user avatar
user avatar
user avatar
hax
  • Member for 6 years
  • Last seen more than a month ago
98 votes

My email address is being used to enroll for online services. Should I be concerned?

57 votes
Accepted

Can a malicious actor lock the real user out by deliberately trying incorrect passwords every X minutes?

21 votes
Accepted

Is the image of the signature considered PII?

16 votes

How do you capture ALL the traffic from an Android app?

16 votes

Did I participate in the recent DDoS attacks on Dyn's DNS service?

12 votes
Accepted

Is it a good practice to connect to my IP camera using a VPN?

11 votes

Poor error handling source code review

6 votes

Is it dangerous to use default router admin passwords if only trusted users are allowed on the network?

4 votes

Could IOT Botnets be Stopped by Static IP addressing the Devices?

4 votes

Is ASLR useless in preventing attacks such as return-to-libc in linux?

4 votes

One computer on our network was hacked and stole hundreds of accounts on different websites - what are correct steps to take?

4 votes

Why is it bad to connect internal systems to the Internet?

3 votes
Accepted

Preventing Basic Directory Traversal Attack in Linux application

3 votes

What should I do with the hidden/disabled Administrator account?

3 votes

How Audio steganography is called secure?

3 votes
Accepted

Where are Lamport OTP used?

3 votes
Accepted

Why does moving my mouse really quickly make recaptcha pass quicker?

3 votes

Does a hardware generated pin plus SMS verification count as two factor authentication?

2 votes

Are OpenPGP-encrypted files encrypted symmetrically or with a private key?

2 votes

Are random URLs a safe way to protect profile photos?

2 votes

Why can't scanners usually detect stored XSS? Is there a way to automate the detection of stored (persistent) xss,?

2 votes

Is Opera on Android Causing a Vuln?

2 votes
Accepted

Confidentiality and Integrity violation in database security

2 votes

Can I prevent XSS attacks with MySQL REPLACE function?

2 votes

Spoofing a message

2 votes

Why isn't Amazon using a NONCE for REST Authentication?

2 votes

How can I limit the information (metadata) that is being sent to Google from an Android Phone?

2 votes

What kind of certificate to be used to consume web services?

2 votes

Is Google Play enough to protect an outdated device?

2 votes
Accepted

WAF or Firewall