Skip to main content
Neil Smithline's user avatar
Neil Smithline's user avatar
Neil Smithline's user avatar
Neil Smithline
  • Member for 11 years, 10 months
  • Last seen more than a month ago
131 votes
Accepted

How did someone log-in to my Gmail account from Kenya?

71 votes
Accepted

Use multiple computers for faster brute force

62 votes
Accepted

Is refreshing an expired JWT token a good strategy?

60 votes
Accepted

Should I use CSRF protection for GET requests?

35 votes
Accepted

How to tell if a webapp transmits my password in cleartext?

31 votes

Is there a threshold for a password so long it doesn't get any more secure or even becomes insecure?

26 votes
Accepted

What to do when you can’t protect mobile app secret keys?

21 votes
Accepted

May HSTS block access to your site when you renew your SSL certificate?

19 votes

How to securely read a physical memory address in Linux?

18 votes
Accepted

Why will Google no longer allow me to end or begin passwords with a space?

17 votes
Accepted

Why do websites store passwords' hashes not their ciphertexts?

16 votes

Does correcting misspelled usernames create a security risk?

15 votes
Accepted

not allowing pasting of bank account number

15 votes
Accepted

Is a JWT usable as a CSRF token?

15 votes

stack buffer overflow in the main function?

14 votes

Can someone use WiFi snooping to see data I send through Tor Browser when I'm not using SSL?

13 votes

Are SSL browser sessions kept alive across requests?

13 votes

CSS code can be seen through my browser. Is that a vulnerability?

10 votes
Accepted

How can Heartbleed checkers determine if a site is vulnerable?

10 votes
Accepted

Why OWASP Top 10 (web application) hasn't changed since 2013 but Mobile Top 10 is as recent as 2016?

10 votes
Accepted

Should I provide https downloads?

9 votes

Why, after a certain character limit, are larger passwords labeled as "weak" on some sites?

9 votes
Accepted

A compromised USB

8 votes

Gmail may be hacked - bulk spam emails being sent FROM Google apps account

8 votes

Why is a password accompanied by a username deemed 'safer'?

8 votes
Accepted

Can a rogue DNS server see my passwords?

7 votes

What is the security of random code for authenticating products?

7 votes

Parameters for PBKDF2 for password hashing

7 votes

Two passwords provide better security than two-factor authentication?

7 votes

Is it safe to use .netrc files to store credentials for tools like curl or ftp?

1
2 3 4 5
11