User valentinas

16 votes

Accepted

Should Content in <noscript> Blocks Be Escaped

answered Jan 13, 2014 at 20:09

15 votes

Accepted

Is Vimium (Chrome extension) really safe?

answered Nov 1, 2013 at 3:01

10 votes

Accepted

security reviews of third party code

answered Jul 30, 2014 at 22:54

7 votes

Is there ever a good reason _not_ to use TLS/SSL?

answered Aug 7, 2014 at 3:47

6 votes

Accepted

Trace facebook user ip. Is it even possible?

answered Dec 6, 2013 at 2:08

5 votes

Accepted

How to implement password reset functionality without becoming susceptible to cross-domain referer leakage?

answered Oct 6, 2014 at 20:06

5 votes

How do credit cards with chip+pin securely allow recurring transactions?

answered Jul 24, 2014 at 4:37

3 votes

Accepted

Is it legal to "use" security vulnerabilities

answered Jul 24, 2014 at 22:20

3 votes

Are Internet speed tests an attack vector?

answered Feb 18, 2014 at 23:59

2 votes

Exploiting through a filtered port

answered Mar 10, 2014 at 20:31

2 votes

Is this anti-forgery scheme secure?

answered Mar 20, 2014 at 20:37

2 votes

Accepted

Implementing a product key system?

answered Mar 24, 2014 at 20:57

2 votes

How to prevent accessing secure cross-domain data store

answered Jul 30, 2014 at 4:23

2 votes

Browser fuzzing with Windbg

answered Aug 3, 2014 at 22:21

1 vote

Are there any web services which use any other form of authentication, than passwords?

answered Oct 25, 2013 at 1:05

1 vote

How to stop gmail spam after connecting to public wifi without VPN on Android?

answered Aug 7, 2014 at 21:56

1 vote

Someone knows about online labs?

answered Mar 30, 2014 at 20:42

1 vote

Is it insecure to send an email from a PHP script to an email address on the same domain?

answered Feb 27, 2014 at 22:13

1 vote

Do I need to password protect [web] services that are only accessible internally?

answered Dec 22, 2013 at 20:59

Stack Exchange Network

19 Answers

Should Content in <noscript> Blocks Be Escaped

Is Vimium (Chrome extension) really safe?

security reviews of third party code

Is there ever a good reason _not_ to use TLS/SSL?

Trace facebook user ip. Is it even possible?

How to implement password reset functionality without becoming susceptible to cross-domain referer leakage?

How do credit cards with chip+pin securely allow recurring transactions?

Is it legal to "use" security vulnerabilities

Are Internet speed tests an attack vector?

Exploiting through a filtered port

Is this anti-forgery scheme secure?

Implementing a product key system?

How to prevent accessing secure cross-domain data store

Browser fuzzing with Windbg

Are there any web services which use any other form of authentication, than passwords?

How to stop gmail spam after connecting to public wifi without VPN on Android?

Someone knows about online labs?

Is it insecure to send an email from a PHP script to an email address on the same domain?

Do I need to password protect [web] services that are only accessible internally?