Skip to main content
paj28's user avatar
paj28's user avatar
paj28's user avatar
  • Member for 10 years, 8 months
  • Last seen this week
229 votes

Why are chips safer than magnetic stripes?

151 votes

How safe are password managers like LastPass?

95 votes

Trying to create safe website where security is handled by the website and not the user

91 votes

Company computers for competent developers, how can you deal with them?

84 votes

Would a CD drive on a driverless car pose a security risk?

80 votes

Is there a threshold for a password so long it doesn't get any more secure or even becomes insecure?

77 votes

Why is client-side hashing of a password so uncommon?

69 votes

Why can't I just let customers connect directly to my database?

66 votes

Is a 6 digit numerical password secure enough for online banking?

62 votes

Is there any way my password is hashed, if I'm only ever asked to provide 5 out of many characters?

61 votes

How practical is it to bruteforce a 10-digit number via URL

60 votes

How to launch XSS code from an INPUT HTML tag upon page load?

50 votes

Is Java secure for the desktop?

49 votes

Why don't browser DNS caches mitigate DDOS attacks on DNS providers?

48 votes

What person should I write a penetration test report as?

48 votes

What is the benefit of having a cryptographically secure hash algorithm in hashmaps?

46 votes

Sending passwords to someone remotely

43 votes

Should websites be allowed to disable autocomplete on forms or fields?

42 votes

avoid hitting DB to authenticate a user on EVERY request in stateless web app architecture?

36 votes

Four-factor authentication

33 votes

What can a company do against insiders going rogue and negatively affecting essential infrastructure?

32 votes

Help! My home PC has been infected by a virus! What do I do now?

32 votes

Why would properly logging full http requests be bad practice?

30 votes

When do honest people need privacy or anonymity? (e.g. they have nothing to hide)

30 votes

Preventing XSS for REST API

28 votes

Someone has my ip address and is threatining to find and leak my personal information

26 votes

Why do some internet banks force logout on back button?

25 votes

How do I report a security vulnerability about a trusted certificate authority?

24 votes

Is exploit-free software possible?

23 votes

Exposing database fields names in HTML

2 3 4 5