Skip to main content
Share Your Experience: Take the 2024 Developer Survey
Silver's user avatar
Silver's user avatar
Silver's user avatar
Silver
  • Member for 8 years, 6 months
  • Last seen more than a month ago
  • Belgium
34 votes

Is it unsafe to show message that username/account does not exist at login?

32 votes

Is displaying remaining password retry count a security risk?

22 votes

Why does Sage Ransomeware blacklist League of Legends, steamapps, etc.?

16 votes

What extra security does a 2-step website login process with a PIN provide?

7 votes

Is a session token enough for critical applications

6 votes
Accepted

Should firmware images for IoT be encrypted for security reasons?

4 votes

I've been hacked what do I do?

3 votes

Adding "Email or Username" in login page, is it safe?

3 votes

SSH version outdated - closing port enough?

3 votes

Which algorithm for login throttling

3 votes
Accepted

Crack Putty Private Key (PPK)

2 votes

How can you access a Facebook account if you know the access token?

2 votes
Accepted

How to only send hashed passwords while not storing passwords in plaintext on the sever?

2 votes
Accepted

brute force ssh account with key-pair authentication?

2 votes

How long should a shared link (token in the URL) be?

1 vote
Accepted

Is session expiration for all web applications possible?

1 vote

How can I detect if IETF TokenBinding is in use for bearer tokens?

1 vote

How secure is the hashing/salting/stretching process as described in this diagram?

1 vote
Accepted

LAN access from remote router logs

1 vote

Best way to use http get with php server for mobile app

1 vote

How do JavaScript (and mobile) APIs keep user data clean?

1 vote
Accepted

Techniques used by highly sophisticated entities to snoop on VPN or SSH traffic?

1 vote

bcrypt cost 10/12/14 brute force time?

1 vote

X-Content-Type-Options without content-type

1 vote

Account lockout policy guidelines

1 vote

GitHub pages and same origin

1 vote
Accepted

CISCO VPN Client - Gateway's fingerprint has changed - what is the risk of simply accepting the change?

1 vote

Is it safe to encrypt my password with the password itself?

0 votes

Does factory resetting a phone erase spyware?

0 votes

Android device leaks SSIDs