User paj28

230 votes

Accepted

Why are chips safer than magnetic stripes?

answered Jan 23, 2014 at 13:45

150 votes

Accepted

How safe are password managers like LastPass?

answered Nov 8, 2013 at 16:31

95 votes

Trying to create safe website where security is handled by the website and not the user

answered Oct 6, 2016 at 19:52

92 votes

Accepted

Company computers for competent developers, how can you deal with them?

answered Aug 30, 2016 at 16:06

85 votes

Accepted

Would a CD drive on a driverless car pose a security risk?

answered Oct 11, 2016 at 13:42

81 votes

Is there a threshold for a password so long it doesn't get any more secure or even becomes insecure?

answered Mar 24, 2016 at 14:17

77 votes

Accepted

Why is client-side hashing of a password so uncommon?

answered Nov 29, 2016 at 9:39

69 votes

Why can't I just let customers connect directly to my database?

answered Apr 17, 2020 at 14:11

66 votes

Accepted

Is a 6 digit numerical password secure enough for online banking?

answered May 31, 2016 at 21:14

62 votes

Is there any way my password is hashed, if I'm only ever asked to provide 5 out of many characters?

answered Sep 23, 2015 at 10:38

61 votes

Accepted

How practical is it to bruteforce a 10-digit number via URL

answered Aug 25, 2016 at 15:26

58 votes

Accepted

How to launch XSS code from an INPUT HTML tag upon page load?

answered Aug 22, 2015 at 20:00

50 votes

Accepted

Is Java secure for the desktop?

answered Sep 17, 2015 at 9:46

49 votes

Accepted

What person should I write a penetration test report as?

answered Jan 27, 2016 at 5:12

49 votes

Why don't browser DNS caches mitigate DDOS attacks on DNS providers?

answered Oct 23, 2016 at 3:37

48 votes

Accepted

What is the benefit of having a cryptographically secure hash algorithm in hashmaps?

answered Oct 5, 2018 at 12:58

46 votes

Sending passwords to someone remotely

answered May 22, 2014 at 13:50

43 votes

Should websites be allowed to disable autocomplete on forms or fields?

answered Jan 26, 2014 at 21:13

42 votes

Accepted

avoid hitting DB to authenticate a user on EVERY request in stateless web app architecture?

answered Jan 22, 2014 at 10:54

36 votes

Four-factor authentication

answered Sep 23, 2014 at 15:07

33 votes

Accepted

What can a company do against insiders going rogue and negatively affecting essential infrastructure?

answered Jul 28, 2016 at 12:25

32 votes

Help! My home PC has been infected by a virus! What do I do now?

answered Oct 4, 2016 at 4:36

31 votes

Accepted

Why would properly logging full http requests be bad practice?

answered Mar 30, 2016 at 15:42

30 votes

When do honest people need privacy or anonymity? (e.g. they have nothing to hide)

answered Aug 3, 2015 at 11:47

30 votes

Preventing XSS for REST API

answered Oct 28, 2013 at 8:44

28 votes

Someone has my ip address and is threatining to find and leak my personal information

answered Sep 24, 2017 at 19:05

27 votes

Why do some internet banks force logout on back button?

answered Jan 13, 2016 at 15:19

25 votes

How do I report a security vulnerability about a trusted certificate authority?

answered Jun 10, 2015 at 15:00

24 votes

Is exploit-free software possible?

answered Oct 20, 2019 at 22:28

23 votes

Accepted

Exposing database fields names in HTML

answered Jan 7, 2016 at 14:07

Stack Exchange Network

358 Answers

Why are chips safer than magnetic stripes?

How safe are password managers like LastPass?

Trying to create safe website where security is handled by the website and not the user

Company computers for competent developers, how can you deal with them?

Would a CD drive on a driverless car pose a security risk?

Is there a threshold for a password so long it doesn't get any more secure or even becomes insecure?

Why is client-side hashing of a password so uncommon?

Why can't I just let customers connect directly to my database?

Is a 6 digit numerical password secure enough for online banking?

Is there any way my password is hashed, if I'm only ever asked to provide 5 out of many characters?

How practical is it to bruteforce a 10-digit number via URL

How to launch XSS code from an INPUT HTML tag upon page load?

Is Java secure for the desktop?

What person should I write a penetration test report as?

Why don't browser DNS caches mitigate DDOS attacks on DNS providers?

What is the benefit of having a cryptographically secure hash algorithm in hashmaps?

Sending passwords to someone remotely

Should websites be allowed to disable autocomplete on forms or fields?

avoid hitting DB to authenticate a user on EVERY request in stateless web app architecture?

Four-factor authentication

What can a company do against insiders going rogue and negatively affecting essential infrastructure?

Help! My home PC has been infected by a virus! What do I do now?

Why would properly logging full http requests be bad practice?

When do honest people need privacy or anonymity? (e.g. they have nothing to hide)

Preventing XSS for REST API

Someone has my ip address and is threatining to find and leak my personal information

Why do some internet banks force logout on back button?

How do I report a security vulnerability about a trusted certificate authority?

Is exploit-free software possible?

Exposing database fields names in HTML