User Xavier59

96 votes

6 answers

21k views

Is it safe to let a user type a regex as a search input?

asked Aug 6, 2018 at 0:04

25 votes

3 answers

11k views

Computer name naming convention for security

asked Jul 4, 2019 at 17:02

11 votes

4 answers

4k views

Is XSS possible when < is not escaped, but also removed if followed by a character?

asked May 9, 2016 at 21:04

8 votes

1 answer

8k views

Security about window.opener and iframes

asked Dec 3, 2016 at 12:20

7 votes

2 answers

18k views

Why is forwarding port 80 more insecure than the others?

asked Nov 16, 2017 at 10:00

4 votes

1 answer

467 views

Difference between NIDS and NBA

asked Oct 28, 2019 at 15:11

4 votes

2 answers

2k views

Is TCP Sequence Bruteforcing dangerous nowadays?

asked Oct 18, 2016 at 16:47

4 votes

2 answers

1k views

Is it bad practice to let the user know its hashed password?

asked Aug 15, 2017 at 0:14

3 votes

2 answers

940 views

How far is honeypot legal? [closed]

asked Aug 5, 2016 at 12:23

2 votes

1 answer

2k views

Why is there no referer when pointing to a secure page?

asked Sep 2, 2016 at 12:03

2 votes

0 answers

176 views

Trying to reproduce MiTM attack

asked Sep 26, 2016 at 17:18

2 votes

2 answers

4k views

JavaScript variable evasion when quote is escaped, but not newline

asked May 27, 2016 at 21:05

1 vote

1 answer

604 views

Is it dangerous to let the user input into a LIKE sql statement

asked Aug 2, 2016 at 22:35

1 vote

1 answer

2k views

When to sanitize ip address?

asked Feb 11, 2017 at 21:42

0 votes

2 answers

177 views

Incident response to a medium scale phishing attack whereas the targets are not from our company?

asked Sep 19, 2019 at 9:11

0 votes

2 answers

397 views

Why do most ip camera manufacturers set an easy default password?

asked Aug 18, 2018 at 12:48

Stack Exchange Network

16 Questions

Is it safe to let a user type a regex as a search input?

Computer name naming convention for security

Is XSS possible when < is not escaped, but also removed if followed by a character?

Security about window.opener and iframes

Why is forwarding port 80 more insecure than the others?

Difference between NIDS and NBA

Is TCP Sequence Bruteforcing dangerous nowadays?

Is it bad practice to let the user know its hashed password?

How far is honeypot legal? [closed]

Why is there no referer when pointing to a secure page?

Trying to reproduce MiTM attack

JavaScript variable evasion when quote is escaped, but not newline

Is it dangerous to let the user input into a LIKE sql statement

When to sanitize ip address?

Incident response to a medium scale phishing attack whereas the targets are not from our company?

Why do most ip camera manufacturers set an easy default password?