User Michael

58 votes

Accepted

Is there anything insecure about Google ReCaptcha?

answered Sep 28, 2015 at 12:42

40 votes

Accepted

How can I see which sites have set the HSTS flag in my browser?

answered Jul 2, 2015 at 12:23

33 votes

Can USB drive infect my PC with malware if I don't allow any autorun.inf to run?

answered Nov 26, 2015 at 12:23

18 votes

Accepted

Is it a security risk to use an unknown web browser?

answered Oct 9, 2014 at 11:47

15 votes

Where to store access and refresh tokens on ASP.NET client web app - calling a REST API

answered Sep 21, 2015 at 18:59

13 votes

Are photographs of fingerprints a security risk?

answered Nov 25, 2014 at 16:48

12 votes

Accepted

Custom Metasploit payload with UAC bypass

answered Jul 9, 2015 at 16:04

11 votes

Accepted

Is it possible to force a browser to use http in an ssl enabled (https) website?

answered Oct 24, 2014 at 11:26

11 votes

Difference between Secure Simple Pairing and Secure Connections in Bluetooth?

answered Oct 24, 2016 at 10:03

10 votes

Accepted

ARP poisoning and port forward together

answered Aug 12, 2015 at 6:52

8 votes

Accepted

Is it safe to ignore DoS attacks on my router?

answered Nov 21, 2014 at 16:48

8 votes

Why is this version of OpenSSL (1.0.1e) not vulnerable to Heartbleed?

answered Sep 29, 2015 at 11:36

7 votes

Accepted

Full Disk Encryption and Network security

answered Jan 7, 2016 at 9:07

7 votes

Accepted

Difference between Bluetooth LE Secure Connections security mode 1 and level 3 and 4?

answered Nov 6, 2016 at 11:00

7 votes

Why should I persist OAuth 2 access tokens along with refresh token

answered Nov 8, 2014 at 10:42

6 votes

Unknown URL shows my website

answered Oct 24, 2014 at 14:04

6 votes

Accepted

Securing passwords for REST Authentication

answered Apr 14, 2014 at 7:56

5 votes

Accepted

SSLstrip attack on HTTPS request

answered May 19, 2015 at 10:18

5 votes

Accepted

SIM card - Cryptography

answered Feb 20, 2015 at 13:52

5 votes

Accepted

Do WebGoat style XSS attacks still work?

answered Mar 2, 2015 at 8:02

5 votes

Accepted

Sending OAuth refresh token in email?

answered Sep 30, 2015 at 14:20

5 votes

How to prevent someone guessing the token in a reset password link

answered Sep 10, 2015 at 8:49

4 votes

CSRF Implementation

answered Feb 3, 2015 at 11:24

4 votes

Why there is a signed hash in Certificate request (.csr file)?

answered Feb 16, 2015 at 16:53

3 votes

Accepted

Enabled WPS methods

answered Sep 8, 2015 at 10:06

3 votes

What benefits are there for security architecture being a separate discipline to enterprise architecture?

answered Dec 22, 2014 at 12:59

3 votes

What advantage does the Bloomberg authentication system have over traditional 2 factor?

answered Oct 5, 2015 at 4:35

3 votes

WPA/WPA2 Handshake -- A question on the computation of the MIC

answered Aug 24, 2016 at 6:33

3 votes

What algorithms are used in Bluetooth Secure Simple Pairing LE for authentication, key generation and encryption?

answered Nov 8, 2016 at 7:15

2 votes

Accepted

Cookie + CSRF Token vs OAuth Token for Native Mobile Apps

answered Oct 18, 2016 at 7:53

Stack Exchange Network

56 Answers

Is there anything insecure about Google ReCaptcha?

How can I see which sites have set the HSTS flag in my browser?

Can USB drive infect my PC with malware if I don't allow any autorun.inf to run?

Is it a security risk to use an unknown web browser?

Where to store access and refresh tokens on ASP.NET client web app - calling a REST API

Are photographs of fingerprints a security risk?

Custom Metasploit payload with UAC bypass

Is it possible to force a browser to use http in an ssl enabled (https) website?

Difference between Secure Simple Pairing and Secure Connections in Bluetooth?

ARP poisoning and port forward together

Is it safe to ignore DoS attacks on my router?

Why is this version of OpenSSL (1.0.1e) not vulnerable to Heartbleed?

Full Disk Encryption and Network security

Difference between Bluetooth LE Secure Connections security mode 1 and level 3 and 4?

Why should I persist OAuth 2 access tokens along with refresh token

Unknown URL shows my website

Securing passwords for REST Authentication

SSLstrip attack on HTTPS request

SIM card - Cryptography

Do WebGoat style XSS attacks still work?

Sending OAuth refresh token in email?

How to prevent someone guessing the token in a reset password link

CSRF Implementation

Why there is a signed hash in Certificate request (.csr file)?

Enabled WPS methods

What benefits are there for security architecture being a separate discipline to enterprise architecture?

What advantage does the Bloomberg authentication system have over traditional 2 factor?

WPA/WPA2 Handshake -- A question on the computation of the MIC

What algorithms are used in Bluetooth Secure Simple Pairing LE for authentication, key generation and encryption?

Cookie + CSRF Token vs OAuth Token for Native Mobile Apps