Andrei Botalov's user avatar
Andrei Botalov's user avatar
Andrei Botalov's user avatar
Andrei Botalov
  • Member for 12 years, 5 months
  • Last seen more than a month ago
87 votes
2 answers
53k views

ssltest: Chain issues - Contains anchor

74 votes
2 answers
59k views

Minimum requirements for storing last 4 digits of credit card number?

34 votes
1 answer
46k views

What key exchange mechanism should be used in TLS?

25 votes
4 answers
17k views

How to subscribe to information about new vulnerabilities in selected products? [closed]

20 votes
3 answers
23k views

Does X-Content-Type-Options really prevent content sniffing attacks?

19 votes
5 answers
21k views

Is client side encryption really better than server side?

14 votes
3 answers
26k views

Is it possible to inject HTML into image to provoke XSS?

14 votes
1 answer
3k views

How can I embed iframe securely without restricting its functionality?

13 votes
5 answers
25k views

Is there a reason to protect SIM with PIN?

13 votes
2 answers
9k views

Is BEAST really fixed in all modern browsers?

11 votes
2 answers
261 views

Should I prevent user from operating with site during some first seconds?

10 votes
2 answers
1k views

Should user be allowed to save password in browser?

10 votes
3 answers
5k views

If PCI DSS isn't a law, how can I be prosecuted for not being compliant?

9 votes
1 answer
3k views

How to make SQL injection in PostgreSQL's tsquery?

9 votes
2 answers
5k views

Is it possible to do HTTP header injection if CR/LF are stripped?

8 votes
5 answers
10k views

Is it trivial to bypass IP blocking?

8 votes
4 answers
11k views

How insecure are PHP's rand functions?

8 votes
5 answers
1k views

How to prevent pay per show/click abuse?

7 votes
4 answers
16k views

Is it necessary to scan users' file uploads by antivirus?

7 votes
2 answers
3k views

Do OpenPGP/GnuPG apply slow hash to password when encrypting/decrypting key?

6 votes
7 answers
7k views

Should I prevent sending of GET requests for urls that are normally operated with POST request?

6 votes
1 answer
2k views

When and Why does Chrome display malware detection warning?

6 votes
4 answers
19k views

Efficient way for finding XSS vulnerabilities?

5 votes
3 answers
502 views

Is "untrusted code" reported by DOM Snitch a vulnerability?

4 votes
3 answers
315 views

Should user input be validated for it's length?

4 votes
1 answer
1k views

What are security risks of serving user uploaded files without Content-Disposition?

4 votes
4 answers
2k views

Is there a security risk in existence of those HTTP headers in responses?

4 votes
5 answers
785 views

Can web application do anything to prevent risk from client-side malware?

3 votes
2 answers
2k views

Is Drupal's filter_xss enough for filtering HTML?

3 votes
1 answer
628 views

Is there a way to store user files without being able to decrypt them?