Information Security
bobince's user avatar
bobince's user avatar
bobince's user avatar
bobince
  • Member for 11 years, 11 months
  • Last seen more than a month ago
Profile Activity

159 Answers

Score Activity Newest
129 votes
Accepted

Why refresh CSRF token per form request?

61 votes
Accepted

Is the Web browser status bar always trustable?

54 votes

Which is the best way to sanitize user input in PHP?

44 votes
Accepted

CSRF with JSON POST

33 votes
Accepted

Convince the company not to store credit card numbers in our webapp

29 votes

Is there a security reason for a site to limit the number of times a user can change their password?

24 votes
Accepted

Is it useful to protect hashed password with encryption?

23 votes
Accepted

Does setting httponly prevent stealing a session using XSS?

21 votes
Accepted

Why does this XSS vector work in svg but not in HTML?

21 votes

Is it standard practice to ask a customer to send a photo of their credit card to confirm their identity?

20 votes
Accepted

Exploits or other security risks with SVG upload?

19 votes
Accepted

When registering for most websites, why do you need to confirm your email address?

18 votes

New payment option on Paypal "Enter your online banking ID + password": Any mechanism that could make this safe?

17 votes

Is showing your IP address in the URL a bad practice?

17 votes
Accepted

Why doesn't the same origin policy block get requests that contain arguments?

16 votes

Why is passing the session id as url parameter insecure?

16 votes
Accepted

Is it possible to do SQL injection (HIGH Level) on Damn Vulnerable Web App?

15 votes
Accepted

Specific risks of embedding an HTTPS iframe in an HTTP page

15 votes
Accepted

How secure is this php code against SQL injection?

14 votes
Accepted

Unknown Asian/Chinese registry keys

12 votes
Accepted

How to remove ssh rootkits?

12 votes
Accepted

What typically is the expiration date of a session cookie?

11 votes

Is there a way to bypass Django's XSS escaping with "unicode"?

11 votes
Accepted

What does scorecardsresearch.com/beacon.js - added by Disqus.com - do?

11 votes

Is it safe to serve any user uploaded file under only white-listed MIME content types?

11 votes

How would you analyze an image to find out if there are scripts embedded in it?

11 votes
Accepted

Regedit shows strange chinese characters in my system - should I be worried?

10 votes
Accepted

is 'mysql_real_escape_string' enough

10 votes

What are these URLs in my browsers?

9 votes

Why should one not use SSL?

1
2 3 4 5 6

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.