Skip to main content
Eric G's user avatar
Eric G's user avatar
Eric G's user avatar
Eric G
  • Member for 12 years, 9 months
  • Last seen more than 1 year ago
33 votes
Accepted

Is a web application firewall necessary if the application is secure?

25 votes
Accepted

Is there a use-case that renders the password manager obsolete?

20 votes
Accepted

What are the differences between dictionary attack and brute force attack?

14 votes

Passwords being sent in clear text due to users' mistake in typing it in the username field

13 votes
Accepted

Current best practices to prevent persistent XSS attacks

13 votes
Accepted

remote desktop connection to a potentially compromised machine

12 votes

Is it dangerous to publicly share ciphertext?

12 votes
Accepted

What threats come from CRLF in email generation?

11 votes
Accepted

How to prevent attacks against client side validations?

10 votes

Is it proper to be informed that I entered an old password

10 votes
Accepted

Is it ok to cut some digits from the front-face of a credit/debit card?

10 votes
Accepted

How general should a vulnerability be to be eligible for a CVE?

9 votes
Accepted

Enable RDP for internal network only

9 votes

My credit union is reducing its maximum password length to 10 characters

9 votes
Accepted

Help understanding basic user authentication with salts and hashing

8 votes
Accepted

Voice Call Safety

8 votes
Accepted

how can an attacker use a fake temp file to compromise a program?

7 votes

Prevent unauthorized workstations from joining a Windows Domain

7 votes

How can I spoof the Mimetype of a file upload?

7 votes

How can you prevent employees of your company from creating valid ssl certs?

7 votes
Accepted

Is it wise to log failed login attempts of non-existing accounts?

7 votes
Accepted

Techniques for fingerprinting a web based content management system (CMS)

7 votes

Can ISP block HTTPS selectively?

7 votes
Accepted

How does Dumpper program get default WPS without bruteforcing them?

6 votes

Is it a good idea to use non-Latin Unicode characters in a password?

6 votes
Accepted

Is it possible and does it make sense to sign an E-mail with PGP and S/MIME?

6 votes

Why are ransom attacks successful?

6 votes

Realistically, how much added security does having a passphrase on a ssh key have?

6 votes

What is the best way to protect a captive portal againt MAC spoofing

6 votes

Is the ftp server insecure, or someone is sniffing our ftp passwords?

1
2 3 4 5
9