Skip to main content
Share Your Experience: Take the 2024 Developer Survey
Gh0stFish's user avatar
Gh0stFish's user avatar
Gh0stFish's user avatar
Gh0stFish
  • Member for 2 years, 9 months
  • Last seen this week
86 votes
Accepted

Does open source "protestware" represent a security risk?

81 votes
Accepted

Why does this attack check the location of the server?

60 votes
Accepted

How could a security control introduce a privacy issue?

54 votes
Accepted

What is the purpose of hiding spam links in some obscure forum posts?

48 votes
Accepted

Is there any security benefit from emailing a "secure link"?

41 votes
Accepted

Why is the absence of a Content-Type header with a HTTP 204 response considered a security vulnerability and what should we do about it?

40 votes

Increasing trust in a downloaded binary

40 votes
Accepted

Is it a good practice to add hard-coded salt to BCrypt passwords?

39 votes

What is the best way to calculate true password entropy for human created passwords?

38 votes

Is it insecure to display the number of characters when users enter a new passphrase?

35 votes
Accepted

Can fingerprint readers be trusted?

34 votes
Accepted

Why create a CSR on my own server to have it signed by a 3rd party?

33 votes
Accepted

In the RoE for a pentest, do you include a list of all tools?

31 votes

What's wrong with the use of a WAF (Web Application Firewall)?

29 votes

Are Cyrillic characters a real threat?

28 votes

Choosing laptop brand for company

24 votes

Why use random characters in passwords?

23 votes

What security risks do you see with wrong OTPs appearing in application logs?

22 votes

What are the risks of desktop personalization on Windows?

21 votes

Is a BitLocker recovery key an unavoidable brute-force attack vulnerability?

21 votes

Showing prefix of token in error message?

19 votes
Accepted

Hash as filename to protect data

19 votes

Is this idea for secure password storage a good one?

19 votes
Accepted

Escalating user privileges on Linux

17 votes

Is it possible to identify a phone model by screenshot stripped of metadata?

15 votes

Why are iframes allowed by default?

15 votes

Why did they stop adding physical "write protect" mechanism?

13 votes

Pros & cons of including requesting IP address in password reset emails?

10 votes

Can 777-characters long passphrase be considered too short?

9 votes

How to track PBKDF2 progress?

1
2 3 4 5