User Manishearth - Information Security Stack Exchange

Manishearth

Member for 11 years, 10 months
Last seen more than a month ago

Twitter
GitHub
manishearth.github.io
Berkeley, CA, United States

87 Answers

Score Activity Newest

60 votes

Accepted

Why can you bypass restricted WiFis by adding "?.jpg" to the URL?

answered Jan 28, 2013 at 19:31

40 votes

How can I protect my internet-connected devices from discovery by Shodan?

answered Apr 9, 2013 at 16:32

22 votes

Does disabling right click have any impact on security?

answered Feb 21, 2013 at 8:35

22 votes

Accepted

Security related code in Open Source projects?

answered Feb 16, 2014 at 18:36

21 votes

Accepted

Why are iframes allowed at all in modern browsers?

answered Feb 21, 2013 at 8:24

21 votes

How can I protect myself from this kind of clipboard abuse?

answered Jul 18, 2013 at 8:08

16 votes

No single quotes is allowed, Is this SQL Injection point still exploitable?

answered Jun 20, 2013 at 6:02

14 votes

Why isn't open WiFi encrypted?

answered May 14, 2013 at 5:50

14 votes

Accepted

Do I need to keep certificate signing requests and public keys?

answered Jun 24, 2013 at 15:40

14 votes

Accepted

Logging in a user after password reset via link

answered Feb 18, 2013 at 19:16

11 votes

Accepted

How to remember a trusted machine using two factor authentication (like Google's system)

answered Feb 22, 2013 at 12:22

10 votes

Accepted

Create a SSL certificate and sign it with a personal certificate which in turn is signed by a certificate authority

answered Mar 14, 2013 at 15:06

9 votes

SHA256 security: what does it mean that attacks have broken "46 of the 60 rounds of SHA256"?

answered Apr 12, 2013 at 15:18

8 votes

How is an ATM secure?

answered Mar 21, 2013 at 7:05

8 votes

Is there any security threat with open WiFi connection?

answered Apr 24, 2013 at 21:00

8 votes

Web & insecure HTTP - Using RSA for encrypting passwords on the client side

answered Apr 28, 2013 at 9:06

8 votes

Should the password field be cleared after an unsuccessful login attempt?

answered Jul 11, 2013 at 13:23

7 votes

Avoiding Brute Force Attacks in a Web Based Login Form

answered Apr 29, 2013 at 21:36

6 votes

Do users of non-latin character languages suffer from spyware and trojans?

answered Apr 29, 2013 at 21:29

6 votes

Can HTTPS server configured without a server certificate?

answered Jul 8, 2013 at 10:15

6 votes

I know the WPA-PSK secured wifi password, If I use the wifi, will I be caught?

answered Oct 2, 2013 at 5:54

6 votes

Accepted

Using GET to submit username/password?

answered Oct 7, 2013 at 16:45

5 votes

How do I protect myself from clickjacking attacks?

answered Dec 16, 2013 at 14:14

5 votes

How does this test prove my application is vulnerable to clickjacking attacks?

answered Jul 1, 2013 at 10:53

5 votes

Why are lengthy passwords stronger than complex ones?

answered Apr 28, 2013 at 20:08

5 votes

Use additional "password" in Referer to hide private site?

answered Apr 9, 2013 at 7:44

5 votes

Accepted

Secure login system - using sessions?

answered Apr 12, 2013 at 15:33

4 votes

Is it compulsory to have https on e-commerce site?

answered Apr 5, 2013 at 11:09

4 votes

How are large tech sites such as LivingSocial, Zappos, LinkedIn and Evernote hacked?

answered Apr 28, 2013 at 7:00

4 votes

Accepted

How can I set up signed downloads?

answered Feb 24, 2013 at 7:25

1