Skip to main content
paj28's user avatar
paj28's user avatar
paj28's user avatar
paj28
  • Member for 10 years, 8 months
  • Last seen this week
51 votes
9 answers
11k views

Can users make use of a password manager when banks tell them never to write passwords down?

32 votes
2 answers
4k views

Can client-side hashing reduce the denial-of-service risk with slow hashes?

26 votes
5 answers
4k views

Is unauthorised deletion an integrity or availability issue?

20 votes
2 answers
18k views

Access-control-allow-origin: * with a bearer token

17 votes
2 answers
3k views

What is the impact of the reported weak IV in 7 Zip?

16 votes
1 answer
17k views

Preventing Server-Side Request Forgeries in Java

15 votes
4 answers
8k views

How to build a hacking challenge that uses XSS?

12 votes
1 answer
9k views

In what situations can element.setAttribute allow XSS?

11 votes
4 answers
17k views

A company has requested scans of identity documents. What should I do?

11 votes
4 answers
2k views

Defending against DoS via product reservation

8 votes
3 answers
6k views

Pros & cons of including requesting IP address in password reset emails?

8 votes
3 answers
30k views

How to bypass .Net 4.5 request validation, for an XSS attack?

8 votes
2 answers
1k views

What are the new security features in Windows 10?

7 votes
2 answers
733 views

Does randomness prevent collision attacks?

7 votes
2 answers
885 views

Vulnerable web sockets application for training

7 votes
3 answers
6k views

How to avoid referer information leakage during password reset

7 votes
2 answers
190 views

Have there been successful class action lawsuits due to infosec breaches?

7 votes
4 answers
10k views

How to securely set a cookie on another subdomain?

6 votes
2 answers
618 views

Can Silicon Secured Memory prevent buffer overruns?

6 votes
5 answers
2k views

How can two-man control be implemented efficiently?

6 votes
3 answers
9k views

Should anti-virus detect metasploit payloads?

5 votes
5 answers
1k views

Is there a simple and highly secure office suite?

5 votes
4 answers
2k views

Could technical controls prevent vehicle ramming attacks?

5 votes
1 answer
803 views

What questions are useful to scope a mobile app pen test?

5 votes
1 answer
446 views

Are there any proposals for email verification without a confirmation email?

4 votes
2 answers
1k views

Do browsers have a defence against CORS from internet to intranet sites?

4 votes
2 answers
1k views

How to configure Chrome to stop external websites accessing my router?

4 votes
1 answer
373 views

Does SSH authorized_keys violate the principle of "re-authenticate before password change"?

3 votes
1 answer
250 views

Helping developers find logic and authorisation flaws

3 votes
1 answer
2k views

How to exfiltrate data over remote desktop