Manishearth's user avatar
Manishearth's user avatar
Manishearth's user avatar
Manishearth
  • Member for 11 years, 10 months
  • Last seen more than a month ago
107 votes
5 answers
59k views

Should websites be allowed to disable autocomplete on forms or fields?

51 votes
2 answers
11k views

Why aren't infinite-depth wildcard certificates allowed?

34 votes
7 answers
4k views

How do I educate others about social engineering?

17 votes
3 answers
16k views

How safe is Tor from MITM/snooping attacks?

16 votes
1 answer
1k views

Does Gibson's fingerprinting service add much additional security?

14 votes
5 answers
1k views

What is better, an established framework or a homebrew solution?

13 votes
4 answers
3k views

How do I protect myself from clickjacking attacks?

9 votes
2 answers
730 views

Are there any reasons why browsers should block mixed passive content by default?

7 votes
1 answer
373 views

Are there any situations when one can only mount a passive MITM?

6 votes
4 answers
1k views

Why do GUI terminals allow the pasting of control characters?

4 votes
2 answers
389 views

Does allowing the <cite> tag create any XSS vulnerabilities?

3 votes
1 answer
801 views

How should this system be protected from ARP spoofing?

1 vote
2 answers
183 views

Is there any point to keeping a "Verified by X" image on the page for a page secured by SSL?