user avatar
user avatar
user avatar
paj28
  • Member for 8 years, 10 months
  • Last seen this week
231 votes
Accepted

Why are chips safer than magnetic stripes?

148 votes
Accepted

How safe are password managers like LastPass?

95 votes

Trying to create safe website where security is handled by the website and not the user

91 votes
Accepted

Company computers for competent developers, how can you deal with them?

85 votes
Accepted

Would a CD drive on a driverless car pose a security risk?

81 votes

Is there a threshold for a password so long it doesn't get any more secure or even becomes insecure?

71 votes
Accepted

Why is client-side hashing of a password so uncommon?

68 votes

Why can't I just let customers connect directly to my database?

66 votes
Accepted

Is a 6 digit numerical password secure enough for online banking?

62 votes

Is there any way my password is hashed, if I'm only ever asked to provide 5 out of many characters?

61 votes
Accepted

How practical is it to bruteforce a 10-digit number via URL

54 votes
Accepted

How to launch XSS code from an INPUT HTML tag upon page load?

50 votes
Accepted

Is Java secure for the desktop?

49 votes
Accepted

What person should I write a penetration test report as?

49 votes

Why don't browser DNS caches mitigate DDOS attacks on DNS providers?

48 votes
Accepted

What is the benefit of having a cryptographically secure hash algorithm in hashmaps?

46 votes

Sending passwords to someone remotely

43 votes

Should websites be allowed to disable autocomplete on forms or fields?

42 votes
Accepted

avoid hitting DB to authenticate a user on EVERY request in stateless web app architecture?

36 votes

Four-factor authentication

33 votes
Accepted

What can a company do against insiders going rogue and negatively affecting essential infrastructure?

32 votes

Help! My home PC has been infected by a virus! What do I do now?

30 votes

When do honest people need privacy or anonymity? (e.g. they have nothing to hide)

29 votes
Accepted

Why would properly logging full http requests be bad practice?

29 votes

Preventing XSS for REST API

28 votes

Someone has my ip address and is threatining to find and leak my personal information

27 votes

Why do some internet banks force logout on back button?

25 votes

How do I report a security vulnerability about a trusted certificate authority?

24 votes

Is exploit-free software possible?

23 votes
Accepted

Exposing database fields names in HTML

1
2 3 4 5
12