Steffen Ullrich's user avatar
Steffen Ullrich's user avatar
Steffen Ullrich's user avatar
Steffen Ullrich
  • Member for 8 years, 8 months
  • Last seen this week
480 votes

SQL injection is 17 years old. Why is it still around?

187 votes
Accepted

Why do phishing e-mails use faked e-mail addresses instead of the real one?

160 votes

Should I be worried of tracking domains on a banking website?

138 votes
Accepted

Why should browser security be prioritized?

133 votes
Accepted

If malware does not run in a VM why not make everything a VM?

127 votes
Accepted

Is it a security vulnerability to tell a user what input characters are valid/invalid?

125 votes

Why do I hear about so many Java insecurities? Are other languages more secure?

114 votes
Accepted

What is the relationship between "SHA-2" and "SHA-256"

113 votes
Accepted

How resistant are barcodes and QR-codes against attempts to change stored data?

108 votes
Accepted

How can a company ensure cybercriminals destroy hacked data after payment?

107 votes
Accepted

Known strings to have the same MD5 hash, not colliding in real life?

103 votes
Accepted

Storing weakness level of passwords

103 votes

Possible reason for displaying two different websites on single domain?

101 votes
Accepted

What are the security risks of logging the hash of rejected passwords?

101 votes
Accepted

Why is a link in an email more dangerous than a link from a web search?

96 votes
Accepted

Is a sha256 hash of a unix timestamp a strong password

93 votes
Accepted

Security implication if android app can be installed on emulator

92 votes
Accepted

Unusual mail headers show evidence of MTA attack. Have I been pwned?

92 votes
Accepted

What does "in-house hash function" mean?

85 votes
Accepted

How to mitigate Meltdown in Docker images?

85 votes

Is it safe to use Dropbox in its present state?

82 votes

How does the log4shell vulnerability work?

82 votes
Accepted

Why is iPhone's internal storage so hard to crack/decrypt?

79 votes
Accepted

Does FTPS (FTP+S) offer better security than SFTP on the server side?

74 votes

Can I get a public key from an RSA private key?

74 votes

Why do HTTPS requests include the host name in clear text?

73 votes
Accepted

How can we secure communication of an unchangeable app (Zoom)?

73 votes

Why do security experts like Snowden use email services like Lavabit and Hushmail rather than self-hosted email?

73 votes
Accepted

Is it safe to upload & scan personal files on VirusTotal?

72 votes

Why wasn't the KRACK exploit discovered sooner?

1
2 3 4 5
113