Skip to main content
Share Your Experience: Take the 2024 Developer Survey
Buffalo5ix's user avatar
Buffalo5ix's user avatar
Buffalo5ix's user avatar
Buffalo5ix
  • Member for 8 years, 7 months
  • Last seen more than 1 year ago
  • Sunnyvale, CA, USA
79 votes
Accepted

The most secure way to handle someone forgetting to verify their account?

75 votes

Is it ok to send plain-text password over HTTPS?

64 votes
Accepted

How to proceed with a white-hat hacker claiming a vulnerability?

8 votes

Username Enumeration in 2018 - How serious is this

7 votes
Accepted

How easy it is to actually perform MITM attack these days

7 votes

Why are phishing attempts so obvious?

6 votes

IoCs of Pegasus spyware penetration

4 votes

Is it ok to let someone unlock their own account with their admin account?

3 votes
Accepted

Unauthorized access to a page - when or if you should return 401 HTTP status code

2 votes
Accepted

Value of Physical Security Vulnerabilities to an Attacker

2 votes
Accepted

Is open RDP really dangerous?

2 votes

How to reset passwords without emailed reset link?

2 votes
Accepted

Secure password reset before authentication?

2 votes
Accepted

Anti-CSRF mechanism in a form changing password with an old password input is it required?

2 votes
Accepted

Sending a token with a request from one app to another

2 votes
Accepted

Understanding POST based XSS

1 vote

Can a school monitor my school laptop?

1 vote

Will SIM‐like PIN on website as second password increase security

1 vote

Blind XSS Payload for xml file?

1 vote

What security settings are likely used in Obama's Blackberry?

1 vote

Using a single application for user and admin (with different auth methods) vs separating them into two applications

1 vote

metasploit exploits and payloads documentation

1 vote

What are some important concepts to teach developers about cross-site scripting (XSS)?

1 vote

Is there an added risk in passing session token in message body?

0 votes

What full-disk secure erase solutions exist for SSDs (OS X)?

0 votes

Dynamic Application Security Testing (DAST) Scanner for Post Authentication