|Enlightened||First to answer and accepted with score of 10 or more. This badge can be awarded multiple times.|
Thomas Pornin earned this badge 62 times
may 6 at 16:09Cleartext password in HTML
apr 18 at 12:11Can a dictionary attack crack a Diceware passphrase?
mar 30 at 17:45Reverse engineering and Java
mar 19 at 21:37TLS: RC4 or not RC4?
feb 25 at 16:25Is it secure to transfer an RSA public key by email?
feb 8 at 5:03Hidden directory with 0x0d0x0a
jan 28 at 16:39Does overlaying the mouse on a virtual numeric keyboard really protect against keyloggers?
jan 28 at 7:34PHP crypt() trims the salt as it would be too long
jan 24 at 19:04If email is insecure, why do we use it for password resets?
jan 21 at 23:43Attract Brute Force SSH Attacks
jan 17 at 8:06How would I implement “Broadcast Encryption”?
jan 13 at 8:48Should I be disabling Java?
dec 27 at 17:59Why is there no Domain CA?
dec 17 at 4:35What key exchange mechanism should be used in TLS?
dec 13 at 13:59Feistel Block Cipher
oct 19 at 10:12Doing a dictionary attack on RSA if you have the public key?
oct 10 at 15:17sniffing/recording GSM 3G signals
sep 11 at 20:32CRIME - How to beat the BEAST successor?
sep 6 at 14:50Does AES-192 provide better encryption than AES-256?
sep 3 at 21:39Understanding 2048 bit SSL and 256 bit encryption
may 24 '12 at 8:58What are the most common password salting methods?
may 9 '12 at 21:20Howto seed the PRNG in OpenSSL properly?
may 6 '12 at 8:37Which is the most vulnerable to MITM attacks, SSL or SSH?
mar 11 '12 at 11:30How many iterations of Rabin-Miller should be used to generate cryptographic safe primes?
feb 23 '12 at 12:48Encryption and the “security time decay” of prior encrypted data
jan 19 '12 at 19:26Are there more modern password hashing methods than bcrypt and scrypt?
jan 6 '12 at 18:15If an attacker is intercepting all of my traffic, will he be able to listen on my VPN session?
dec 17 '11 at 4:09Hubs, Switches, and Bridges - Flaws and Security Superiority
nov 27 '11 at 15:41Which SSL/TLS ciphers can be considered secure?
oct 17 '11 at 16:43Why are hand-written signatures still so commonly used?
oct 14 '11 at 22:29When unlocking an encrypted drive, how does the unlocking program know it was successful?
sep 22 '11 at 3:27How much security is compromised if we accept other characters as login (other than the original password)?
sep 11 '11 at 18:29Deleting a Java Object securely
sep 3 '11 at 13:09Using RFID-only on door lock to house?
aug 12 '11 at 19:13Evaluating the entropy gathering in a PRNG
aug 10 '11 at 22:56Is “real salt” the same as “initialization vectors”?
aug 5 '11 at 21:06Can RSA (or any public/private key algorithm) be repeated for large amounts of data?
aug 3 '11 at 12:48Native rsync protocol security
aug 2 '11 at 20:18What's the difference between SSL, TLS, and HTTPS?
jul 20 '11 at 20:32Which cipher suites with AES cipher provide forward secrecy?
jul 18 '11 at 19:37What is sandboxing?
jul 11 '11 at 16:42What are the problems with encrypted but unsigned data?
jul 7 '11 at 4:32Password Hashing add salt + pepper or is salt enough?
jun 21 '11 at 0:42Why is it always `HASH( salt + password )` that we recommend?
jun 19 '11 at 10:59Passive and active attacks via X11. Is Wayland any better?
jun 10 '11 at 4:17Is it a vulnerability to display exception messages in an error page?
jun 1 '11 at 9:18Are there any security problems with Google false start for TLS?
may 24 '11 at 19:01Is a rand from /dev/urandom secure for a login key?
may 12 '11 at 20:26It is safe to buy a domain if I get this message in Firefox?
apr 22 '11 at 13:58What are the good use cases for disk encryption?
apr 21 '11 at 16:12Collision rate for different hash algorithms