Kate's user avatar
Kate's user avatar
Kate's user avatar
Kate
  • Member for 7 years, 6 months
  • Last seen this week
92 votes
Accepted

How can we eliminate passwords given the problems with biometric authentication?

83 votes

How to protect my code from “insider” threats when hiring my first employee?

82 votes
Accepted

How can I prove to users that my obfuscated code is not malicious without unobfuscating?

52 votes
Accepted

Domain about to expire. Afraid that new owners will spread malware

48 votes

As a company, how can we prevent penetration testers from compromising our system?

46 votes
Accepted

Is this safe to display MySQL query error in webpage if something went wrong?

33 votes

Best guidance for allowing users to connect via HTTP in case of a certificate error

30 votes

What is the frequency of open security bugs in an operating system with increasing age?

27 votes

Software vendor refuses to fix security vulnerability - what to do?

25 votes

Should a bank/financial service use external URL shortener services?

23 votes

Is this email asking me to sent them $100 for details on a security flaw in my website a scam?

22 votes

Storing weakness level of passwords

15 votes

Enabling a user to revert a hacked change in their email

13 votes

In the RoE for a pentest, do you include a list of all tools?

12 votes
Accepted

Is a firewall enough of a security measure for an Ubuntu server that hosts a website?

12 votes

Safe storage for multiple passwords for multiple accounts

10 votes

Web server attack methodology: why bother with manual tests if vulnerability scanner does it all?

9 votes

Is PGP for user authentication a good idea?

9 votes

What is the suggested best practice for changing a user's email address?

8 votes

Why are stored procedures and prepared statements the preferred modern methods for preventing SQL Injection over mysql real escape string() function

6 votes

Nmap scan what does STATE=filtered mean?

6 votes

Is it considered bad practice to use company name as part of an SSID?

5 votes
Accepted

Do I need fail2ban if I have a strong password?

5 votes

Why are there different pentest phases/stages/methodologies?

5 votes

Obfuscating HTTP Error Codes

4 votes
Accepted

Receiving lots of spam after registering a new domain on GoDaddy

4 votes
Accepted

Which Extensible Provisioning Protocol (EPP) status-values provide sufficient protection against domain hijacking?

4 votes
Accepted

Is it possible to scan the whole IP range to find a domain behind the CDN?

3 votes
Accepted

Yubikey PGP migration

3 votes

What are the potential security risks of using a commercial VPN service?

1
2 3 4 5 6