Incerteza
  • Member for 8 years, 2 months
  • Last seen more than 1 year ago
4 answers
122 votes
24k views
58 bookmarks
Is it safe to include an API key in a request's URL?
13 answers
76 votes
29k views
21 bookmarks
Should I allow browsers to remember my passwords and synchronize them?
1 answers
2 votes
866 views
2 bookmarks
How to mitigate the consequences of being tracked by fingerprint2.js?
2 answers
2 votes
1k views
1 bookmarks
Is it vulnerable to let users know their own and other users id from a database?
1 answers
2 votes
878 views
Using Diffie–Hellman key protocol to create a safe secret key
1 answers
1 votes
2k views
Is it safe to keep my KeePassX database on my server or cloud with encryption?
1 answers
1 votes
1k views
1 bookmarks
Hash a secret API key with a random salt instead of sending sending it alone in REST API
1 answers
1 votes
3k views
1 bookmarks
Append or prepend a salt to a password?
6 answers
1 votes
3k views
3 bookmarks
Downloading a file from a server with a secret: in text or binary?
1 answers
1 votes
126 views
Passing a hash of a secret to a server instead of the plain text
2 answers
0 votes
2k views
"1234 1234 XXXX 1234" in a statement from an ATM
1 answers
0 votes
1k views
Encryption key split into parts and stored in different places
2 answers
0 votes
162 views
Activating a user on a website -- why include anything other than an activation code?