JimmyJames's user avatar
JimmyJames's user avatar
JimmyJames's user avatar
JimmyJames
  • Member for 8 years, 4 months
  • Last seen more than a week ago
  • Buffalo, NY
58 votes
Accepted

A government agency sent our website admin an email that our website had been defaced

27 votes

What pages are vulnerable to SQL injection?

18 votes

Why not use a national ID as username for every website?

13 votes

Would removing spaces in a string protect against SQL injection?

10 votes

How is it possible to get infected with malware by opening a file on a Mac or Windows machine?

8 votes

Reasons to distrust Let's Encrypt certificates

8 votes

How can I convince my boss that storing third party passwords in plaintext is a bad idea?

6 votes

Policy mandate dilemma

5 votes

Where to store Java keystore password?

5 votes

Employer wants me to install root certificate to work remotely - privacy concerns?

5 votes

If a container is compromised does that mean host also compromised?

4 votes

If no maximum length is placed on a password, can't collisions occur?

3 votes

When paying for something on line, is paying with a checking account less risky than paying with a credit card?

3 votes

Does a Smartphone contain all the essential properties of a Smartcard? If not, what is missing?

3 votes

Hiding sensitive data in URIs

2 votes

How insecure is FTP?

2 votes

JWT vs. Client Certificates

2 votes
Accepted

How to save passwords temporarily?

2 votes

Is it safe for web application to receive and parse emails?

2 votes
Accepted

Will quantum computing destroy all our present encryption?

1 vote

Reason for Subject name in an X.509 Certificate

1 vote

Sending sensitive information via self destructing link in an email

1 vote

How does one verify that a Python script is a pure math function?

1 vote

Java with LIS system

1 vote

Question - "D3 (js) allows you to bind arbitrary data to a DOM"

1 vote

How does Certificate Transparance detect fake or forked logs?

1 vote
Accepted

No put/delete in API, parametrized query, sanitized user input - enough for API security

1 vote
Accepted

2 vs 3 tier network architecture

1 vote

How is it that tools like Hashcat, JTR able to bruteforce an NTLMv2 hashes?

1 vote

Good analogy needed: Sec issues due to different coders implementing the same features in different ways for the same app