Manishearth's user avatar
Manishearth's user avatar
Manishearth's user avatar
Manishearth
  • Member for 12 years, 2 months
  • Last seen more than 1 year ago
107 votes
5 answers
59k views

Should websites be allowed to disable autocomplete on forms or fields?

17 votes
3 answers
17k views

How safe is Tor from MITM/snooping attacks?

51 votes
2 answers
11k views

Why aren't infinite-depth wildcard certificates allowed?

34 votes
7 answers
4k views

How do I educate others about social engineering?

13 votes
4 answers
3k views

How do I protect myself from clickjacking attacks?

6 votes
4 answers
1k views

Why do GUI terminals allow the pasting of control characters?

14 votes
5 answers
1k views

What is better, an established framework or a homebrew solution?

16 votes
1 answer
1k views

Does Gibson's fingerprinting service add much additional security?

3 votes
1 answer
820 views

How should this system be protected from ARP spoofing?

9 votes
2 answers
744 views

Are there any reasons why browsers should block mixed passive content by default?

4 votes
2 answers
405 views

Does allowing the <cite> tag create any XSS vulnerabilities?

7 votes
1 answer
387 views

Are there any situations when one can only mount a passive MITM?

1 vote
2 answers
196 views

Is there any point to keeping a "Verified by X" image on the page for a page secured by SSL?