user avatar
user avatar
user avatar
Andreas Arnold
  • Member for 11 years, 9 months
  • Last seen more than 5 years ago
  • Switzerland
27 votes

What is the correct way to implement anti-CSRF form tokens?

25 votes
Accepted

Getting a Root CA accepted in systems and browsers

13 votes
Accepted

Is there a real risk of exploitation in java code where a null pointer is dereferenced

9 votes

How does Convergence (CA replacement) prevent its notaries from being MITM'd as well?

8 votes

Should RSA public exponent be only in {3, 5, 17, 257 or 65537} due to security considerations?

8 votes

How do the root servers get updated with my name server? Is WhoIS information always in sync with the root?

7 votes

Why do people say that PHP is inherently insecure?

6 votes

What are security issues which are specific to cloud computing?

6 votes

How to do Ajax securely?

6 votes
Accepted

What boxed solutions exist for taking care of Authentication? Mostly focused around websites

5 votes

Why do we authenticate by prompting a user to enter both username and password? Does prompting the password only suffice?

5 votes
Accepted

URL redirection vulnerability

4 votes

Is "untrusted code" reported by DOM Snitch a vulnerability?

3 votes

Resources to learn about security

2 votes

Robots.txt security strategy?

1 vote

Removing Google Analytics cookie string from URL - security hole?

1 vote

Automated tools vs. Manual reviews