Anders

Sweden

I just did this for the badge. Look! I cracked the system!

top accounts reputation activity subscriptions

Help! My home PC has been infected by a virus! What do I do now?

malware virus antivirus antimalware virus-removal asked Oct 3, 2016 at 12:11

security.stackexchange.com

90 votes

What HTTP status code to return if multiple actions finish with different statuses?

api http asked Aug 29, 2016 at 12:47

softwareengineering.stackexchange.com

71 votes

How does the log4shell vulnerability work?

log4shell jndi asked Dec 14, 2021 at 13:47

security.stackexchange.com

52 votes

What actions should I, as an end user, take in response to EFAIL?

encryption email openpgp smime efail asked May 14, 2018 at 13:58

security.stackexchange.com

51 votes

Conditionally activate Material UI tooltip?

javascript reactjs tooltip material-ui asked Dec 3, 2018 at 10:25

stackoverflow.com

48 votes

Help! Ransomware encrypted my files. What do I do now?

malware virus ransomware asked Feb 14, 2020 at 7:59

security.stackexchange.com

32 votes

Explain to non tech savvy person how to check that your connection to mybank.com is safe?

tls banks user-education user-interface usability asked Feb 1, 2016 at 10:16

security.stackexchange.com

22 votes

How does a company like CloudFlare block bot crawling and email harvesters?

email bot cloudflare cdn asked Mar 3, 2016 at 8:54

security.stackexchange.com

21 votes

How to prevent directory traversal when joining paths in node.js?

web-application node.js directory-traversal asked May 19, 2016 at 11:52

security.stackexchange.com

19 votes

Is it OK to create very large tuples in Python?

python list collections tuples asked May 15, 2017 at 20:55

stackoverflow.com

Top Answers

317

Hacker used picture upload to get PHP code into my site

security.stackexchange.com

238

Why is Mother’s Maiden Name still used as a security question?

security.stackexchange.com

213

Someone is using my (or has the same) email

security.stackexchange.com

196

Is public Wi-Fi a threat nowadays?

security.stackexchange.com

174

Convince people not to share their password with trusted others

security.stackexchange.com

164

Why should I offer HTTP in addition to HTTPS?

security.stackexchange.com

161

Important data can be modified from the developer console. What should I do?

security.stackexchange.com

138

Defence methods against tailgating

security.stackexchange.com

133

Why are Let's Encrypt certificates accepted by default by browsers?

security.stackexchange.com

125

How to improve logic to check whether 4 boolean values match some cases

stackoverflow.com

122

Is it safe/wise to store a salt in the same field as the hashed password?

security.stackexchange.com

118

How can Twitter and GitHub be sure that they haven't been hacked?

security.stackexchange.com

111

Is HTML5 input pattern validation sufficient (or even relevant) for client-side validation?

security.stackexchange.com

109

Is it urgent to revoke the access to a private repo once a person has been mistakenly granted it and become aware of this?

security.stackexchange.com

104

Should I be concerned about strange, new iPhone app appearing after repair?

security.stackexchange.com

Does a CSRF cookie need to be HttpOnly?

security.stackexchange.com

How safe are wifi enabled talking toys?

security.stackexchange.com

Can cookies carry viruses?

security.stackexchange.com

Is the NHS wrong about passwords?

security.stackexchange.com

Roles to play when tailgaiting into a residential building

security.stackexchange.com

How to limit the impact of and reduce the risk of SQL injection for existing website?

security.stackexchange.com

How to decrypt .lock files from ransomeware on Windows

security.stackexchange.com

How many passwords is good for security?

security.stackexchange.com

Are leet passwords easily crackable?

security.stackexchange.com

How does the attacker know what algorithm and salt to use in a dictionary attack?

security.stackexchange.com

How are short passwords not safe if you limit the number of attempts?

security.stackexchange.com

Should I hash my passwords even if I am only allowed to generate limited traffic?

security.stackexchange.com

What's the difference between using HSTS and doing a 301 redirection?

security.stackexchange.com

Is using a DB prefix for tables more secure?

security.stackexchange.com

Is brute force a probable threat even if you enable CAPTCHA and rate limit logins?

security.stackexchange.com