User h4ckNinja

47 votes

Accepted

If "you can never trust the client", then why do companies such as Valve rely solely on client-side verification?

answered Feb 22, 2016 at 1:00

38 votes

What is the risk of copy and pasting Linux commands from a website? How can some commands be invisible?

answered Feb 14, 2016 at 19:40

30 votes

SQL injection is 17 years old. Why is it still around?

answered Jun 27, 2016 at 6:00

22 votes

Accepted

Hacker's code of ethics, does it exist?

answered Apr 17, 2016 at 23:36

10 votes

Accepted

Can nmap take a list of ports to scan from a file?

answered Jun 29, 2016 at 20:43

10 votes

What is Shikata Ga Nai

answered Jul 16, 2016 at 17:51

10 votes

Jump Servers for security

answered Jul 23, 2016 at 20:21

8 votes

Accepted

Is it safe to send the user's encrypted password back to them in the browser? Why?

answered Jun 20, 2016 at 5:05

8 votes

How is IRC so secure/untraceable that hackers and pirates use it to communicate?

answered Feb 14, 2016 at 0:54

8 votes

Yahoo Security Breach Affecting 500,000,000+ Accounts: Why would they believe it was "state-sponsored"?

answered Sep 23, 2016 at 2:58

6 votes

Accepted

Can there still be SQL injection when storing the password as a hash?

answered Apr 6, 2016 at 5:45

5 votes

CSS code can be seen through my browser. Is that a vulnerability?

answered Mar 3, 2016 at 4:53

5 votes

Accepted

Having a JWT that doesn't expire

answered Oct 5, 2019 at 17:49

4 votes

Block MAC address in PHP

answered Oct 20, 2016 at 2:01

4 votes

How does X-CSRF-Token work?

answered Mar 20, 2017 at 16:31

4 votes

How can I remove an unknown device from my wifi network?

answered Feb 22, 2016 at 1:59

4 votes

Does information security justifies Iphone 6's "error 53"?

answered Feb 13, 2016 at 4:21

4 votes

Mutual authentication of SFTP server

answered May 4, 2016 at 5:05

4 votes

What is the best way to perform penetration tests for free with and without software?

answered Feb 28, 2016 at 6:10

4 votes

Accepted

Incident response terminology

answered Jun 19, 2016 at 3:48

4 votes

Why use dedicated SSH keys for different hosts (like GitHub)?

answered Jun 24, 2016 at 1:59

4 votes

Accepted

Is it possible to reverse a MySQL5.0 password hash?

answered Jul 31, 2016 at 19:23

3 votes

Secure implementation of user login

answered Feb 14, 2016 at 16:36

3 votes

Accepted

Is logging a user out with CSRF a security issue?

answered Feb 17, 2016 at 5:25

3 votes

Can a curl request to an arbitrary url made sufficiently safe?

answered Feb 18, 2016 at 2:44

3 votes

How to create dictionary to prevent weak passwords?

answered Mar 8, 2016 at 2:36

3 votes

Accepted

When does a company need to hire a dedicated security specialist?

answered Dec 21, 2017 at 3:38

2 votes

Remote detection of spring framework

answered Mar 19, 2019 at 21:43

2 votes

I am leaving my company. I have been asked to leave my company laptop and a password to access it. What should i log out of

answered Aug 4, 2016 at 20:30

2 votes

Can PHP crash and expose source code?

answered Dec 4, 2016 at 1:38

Stack Exchange Network

47 Answers

If "you can never trust the client", then why do companies such as Valve rely solely on client-side verification?

What is the risk of copy and pasting Linux commands from a website? How can some commands be invisible?

SQL injection is 17 years old. Why is it still around?

Hacker's code of ethics, does it exist?

Can nmap take a list of ports to scan from a file?

What is Shikata Ga Nai

Jump Servers for security

Is it safe to send the user's encrypted password back to them in the browser? Why?

How is IRC so secure/untraceable that hackers and pirates use it to communicate?

Yahoo Security Breach Affecting 500,000,000+ Accounts: Why would they believe it was "state-sponsored"?

Can there still be SQL injection when storing the password as a hash?

CSS code can be seen through my browser. Is that a vulnerability?

Having a JWT that doesn't expire

Block MAC address in PHP

How does X-CSRF-Token work?

How can I remove an unknown device from my wifi network?

Does information security justifies Iphone 6's "error 53"?

Mutual authentication of SFTP server

What is the best way to perform penetration tests for free with and without software?

Incident response terminology

Why use dedicated SSH keys for different hosts (like GitHub)?

Is it possible to reverse a MySQL5.0 password hash?

Secure implementation of user login

Is logging a user out with CSRF a security issue?

Can a curl request to an arbitrary url made sufficiently safe?

How to create dictionary to prevent weak passwords?

When does a company need to hire a dedicated security specialist?

Remote detection of spring framework

I am leaving my company. I have been asked to leave my company laptop and a password to access it. What should i log out of

Can PHP crash and expose source code?