Skip to main content
mroman's user avatar
mroman's user avatar
mroman's user avatar
mroman
  • Member for 7 years, 9 months
  • Last seen more than 2 years ago
4 votes

Why does this PHP object injection exploit work?

4 votes
Accepted

Recent ESLint hack or how can we protect ourselves from installing malicious npm packages?

3 votes

Whats the actual harm in open directory listing? What can a attacker do here?

3 votes

How to protect our server from brute force attack?

2 votes

Why is it dangerous to open a suspicious email?

2 votes

Why must a ret2libc attack follow the order "system(),exit(),command?

2 votes

Steganography - outguess vs steghide

1 vote

How does the anchor tag (<a>) let you do a stored XSS?

1 vote

Ensuring security of deserializing data using Protobuf-net

1 vote

Explanation of illegal multi-byte encoding leading to XSS

1 vote

Does it matter if an average person has email encryption or not?

1 vote

Is National Insurance number considered for 2 factor authentication

1 vote

Partitioning database to enhance security/anonymity?

1 vote

What is attribute-based authentication?

1 vote
Accepted

Concerns regarding a password manager web app

1 vote

Does having a number in your username make it more secure?

0 votes

Security BY obscurity is horrible. Is security AND obscurity good?

0 votes

Is it possible to crack any SHA1 hashed password

0 votes

Can one prevent stack overflow by storing strings in memory backwards?

0 votes

Can a file named "agreement.execds.pdf" really contain an executable file?

0 votes

Should I run KeePass as administrator?

0 votes

What are the most common username-based password patterns?

0 votes

Why do hackers scan for open ports?

0 votes

How to detect spyware over HTTP?

0 votes

Do hashes contain any of the original file’s data?

0 votes

Per-User Image DRM for Finding a Leaker?

0 votes

Why is it still necessary to block brute-force attacks when passwords hash verification requires significant work?

-1 votes

A computer on the public network I was using was penetrated at a codejam. Am I at risk?

-1 votes

Can an identity provider impersonate me? (Can Facebook post Stack Overflow questions under my name?)

-3 votes

What is the most secure way to store the password on a physical medium (paper, etc)?