Badge
| Enlightened | First to answer and accepted with score of 10 or more. This badge can be awarded multiple times. |
Thomas Pornin earned this badge 62 times |
may 6 at 16:09
Cleartext password in HTML
apr 18 at 12:11
Can a dictionary attack crack a Diceware passphrase?
mar 30 at 17:45
Reverse engineering and Java
mar 19 at 21:37
TLS: RC4 or not RC4?
feb 25 at 16:25
Is it secure to transfer an RSA public key by email?
feb 8 at 5:03
Hidden directory with 0x0d0x0a
jan 28 at 16:39
Does overlaying the mouse on a virtual numeric keyboard really protect against keyloggers?
jan 28 at 7:34
PHP crypt() trims the salt as it would be too long
jan 24 at 19:04
If email is insecure, why do we use it for password resets?
jan 21 at 23:43
Attract Brute Force SSH Attacks
jan 17 at 8:06
How would I implement “Broadcast Encryption”?
jan 13 at 8:48
Should I be disabling Java?
dec 27 at 17:59
Why is there no Domain CA?
dec 17 at 4:35
What key exchange mechanism should be used in TLS?
dec 13 at 13:59
Feistel Block Cipher
oct 19 at 10:12
Doing a dictionary attack on RSA if you have the public key?
oct 10 at 15:17
sniffing/recording GSM 3G signals
sep 11 at 20:32
CRIME - How to beat the BEAST successor?
sep 6 at 14:50
Does AES-192 provide better encryption than AES-256?
sep 3 at 21:39
Understanding 2048 bit SSL and 256 bit encryption
may 24 '12 at 8:58
What are the most common password salting methods?
may 9 '12 at 21:20
Howto seed the PRNG in OpenSSL properly?
may 6 '12 at 8:37
Which is the most vulnerable to MITM attacks, SSL or SSH?
mar 11 '12 at 11:30
How many iterations of Rabin-Miller should be used to generate cryptographic safe primes?
feb 23 '12 at 12:48
Encryption and the “security time decay” of prior encrypted data
jan 19 '12 at 19:26
Are there more modern password hashing methods than bcrypt and scrypt?
jan 6 '12 at 18:15
If an attacker is intercepting all of my traffic, will he be able to listen on my VPN session?
dec 17 '11 at 4:09
Hubs, Switches, and Bridges - Flaws and Security Superiority
nov 27 '11 at 15:41
Which SSL/TLS ciphers can be considered secure?
oct 17 '11 at 16:43
Why are hand-written signatures still so commonly used?
oct 14 '11 at 22:29
When unlocking an encrypted drive, how does the unlocking program know it was successful?
sep 22 '11 at 3:27
How much security is compromised if we accept other characters as login (other than the original password)?
sep 11 '11 at 18:29
Deleting a Java Object securely
sep 3 '11 at 13:09
Using RFID-only on door lock to house?
aug 12 '11 at 19:13
Evaluating the entropy gathering in a PRNG
aug 10 '11 at 22:56
Is “real salt” the same as “initialization vectors”?
aug 5 '11 at 21:06
Can RSA (or any public/private key algorithm) be repeated for large amounts of data?
aug 3 '11 at 12:48
Native rsync protocol security
aug 2 '11 at 20:18
What's the difference between SSL, TLS, and HTTPS?
jul 20 '11 at 20:32
Which cipher suites with AES cipher provide forward secrecy?
jul 18 '11 at 19:37
What is sandboxing?
jul 11 '11 at 16:42
What are the problems with encrypted but unsigned data?
jul 7 '11 at 4:32
Password Hashing add salt + pepper or is salt enough?
jun 21 '11 at 0:42
Why is it always `HASH( salt + password )` that we recommend?
jun 19 '11 at 10:59
Passive and active attacks via X11. Is Wayland any better?
jun 10 '11 at 4:17
Is it a vulnerability to display exception messages in an error page?
jun 1 '11 at 9:18
Are there any security problems with Google false start for TLS?
may 24 '11 at 19:01
Is a rand from /dev/urandom secure for a login key?
may 12 '11 at 20:26
It is safe to buy a domain if I get this message in Firefox?
apr 22 '11 at 13:58
What are the good use cases for disk encryption?
apr 21 '11 at 16:12
Collision rate for different hash algorithms
