mgibsonbr's user avatar
mgibsonbr's user avatar
mgibsonbr's user avatar
mgibsonbr
  • Member for 12 years, 2 months
  • Last seen more than a month ago
22 votes
Accepted

Is it safe to store password in HTML5 sessionStorage?

13 votes

what are good requirements for a password

10 votes
Accepted

Mitigating the loss of a mobile phone used for second-factor login

5 votes
Accepted

Drawbacks of storing an authentication token on the client side?

5 votes
Accepted

SJCL : convert ascii to a BitArray & compute random numbers

4 votes

How to handle two sets of OpenID credentials providing the same information, on the same or different OpenID providers?

4 votes

Storing passwords in reversible form - a genuine use-case

4 votes

Use of rainbow tables with the NY Times hack?

4 votes
Accepted

Newline XSS vulnerability

4 votes

Is passwords with combination of different encodings super safe?

4 votes
Accepted

Is a self signed certificate sufficient to prove the integrity of my executable?

3 votes

Erasing Truecrypt keyfile(s) after volume has been mounted

3 votes

Is this a good approach to secure my REST API?

3 votes
Accepted

PHP web application security

3 votes

Are CSRF Attacks Really Blind

3 votes

Do WebSocket-powered web apps (e.g. "comet" apps) have to worry about CSRF?

2 votes

Does Gmail 2-factor auth increase security on smartphones?

2 votes
Accepted

App uses html_safe method, possible issues

2 votes
Accepted

How to manage passwords in a multi-tenant surrounding?

2 votes

Are bookmarklets safe with facebook data?

2 votes

Browser security - Firefox + NoScript is better than Google Chrome?

2 votes

If I never want cross origin requests to be accepted, can I just ignore CORS?

2 votes

certificate usage for signing and encryption

2 votes

HTTPS firewall rule

2 votes

Can clients execute my python CGI at will?

1 vote

When salting and hashing passwords, any advantage to including password length?

1 vote

Bruteforce Passphrase of Dictionary Words

1 vote

Does adding dictionary words to passwords weaken them?

1 vote

Can encryption twice with two keys in different sequences lead to the same result?

1 vote

What is Non-Repudiation of content? How can we combat it?