ste-fu's user avatar
ste-fu's user avatar
ste-fu's user avatar
ste-fu
  • Member for 7 years, 3 months
  • Last seen more than a week ago
  • Manchester, UK
26 votes

Why is Mother’s Maiden Name still used as a security question?

6 votes

What actions should I, as an end user, take in response to EFAIL?

5 votes

Is auth with a number of memorable questions better than regular password auth?

3 votes

How can I prevent requests from the browser console while still using ajax?

3 votes
Accepted

Multiple CSRs from the same private key

3 votes

Is a second, "old" (dumb) phone dedicated just to receiving bank tokens as safe as "modern" (smart) phone?

2 votes
Accepted

What threat model implies any benefit to drug dealers using candy bar dumb phones for business with iPhones for personal use?

2 votes
Accepted

Limiting database lookups by token metadata

2 votes

Security for KeePass Emergencey Sheet

2 votes

How can Draytek products not be affected by KRACK as they claim?

2 votes

What is pervasive encryption?

2 votes

Are smartphone apps theoretically capable of detecting what a user is looking at?

2 votes
Accepted

Can I store government ID numbers according to the PCI DSS?

2 votes

Would user workstations be considered part of the PCI-DSS CDE when collecting cardholder data using a secure portal

2 votes

PCI DSS compliance on shopify using the client's payment processor

2 votes

Should an access token reflect the current user roles?

1 vote

What does the message mean and is it not safe to pay online at this website?

1 vote

Secure email hosting service for a law firm

1 vote

How effective is a basic password modification algorithm compared to password reuse

1 vote

Are Salt strings stored by application?

1 vote
Accepted

Can APK's installed from unknown sources without special permission be considered safe?

1 vote

Good method to store user content encrypted without storing the user's key in plaintext?

1 vote
Accepted

Is the following scheme for Google OAuth2 authentication and authorization satisfactory and secure?

1 vote

How to know if an ASP web page is vulnerable to SQL injection?

1 vote
Accepted

localStorage vs. HTTP-Only Cookies + XSRF: Is either better when it comes to XSS?

1 vote

How to handle credit card information on my server

1 vote

Secure flag for ASPXAUTH Cookie in MVC

1 vote
Accepted

Is CBC mode for AES still safe to use in 2018?

1 vote

If a password repeats a sequence of characters, does it become easier to crack?

0 votes

Is using WebAuthn alone considered as two factor authentication?