User PiTheNumber

147 votes

Is it possible the person sitting across from me at Starbucks was trying to hack my laptop?

answered Dec 15, 2014 at 10:26

129 votes

This JavaScript code is injected on my hotel Wi-Fi: should I be worried?

answered Jul 14, 2014 at 13:25

75 votes

Accepted

Is SQL injection possible with LIMIT?

answered Dec 23, 2014 at 13:11

38 votes

Should I be afraid of biometric IDs?

answered Apr 17, 2015 at 9:36

23 votes

Accepted

Storing plaintext passwords for cameras - Security concerns?

answered Jan 8, 2015 at 15:14

14 votes

Accepted

Break the popularity contest crypto

answered Jul 28, 2014 at 9:13

13 votes

Accepted

Protect against POST //cgi-bin/php attacks?

answered Dec 6, 2013 at 10:44

6 votes

Is "password knocking" a good idea?

answered Feb 19, 2015 at 12:12

4 votes

Is it legal to start a private website for you and your friends to hack?

answered Mar 12, 2015 at 9:37

4 votes

Any problems with scrypt yet?

answered Jul 2, 2015 at 7:51

4 votes

How to use a stolen cookie?

answered Oct 21, 2014 at 10:43

4 votes

Accepted

Can webpages using the Google plus button get my name?

answered Jun 13, 2014 at 13:55

3 votes

One time passwords using Mobile phones

answered Sep 17, 2014 at 7:53

3 votes

Unexpected emails have been sent - do I need to wipe my Android?

answered Oct 6, 2014 at 7:27

3 votes

Accepted

Security through obscurity - "https requests" are safe?

answered Nov 5, 2014 at 13:11

3 votes

JavaScript Injection using Man in the Middle Attack

answered Nov 10, 2014 at 12:21

2 votes

Intrusion Detected - OS Attack

answered Jul 24, 2014 at 7:21

1 vote

Convincing my manager to use salts

answered Jun 24, 2014 at 11:04

1 vote

How do I secure Apache against the Bash Shellshock vulnerability?

answered Sep 25, 2014 at 10:06

1 vote

Accepted

Is limiting access to a web script with .htaccess secure enough when that script can run arbitrary commands?

answered Sep 26, 2014 at 7:26

1 vote

How do exploits and payloads work together?

answered Jun 13, 2014 at 12:19

1 vote

Is there something similar to pseudorandom generators but in the opposite direction?

answered Jul 25, 2014 at 14:36

1 vote

My site was hacked and the attacker got data from the config file

answered Jan 5, 2015 at 14:01

1 vote

Passing session id in query string to maintain state in third party iframe - good practice?

answered Jan 13, 2015 at 8:51

1 vote

Accepted

How to create a secure nonce for WSSE

answered Jul 1, 2015 at 8:44

1 vote

Are passwords comprised of key sequences on a keyboard any less secure than the same characters but jumbled up?

answered Jan 27, 2015 at 16:11

0 votes

Demonstrating SQL injection

answered Mar 6, 2015 at 8:28

0 votes

Detecting Hardware keyloggers... elegant solutions?

answered Jan 14, 2015 at 14:49

0 votes

Are credit card number look ups more secure with a hash function than with a deterministic encryption algorithm?

answered Jan 9, 2015 at 11:32

0 votes

How difficult is the USB firmware attack?

answered Aug 1, 2014 at 15:14

Stack Exchange Network

37 Answers

Is it possible the person sitting across from me at Starbucks was trying to hack my laptop?

This JavaScript code is injected on my hotel Wi-Fi: should I be worried?

Is SQL injection possible with LIMIT?

Should I be afraid of biometric IDs?

Storing plaintext passwords for cameras - Security concerns?

Break the popularity contest crypto

Protect against POST //cgi-bin/php attacks?

Is "password knocking" a good idea?

Is it legal to start a private website for you and your friends to hack?

Any problems with scrypt yet?

How to use a stolen cookie?

Can webpages using the Google plus button get my name?

One time passwords using Mobile phones

Unexpected emails have been sent - do I need to wipe my Android?

Security through obscurity - "https requests" are safe?

JavaScript Injection using Man in the Middle Attack

Intrusion Detected - OS Attack

Convincing my manager to use salts

How do I secure Apache against the Bash Shellshock vulnerability?

Is limiting access to a web script with .htaccess secure enough when that script can run arbitrary commands?

How do exploits and payloads work together?

Is there something similar to pseudorandom generators but in the opposite direction?

My site was hacked and the attacker got data from the config file

Passing session id in query string to maintain state in third party iframe - good practice?

How to create a secure nonce for WSSE

Are passwords comprised of key sequences on a keyboard any less secure than the same characters but jumbled up?

Demonstrating SQL injection

Detecting Hardware keyloggers... elegant solutions?

Are credit card number look ups more secure with a hash function than with a deterministic encryption algorithm?

How difficult is the USB firmware attack?