Skip to main content
Michael's user avatar
Michael's user avatar
Michael's user avatar
Michael
  • Member for 10 years, 4 months
  • Last seen more than 2 years ago
58 votes
Accepted

Is there anything insecure about Google ReCaptcha?

43 votes
Accepted

How can I see which sites have set the HSTS flag in my browser?

33 votes

Can USB drive infect my PC with malware if I don't allow any autorun.inf to run?

18 votes
Accepted

Is it a security risk to use an unknown web browser?

15 votes

Where to store access and refresh tokens on ASP.NET client web app - calling a REST API

13 votes

Are photographs of fingerprints a security risk?

12 votes
Accepted

Custom Metasploit payload with UAC bypass

12 votes

Difference between Secure Simple Pairing and Secure Connections in Bluetooth?

11 votes
Accepted

Is it possible to force a browser to use http in an ssl enabled (https) website?

10 votes
Accepted

ARP poisoning and port forward together

8 votes
Accepted

Is it safe to ignore DoS attacks on my router?

8 votes

Why is this version of OpenSSL (1.0.1e) not vulnerable to Heartbleed?

7 votes
Accepted

Full Disk Encryption and Network security

7 votes
Accepted

Difference between Bluetooth LE Secure Connections security mode 1 and level 3 and 4?

7 votes

Why should I persist OAuth 2 access tokens along with refresh token

6 votes

Unknown URL shows my website

6 votes
Accepted

Securing passwords for REST Authentication

5 votes
Accepted

SSLstrip attack on HTTPS request

5 votes
Accepted

SIM card - Cryptography

5 votes
Accepted

Do WebGoat style XSS attacks still work?

5 votes
Accepted

Sending OAuth refresh token in email?

5 votes

How to prevent someone guessing the token in a reset password link

4 votes

CSRF Implementation

4 votes

Why there is a signed hash in Certificate request (.csr file)?

3 votes
Accepted

Enabled WPS methods

3 votes

What benefits are there for security architecture being a separate discipline to enterprise architecture?

3 votes

What advantage does the Bloomberg authentication system have over traditional 2 factor?

3 votes

WPA/WPA2 Handshake -- A question on the computation of the MIC

3 votes

What algorithms are used in Bluetooth Secure Simple Pairing LE for authentication, key generation and encryption?

2 votes
Accepted

Cookie + CSRF Token vs OAuth Token for Native Mobile Apps