Skip to main content
Share Your Experience: Take the 2024 Developer Survey
Ajedi32's user avatar
Ajedi32's user avatar
Ajedi32's user avatar
Ajedi32
  • Member for 10 years, 9 months
  • Last seen this week
28 votes

Implementation of diceware: do I have to simulate dice roll?

24 votes

How will biometrics be a safe way to authenticate users across the internet?

20 votes
Accepted

How do I safely host third-party Javascript code in an iframe?

20 votes

Could SQRL really be as secure as they say?

19 votes

How can I be sure that I am using the real Facebook?

18 votes
Accepted

With password cracking, what is the fastest known password cracking rig in hashes per second?

17 votes

Is this idea for a password manager secure? If so, why doesn't anybody use it?

16 votes
Accepted

What role do hashes play in TLS/SSL certificate validation?

15 votes

Why is it insecure to store the session ID in a cookie directly?

14 votes

Is it safe to store 2FA tokens together with passwords in 1password?

12 votes
Accepted

What’s wrong with in-browser cryptography in 2017?

11 votes
Accepted

Is this code vulnerable to Reflected XSS?

8 votes
Accepted

What are the risks of installing a CA on the same machine as OpenVPN server?

7 votes
Accepted

What is the status of Certificate Transparency?

7 votes
Accepted

What can I do to rely less on certificate authorities?

5 votes

How does Google Maps know where I am, when I'm using a VPN?

5 votes
Accepted

How bad is to render html from cookies?

5 votes

Roll your own encryption - with a twist

5 votes
Accepted

Is there greater risk to browsing websites with invalid certificates than websites with no certificate at all?

5 votes
Accepted

Does the length of each word of a passphrase matter?

5 votes
Accepted

Why can't bypass SOP using "src" attribut in script tag?

5 votes

Chrome SSL Warning: "You cannot proceed because the website operator has requested heightened security for this domain. "

4 votes
Accepted

Is cache-control: no-cache enough for sensitive information like bank accounts, etc.?

4 votes

Why bother with certain types of 2fa if they can be easily bypassed?

4 votes
Accepted

Why does Chrome require Secure for SameSite=None cookies?

4 votes

Is it OK to not update devdependencies?

4 votes

Can a nation-state adversary perform a MITM attack by compelling a CA to issue them with fake certs?

4 votes

standards for regulation of intermediate Certificate authority

3 votes

What is Security Theater?

3 votes
Accepted

CSP: upgrade-insecure-requests - what happens with https-incompatible ressources?