user avatar
user avatar
user avatar
alexw
  • Member for 7 years, 3 months
  • Last seen more than a month ago
111 votes
9 answers
60k views

Is it safe to send clear usernames/passwords on a https connection to authenticate users?

  • 1,213
80 votes
10 answers
45k views

Generic error message for wrong password or username - is this really helpful?

  • 903
34 votes
6 answers
5k views

What is the point in having arbitrary username requirements?

28 votes
2 answers
2k views

Is there a real possibility of getting malware by “drive-by”?

  • 383
27 votes
3 answers
12k views

Rate limit login attempts: count by IP or username

7 votes
6 answers
6k views

Protecting an admin area from the public

  • 279
7 votes
3 answers
436 views

Is google saving clear text passwords? [closed]

  • 1,941
6 votes
1 answer
2k views

Showing bank routing/account numbers, and storing them safely

6 votes
3 answers
1k views

Is login limiting still needed if we employ multi-factor authentication?

  • 3,253
1 vote
2 answers
163 views

Logging in after password reset email sent (but not acted on)

  • 113