User Xenos

9 votes

Accepted

Why do they put cyrillic letters in phishing email?

answered Jun 28, 2018 at 11:27

7 votes

Accepted

Is there value in changing your password after failed (malicious) login attempts?

answered Jun 28, 2018 at 16:16

5 votes

Why do some web servers still provide information on vendor and version in the HTTP response headers

answered Oct 17, 2019 at 15:10

3 votes

Accepted

Is the "2038 bug" considered as a vulnerability? is it possible to exploit this?

answered Oct 17, 2019 at 15:16

3 votes

Security implications of download attribute

answered Aug 19, 2019 at 8:03

3 votes

Accepted

Generating salt for hash that occurs on server and client

answered Jul 3, 2018 at 12:10

3 votes

Accepted

Bypass this unique XSS filter?

answered Jul 3, 2018 at 12:23

3 votes

Is noreferrer enough to secure links?

answered Jun 16, 2018 at 10:54

2 votes

2FA why not to ask the code before password

answered Apr 10, 2017 at 13:53

2 votes

Cross domain iframe security

answered Apr 7, 2017 at 13:34

2 votes

Accepted

Prevent change of document.location, when injecting the document.location JavaScript command

answered Feb 3, 2017 at 14:22

2 votes

In which cases you should block a user after a certain number of failed attempts?

answered Jul 2, 2018 at 13:53

1 vote

Accepted

How to reverse engineer str_shuffle (PHP) to get its mt_rand outputs

answered Jun 29, 2018 at 16:09

1 vote

If CSRF tokens are embedded in meta tags, how do they offer security?

answered Jul 19, 2018 at 12:54

1 vote

How to extract data using SQL injection on a vulnerable ASP.NET application?

answered Jul 23, 2018 at 8:01

1 vote

Accepted

Why Chrome blocks ajax locally?

answered Jul 24, 2018 at 15:54

1 vote

XSS vulnerability on chat

answered Feb 6, 2017 at 12:44

1 vote

What are the pros and cons of using sha256 to hash a password before passing it to bcrypt?

answered Apr 7, 2017 at 14:03

1 vote

Is MySQL CONCAT with PDO enough to protect LIKEs from SQL injection?

answered Apr 10, 2017 at 8:30

1 vote

How to explain to traditional people why they should upgrade their old Windows XP device?

answered Nov 19, 2019 at 11:15

0 votes

Could you anonymously upload a file on the internet if the threat model was the entire world trying to find your identity after you do so?

answered Nov 19, 2019 at 13:26

0 votes

Accepted

Secure Cookie on HTTP site

answered Oct 17, 2019 at 15:29

0 votes

How to remove malicious code injected into server?

answered Feb 8, 2017 at 9:51

0 votes

Accepted

Is it an security issue to have php change files?

answered Feb 3, 2017 at 14:39

0 votes

What is the proper way to escape bad data from link in javascript against xss

answered Feb 3, 2017 at 17:33

0 votes

How do keyloggers tell it's a password? (And how to fool them.)

answered Aug 5, 2019 at 16:40

Stack Exchange Network

26 Answers

Why do they put cyrillic letters in phishing email?

Is there value in changing your password after failed (malicious) login attempts?

Why do some web servers still provide information on vendor and version in the HTTP response headers

Is the "2038 bug" considered as a vulnerability? is it possible to exploit this?

Security implications of download attribute

Generating salt for hash that occurs on server and client

Bypass this unique XSS filter?

Is noreferrer enough to secure links?

2FA why not to ask the code before password

Cross domain iframe security

Prevent change of document.location, when injecting the document.location JavaScript command

In which cases you should block a user after a certain number of failed attempts?

How to reverse engineer str_shuffle (PHP) to get its mt_rand outputs

If CSRF tokens are embedded in meta tags, how do they offer security?

How to extract data using SQL injection on a vulnerable ASP.NET application?

Why Chrome blocks ajax locally?

XSS vulnerability on chat

What are the pros and cons of using sha256 to hash a password before passing it to bcrypt?

Is MySQL CONCAT with PDO enough to protect LIKEs from SQL injection?

How to explain to traditional people why they should upgrade their old Windows XP device?

Could you anonymously upload a file on the internet if the threat model was the entire world trying to find your identity after you do so?

Secure Cookie on HTTP site

How to remove malicious code injected into server?

Is it an security issue to have php change files?

What is the proper way to escape bad data from link in javascript against xss

How do keyloggers tell it's a password? (And how to fool them.)