Skip to main content
Gh0stFish's user avatar
Gh0stFish's user avatar
Gh0stFish's user avatar
Gh0stFish
  • Member for 2 years, 11 months
  • Last seen this week
85 votes
Accepted

Does open source "protestware" represent a security risk?

81 votes
Accepted

Why does this attack check the location of the server?

60 votes
Accepted

How could a security control introduce a privacy issue?

57 votes
Accepted

A client did an unannounced penetration test on our platform

54 votes
Accepted

What is the purpose of hiding spam links in some obscure forum posts?

52 votes

How to deal with monitoring software on a personal PC used for work?

48 votes
Accepted

Is there any security benefit from emailing a "secure link"?

41 votes
Accepted

Why is the absence of a Content-Type header with a HTTP 204 response considered a security vulnerability and what should we do about it?

40 votes

Increasing trust in a downloaded binary

40 votes

What is the best way to calculate true password entropy for human created passwords?

40 votes
Accepted

Is it a good practice to add hard-coded salt to BCrypt passwords?

38 votes

Is it insecure to display the number of characters when users enter a new passphrase?

35 votes
Accepted

Can fingerprint readers be trusted?

34 votes
Accepted

Why create a CSR on my own server to have it signed by a 3rd party?

33 votes
Accepted

In the RoE for a pentest, do you include a list of all tools?

31 votes

What's wrong with the use of a WAF (Web Application Firewall)?

29 votes

Are Cyrillic characters a real threat?

28 votes

Choosing laptop brand for company

24 votes

Why use random characters in passwords?

23 votes

What security risks do you see with wrong OTPs appearing in application logs?

22 votes

What are the risks of desktop personalization on Windows?

21 votes

Is a BitLocker recovery key an unavoidable brute-force attack vulnerability?

21 votes

Showing prefix of token in error message?

21 votes

Does Event Viewer have any sensitive information like password, or such info?

20 votes

Is this idea for secure password storage a good one?

19 votes
Accepted

Hash as filename to protect data

19 votes
Accepted

Escalating user privileges on Linux

17 votes

Is it possible to identify a phone model by screenshot stripped of metadata?

16 votes

Should order numbers be guessable?

15 votes

Why are iframes allowed by default?

1
2 3 4 5 6