User Question Overflow

41 votes

3 answers

45k views

Is the HTTP TRACE method a security vulnerability?

asked Apr 30, 2014 at 9:46

38 votes

5 answers

46k views

Is HTML5 vibrate feature a security vulnerability?

asked Aug 2, 2015 at 10:20

21 votes

4 answers

42k views

Is it safe to store password in HTML5 sessionStorage?

asked Jun 5, 2013 at 3:34

20 votes

6 answers

60k views

How do I know if Google keyboard input is safe for use?

asked Feb 18, 2015 at 7:29

15 votes

4 answers

17k views

How do you find out if a phone is secretly sending private data to a remote server?

asked Aug 16, 2014 at 9:05

11 votes

1 answer

20k views

Is HTTPS over UDP secure?

asked Dec 14, 2014 at 2:59

9 votes

1 answer

4k views

Questions on reflected file download (RFD) attack

asked Oct 31, 2014 at 9:43

6 votes

2 answers

525 views

What security features should a smart TV have?

asked Mar 19, 2016 at 3:53

6 votes

2 answers

2k views

How does IP address spoofing of a bad address work?

asked May 17, 2014 at 1:55

5 votes

2 answers

900 views

How to trace source of clickjacking attack within a website using developer tools?

asked Aug 9, 2015 at 5:34

4 votes

4 answers

2k views

How should I defend against zero-day attack on SSH?

asked Aug 3, 2014 at 9:40

3 votes

1 answer

225 views

Is it possible to find out what a remote user is trying to do connecting to a closed port?

asked Jul 9, 2014 at 4:59

3 votes

2 answers

3k views

Is my ISP doing a port scan on my computer?

asked May 14, 2014 at 10:29

3 votes

4 answers

968 views

Why is it dangerous to stay logged in as root for an extended period of time?

asked Jan 20, 2014 at 10:44

2 votes

2 answers

861 views

A security checklist for choosing an internet hosting service provider for a virtual private server?

asked Oct 14, 2012 at 2:40

2 votes

1 answer

146 views

How to protect personal data requested by Certificate Authorities from data theft?

asked Jun 29, 2014 at 11:18

1 vote

2 answers

373 views

How does one decide whether to block malicious scanning activities?

asked Jan 21, 2014 at 6:09

1 vote

1 answer

906 views

How to secure data in a stolen raid disk?

asked Feb 7, 2014 at 3:53

0 votes

1 answer

198 views

Is encryption less resistant to brute-forcing compared to hashing?

asked Feb 16, 2014 at 2:49

0 votes

2 answers

649 views

How can I confirm that my server is protected against HeartBleed? [duplicate]

asked Apr 11, 2014 at 2:30

0 votes

3 answers

302 views

Is HTTPS necessary for password change if user has already logged in with HTTPS?

asked Apr 24, 2012 at 3:53

0 votes

1 answer

518 views

How does a website get pass my server firewall and attempt to hotlink to my server resources?

asked Dec 18, 2013 at 3:29

0 votes

2 answers

618 views

Is my service provider hacked and what can I do to protect myself?

asked Dec 21, 2013 at 3:36

0 votes

1 answer

317 views

Web browser initiating connection on non-standard ports. Should it be blocked?

asked Sep 7, 2014 at 9:23

0 votes

2 answers

2k views

Does Nmap requires a closed TCP port to do OS fingerprinting?

asked Sep 19, 2014 at 10:15

Stack Exchange Network

25 Questions

Is the HTTP TRACE method a security vulnerability?

Is HTML5 vibrate feature a security vulnerability?

Is it safe to store password in HTML5 sessionStorage?

How do I know if Google keyboard input is safe for use?

How do you find out if a phone is secretly sending private data to a remote server?

Is HTTPS over UDP secure?

Questions on reflected file download (RFD) attack

What security features should a smart TV have?

How does IP address spoofing of a bad address work?

How to trace source of clickjacking attack within a website using developer tools?

How should I defend against zero-day attack on SSH?

Is it possible to find out what a remote user is trying to do connecting to a closed port?

Is my ISP doing a port scan on my computer?

Why is it dangerous to stay logged in as root for an extended period of time?

A security checklist for choosing an internet hosting service provider for a virtual private server?

How to protect personal data requested by Certificate Authorities from data theft?

How does one decide whether to block malicious scanning activities?

How to secure data in a stolen raid disk?

Is encryption less resistant to brute-forcing compared to hashing?

How can I confirm that my server is protected against HeartBleed? [duplicate]

Is HTTPS necessary for password change if user has already logged in with HTTPS?

How does a website get pass my server firewall and attempt to hotlink to my server resources?

Is my service provider hacked and what can I do to protect myself?

Web browser initiating connection on non-standard ports. Should it be blocked?

Does Nmap requires a closed TCP port to do OS fingerprinting?