Skip to main content
allo's user avatar
allo's user avatar
allo's user avatar
allo
  • Member for 8 years, 1 month
  • Last seen more than a week ago
76 votes
Accepted

Can an identity provider impersonate me? (Can Facebook post Stack Overflow questions under my name?)

28 votes

Why do some web servers still provide information on vendor and version in the HTTP response headers

18 votes

How would disabling IPv6 make a server any more secure?

11 votes

Should I be concerned about strange, new iPhone app appearing after repair?

10 votes

Can a VPN Provider MitM my SSL traffic without me noticing?

9 votes

Preventing Javascript in a browser from connecting to servers

9 votes

Should I let my child's school have access to my kid's personal laptop?

8 votes

Why is root security enforced but $HOME typically unprotected?

7 votes

Can "Accept cookie" button in a website be malicious?

6 votes

Is this a secure approach to store a master password?

5 votes

How do hosting providers prevent the compromise of one website from causing the compromise of another one?

5 votes

What security risks are there in allowing someone to upload PHP scripts?

5 votes

Caching personal data: GDPR

5 votes

Why is Math.random() not designed to be cryptographically secure?

4 votes

How is Facebook not considered spyware?

4 votes
Accepted

How do short lived certificates increase security?

4 votes

Is a Linux live CD safe? Password is known

4 votes

Are randomly-generated passwords starting with "a" less secure?

3 votes
Accepted

Can malware spread through HDMI, Display Port or USB

3 votes

How resistant are barcodes and QR-codes against attempts to change stored data?

3 votes
Accepted

How can the validity and safety of a software library be checked?

3 votes

Let's Encrypt for intranet websites?

3 votes
Accepted

Does a two-factor authentication dongle (OTP) which is always inserted in MacBook add a security benefit?

3 votes

WireGuard: what's wrong with this automatic IP assignment

3 votes

Double signature with GPG, only validate one key

3 votes

Is SSL/TLS pointless for IRC?

3 votes

Does a CSRF cookie need to be HttpOnly?

3 votes

Is Docker more secure than VMs or bare metal?

3 votes

How secure is Chrome storing a password?

2 votes

Is there a security advantage or risk in removing disabled user accounts?