb 8, 2014 at 4:15

Stack Exchange Network

156 Answers

What should a verification email consist of?

Is brute force a probable threat even if you enable CAPTCHA and rate limit logins?

Does quick denial tell that you passwords are stored in plain text?

JSON Web Tokens (JWT) as user identification and authentication tokens

Comparison between Firejail and Apparmor

How would one scan a large, untrusted file?

If I know the CPU architecture of a target, can I send instructions embedded in an image?

SAML and kerberos what to use where

How does SMS spoofing work practically?

How can I find a web application's document root using a path traversal vulnerability?

Why iterate 5200 times when computing Safety Numbers in Signal?

What patterns does a signature based anti-virus look for?

Are there any fast Homomorphic Obfuscuation techniques available?

What is a "Cookie Swap" password reset attack?

I don't understand what's wrong with just using cookies for authentication?

How can I execute a XSS on 302 redirect and the body on the page?

How can I know for sure if somebody has planted spyware on my device?

A link redirect to http instead of https: how critical is it?

Can you serve up special content to an end-user based on IP or other identifiable data?

Use MAC Address to Identify Laptop Model?

How does IP Geolocation get weather station information

CRC-96(ZIP) decryption

Hacker uploads script as image

I just can't use social engeneering tool in kali

How can releasing the text of an SQL query compromise security?

Can my school see exactly what I’m doing?

Why can't someone break email or https encryption by somehow getting access to the encryption key?

Why would an attacker try to guess random email usernames on a small domain?

What are industry-standard recommended practices to protect user information in an Android app?

How can I ensure that Dropbox is using only its folder?