Skip to main content
Share Your Experience: Take the 2024 Developer Survey
Gh0stFish's user avatar
Gh0stFish's user avatar
Gh0stFish's user avatar
  • Member for 2 years, 9 months
  • Last seen this week
86 votes

Does open source "protestware" represent a security risk?

81 votes

Why does this attack check the location of the server?

60 votes

How could a security control introduce a privacy issue?

54 votes

What is the purpose of hiding spam links in some obscure forum posts?

48 votes

Is there any security benefit from emailing a "secure link"?

41 votes

Why is the absence of a Content-Type header with a HTTP 204 response considered a security vulnerability and what should we do about it?

40 votes

Increasing trust in a downloaded binary

40 votes

Is it a good practice to add hard-coded salt to BCrypt passwords?

39 votes

What is the best way to calculate true password entropy for human created passwords?

38 votes

Is it insecure to display the number of characters when users enter a new passphrase?

35 votes

Can fingerprint readers be trusted?

34 votes

Why create a CSR on my own server to have it signed by a 3rd party?

33 votes

In the RoE for a pentest, do you include a list of all tools?

31 votes

What's wrong with the use of a WAF (Web Application Firewall)?

29 votes

Are Cyrillic characters a real threat?

28 votes

Choosing laptop brand for company

24 votes

Why use random characters in passwords?

23 votes

What security risks do you see with wrong OTPs appearing in application logs?

22 votes

What are the risks of desktop personalization on Windows?

21 votes

Is a BitLocker recovery key an unavoidable brute-force attack vulnerability?

21 votes

Showing prefix of token in error message?

19 votes

Hash as filename to protect data

19 votes

Is this idea for secure password storage a good one?

19 votes

Escalating user privileges on Linux

17 votes

Is it possible to identify a phone model by screenshot stripped of metadata?

15 votes

Why are iframes allowed by default?

15 votes

Why did they stop adding physical "write protect" mechanism?

13 votes

Pros & cons of including requesting IP address in password reset emails?

10 votes

Can 777-characters long passphrase be considered too short?

9 votes

How to track PBKDF2 progress?

2 3 4 5