User David Stratton

25 votes

Can law enforcement track a criminal through dynamic IP address?

answered Jan 21, 2013 at 18:37

23 votes

How do I know a piece of software only does what the author claims?

answered Feb 6, 2013 at 21:35

17 votes

Is there a true alternative to using CAPTCHA images?

answered Jan 23, 2013 at 14:35

16 votes

Hacking computers, scifi or reality

answered Jan 25, 2012 at 16:15

9 votes

Accepted

Prevent cross domain form submission with nonce?

answered Feb 8, 2013 at 14:25

7 votes

Accepted

Is there any sense in using two-step authentication for personal email address?

answered Apr 19, 2013 at 17:42

5 votes

Why do some antivirus programs find infections that others miss?

answered Jan 9, 2013 at 16:52

5 votes

Should sensitive data ever be passed in the query string?

answered Jan 23, 2013 at 20:19

4 votes

How Involved Should a Developer Be in Designing a Security Policy?

answered Jan 25, 2013 at 15:37

4 votes

Accepted

CSRF Countermeasures

answered Jan 7, 2013 at 14:42

4 votes

Bad transactions in an e-commerce system?

answered Jan 14, 2013 at 18:53

4 votes

Accepted

Defense in depth vs low complexity - Balancing point?

answered Jan 17, 2013 at 21:49

4 votes

Accepted

Can change management for PCI compliance be accomplished via simple emails?

answered Feb 1, 2013 at 13:35

3 votes

Accepted

Setting up ASP.NET web application on internet for first time; Are these security measures enough?

answered Jan 10, 2013 at 17:35

3 votes

Proving running code on a website is unchanged

answered Dec 31, 2012 at 17:20

2 votes

How unlikely is it that a Google Doc link is guessed?

answered Jan 21, 2013 at 18:00

2 votes

CMS security issues

answered Jan 22, 2013 at 0:04

2 votes

Accepted

What should I have prepared for a PCI compliance onsite assessment?

answered Jan 29, 2013 at 17:59

2 votes

Windows App Store security

answered Feb 6, 2013 at 22:12

2 votes

Organization like OWASP for network security?

answered Apr 19, 2013 at 18:09

2 votes

File upload vulnerability

answered Mar 7, 2014 at 21:20

1 vote

Does a binary executable have to have some critical plain-text components?

answered Feb 7, 2013 at 17:56

1 vote

Are image uploads also vulnerable to sql injection?

answered Jan 14, 2013 at 18:34

1 vote

Is it necessary to setup a firewall in both PC and router?

answered Jan 21, 2013 at 16:36

1 vote

Accepted

How do you build a secure web application that is also COPPA compliant?

answered Jan 15, 2013 at 22:18

Stack Exchange Network

25 Answers

Can law enforcement track a criminal through dynamic IP address?

How do I know a piece of software only does what the author claims?

Is there a true alternative to using CAPTCHA images?

Hacking computers, scifi or reality

Prevent cross domain form submission with nonce?

Is there any sense in using two-step authentication for personal email address?

Why do some antivirus programs find infections that others miss?

Should sensitive data ever be passed in the query string?

How Involved Should a Developer Be in Designing a Security Policy?

CSRF Countermeasures

Bad transactions in an e-commerce system?

Defense in depth vs low complexity - Balancing point?

Can change management for PCI compliance be accomplished via simple emails?

Setting up ASP.NET web application on internet for first time; Are these security measures enough?

Proving running code on a website is unchanged

How unlikely is it that a Google Doc link is guessed?

CMS security issues

What should I have prepared for a PCI compliance onsite assessment?

Windows App Store security

Organization like OWASP for network security?

File upload vulnerability

Does a binary executable have to have some critical plain-text components?

Are image uploads also vulnerable to sql injection?

Is it necessary to setup a firewall in both PC and router?

How do you build a secure web application that is also COPPA compliant?