user avatar
user avatar
user avatar
GnP
  • Member for 7 years, 9 months
  • Last seen more than a month ago
46 votes
Accepted

Unable to understand why the web app is vulnerable to a Directory traversal attack

15 votes

Why is it a bad idea to use plain oauth2 for authentication?

6 votes

How secure is the native browser password autofill?

6 votes
Accepted

Does firefox sync master password?

4 votes

It's still possible to email spoofing to Google

4 votes
Accepted

How to identify L2 devices in a Wide Area Network?

4 votes
Accepted

Redirection HTTP to HTTPS, can I prevent giving away the URL?

4 votes
Accepted

What are the potential consequences of the Windows 10 "Golden Key" attack to end users, in simple terms?

4 votes

Is port in UDP flood necessary? HTTP flood-down because? UDP, SYN and ICMP flood methods

4 votes

Does Hibernate feature pose any security threat?

4 votes
Accepted

How it is dangerous that the ntp service listen to all IPs on Linux?

4 votes
Accepted

Safe to store API keys in session?

3 votes

How would replacing Bearer tokens with HMAC work in OAuth 2.0, and how would the client/server validate?

3 votes

AES use same Nonce security risk?

3 votes
Accepted

Using public/private key to validate multiple devices

3 votes

Shouldn't user content return 403 forbidden?

3 votes

Is RFC 3161 necessary?

3 votes

Different types of Tor bridges - implications for detection of Tor use

2 votes

VPN IP address leak while establishing connection

2 votes
Accepted

What measures can I take to secure a MacBook Pro connected directly to a modem with no router?

2 votes

At what point is a Bitlocker drive unlocked and how does additional pre boot pin add to security?

2 votes

Can heuristic analysis detect keylogging?

2 votes
Accepted

SSH key passphrase update and multiply locations

2 votes
Accepted

How should certificates be shared between a proxy and a frontend?

2 votes

Enabling virutalization, addressing the bluepill risk?

2 votes

Removing execute permissions on `/tmp` or mounting it with `noexec` flag?

2 votes

Public key or Private key

2 votes
Accepted

How to make user token and where to store it (server side)

2 votes

Application bypassing proxy setting

2 votes
Accepted

security of libgcrypt when cross-compiling for windows?