Skip to main content
Information Security
SilverlightFox's user avatar
SilverlightFox's user avatar
SilverlightFox's user avatar
SilverlightFox
  • Member for 12 years, 4 months
  • Last seen this week
Profile Activity
Stats
34,288
reputation
3.6m
reached
653
answers
44
questions
Communities
View all
About

Information security professional - OSCP and CREST Certified Penetration Tester.

To contact me, DM at https://twitter.com/RB256

My blog is at https://markitzeroday.com

If I downvote your post, I will tell you why I did it. I follow my downvotes, so if you correct it (or I am corrected), I will remove the downvote.

Badges
View all badges
6
gold badges
73
silver badges
191
bronze badges
Top tags
View all tags
442
Score
70
Posts
10
Posts %
435
Score
60
Posts
9
Posts %
338
Score
93
Posts
13
Posts %
320
Score
69
Posts
10
Posts %
318
Score
86
Posts
12
Posts %
234
Score
61
Posts
9
Posts %
Top posts
View all questions and answers
247
Why didn't OSes securely delete files right from the beginning? And why do they still not do this?
Jan 15, 2016
86
Is CORS helping in anyway against Cross-Site Forgery?
Aug 27, 2015
82
On two-step login forms, why is it the login name and not the password that's asked first?
Sep 9, 2015
78
How to implement “forgot password” functionality?
Mar 18, 2016
56
What are requirements for HMAC secret key?
Aug 7, 2015
46
Why should you redirect the user to a login page after a password reset?
Nov 10, 2015
40
Why does the SSL/TLS handshake have a client and server random?
May 16, 2015
39
How does a hacker know how many times a password was hashed?
Aug 28, 2015
36
New Gmail login system—going against conventional wisdom?
May 9, 2015
36
Should login and logout action have CSRF protection?
Jul 9, 2014
Top Meta posts
1
0
28
Are the wrong questions and answers getting too many upvotes?
Top network posts
View all network posts
360
Why is it common to put CSRF prevention tokens in cookies?
334
What's the point of the X-Requested-With header?
146
What is the difference between CORS and CSPs?
100
What is a "host only" cookie?
88
What 'sensitive information' could be disclosed when setting JsonRequestBehavior to AllowGet