User paj28

231 votes

Accepted

Why are chips safer than magnetic stripes?

credit-card smartcard

answered Jan 23, 2014 at 13:45

148 votes

Accepted

How safe are password managers like LastPass?

passwords password-management

answered Nov 8, 2013 at 16:31

95 votes

Trying to create safe website where security is handled by the website and not the user

privacy user-tracking

answered Oct 6, 2016 at 19:52

91 votes

Accepted

Company computers for competent developers, how can you deal with them?

virtualization corporate-policy

answered Aug 30, 2016 at 16:06

85 votes

Accepted

Would a CD drive on a driverless car pose a security risk?

malware vehicle

answered Oct 11, 2016 at 13:42

81 votes

Is there a threshold for a password so long it doesn't get any more secure or even becomes insecure?

passwords hash password-cracking

answered Mar 24, 2016 at 14:17

71 votes

Accepted

Why is client-side hashing of a password so uncommon?

authentication passwords hash password-cracking account-security

answered Nov 29, 2016 at 9:39

68 votes

Why can't I just let customers connect directly to my database?

account-security mysql api

answered Apr 17, 2020 at 14:11

66 votes

Accepted

Is a 6 digit numerical password secure enough for online banking?

authentication passwords password-policy banks

answered May 31, 2016 at 21:14

62 votes

Is there any way my password is hashed, if I'm only ever asked to provide 5 out of many characters?

passwords hash

answered Sep 23, 2015 at 10:38

61 votes

Accepted

How practical is it to bruteforce a 10-digit number via URL

brute-force

answered Aug 25, 2016 at 15:26

54 votes

Accepted

How to launch XSS code from an INPUT HTML tag upon page load?

xss html

answered Aug 22, 2015 at 20:00

50 votes

Accepted

Is Java secure for the desktop?

java

answered Sep 17, 2015 at 9:46

49 votes

Accepted

What person should I write a penetration test report as?

penetration-test

answered Jan 27, 2016 at 5:12

49 votes

Why don't browser DNS caches mitigate DDOS attacks on DNS providers?

dns ddos

answered Oct 23, 2016 at 3:37

48 votes

Accepted

What is the benefit of having a cryptographically secure hash algorithm in hashmaps?

hash memory rust

answered Oct 5, 2018 at 12:58

46 votes

Sending passwords to someone remotely

authentication

answered May 22, 2014 at 13:50

43 votes

Should websites be allowed to disable autocomplete on forms or fields?

web-application web-browser html

answered Jan 26, 2014 at 21:13

42 votes

Accepted

avoid hitting DB to authenticate a user on EVERY request in stateless web app architecture?

web-application authentication databases cookies session-management

answered Jan 22, 2014 at 10:54

36 votes

Four-factor authentication

authentication multi-factor

answered Sep 23, 2014 at 15:07

33 votes

Accepted

What can a company do against insiders going rogue and negatively affecting essential infrastructure?

attack-prevention threat-mitigation insider-threats

answered Jul 28, 2016 at 12:25

32 votes

Help! My home PC has been infected by a virus! What do I do now?

malware virus antivirus antimalware virus-removal

answered Oct 4, 2016 at 4:36

30 votes

When do honest people need privacy or anonymity? (e.g. they have nothing to hide)

answered Aug 3, 2015 at 11:47

29 votes

Accepted

Why would properly logging full http requests be bad practice?

http logging

answered Mar 30, 2016 at 15:42

29 votes

Preventing XSS for REST API

xss rest

answered Oct 28, 2013 at 8:44

28 votes

Someone has my ip address and is threatining to find and leak my personal information

ip

answered Sep 24, 2017 at 19:05

27 votes

Why do some internet banks force logout on back button?

web-browser banks

answered Jan 13, 2016 at 15:19

25 votes

How do I report a security vulnerability about a trusted certificate authority?

certificate-authority disclosure ethics

answered Jun 10, 2015 at 15:00

24 votes

Is exploit-free software possible?

vulnerability theory

answered Oct 20, 2019 at 22:28

23 votes

Accepted

Exposing database fields names in HTML

databases injection

answered Jan 7, 2016 at 14:07

Stack Exchange Network

current community

your communities

more stack exchange communities

350 Answers

Why are chips safer than magnetic stripes?

How safe are password managers like LastPass?

Trying to create safe website where security is handled by the website and not the user

Company computers for competent developers, how can you deal with them?

Would a CD drive on a driverless car pose a security risk?

Is there a threshold for a password so long it doesn't get any more secure or even becomes insecure?

Why is client-side hashing of a password so uncommon?

Why can't I just let customers connect directly to my database?

Is a 6 digit numerical password secure enough for online banking?

Is there any way my password is hashed, if I'm only ever asked to provide 5 out of many characters?

How practical is it to bruteforce a 10-digit number via URL

How to launch XSS code from an INPUT HTML tag upon page load?

Is Java secure for the desktop?

What person should I write a penetration test report as?

Why don't browser DNS caches mitigate DDOS attacks on DNS providers?

What is the benefit of having a cryptographically secure hash algorithm in hashmaps?

Sending passwords to someone remotely

Should websites be allowed to disable autocomplete on forms or fields?

avoid hitting DB to authenticate a user on EVERY request in stateless web app architecture?

Four-factor authentication

What can a company do against insiders going rogue and negatively affecting essential infrastructure?

Help! My home PC has been infected by a virus! What do I do now?

When do honest people need privacy or anonymity? (e.g. they have nothing to hide)

Why would properly logging full http requests be bad practice?

Preventing XSS for REST API

Someone has my ip address and is threatining to find and leak my personal information

Why do some internet banks force logout on back button?

How do I report a security vulnerability about a trusted certificate authority?

Is exploit-free software possible?

Exposing database fields names in HTML